Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/onm1kAhuJOFHdT0XekA1zLnyTV8.roa
File:                     onm1kAhuJOFHdT0XekA1zLnyTV8.roa (raw, json)
Hash identifier:          k96CRLj5N9I4wWB5YBeDmeMg584jQ0jXQLr/JMRrLRc=
Subject key identifier:   A2:79:B5:90:08:6E:24:E1:47:75:3D:17:7A:40:35:CC:B9:F2:4D:5F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0547
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/onm1kAhuJOFHdT0XekA1zLnyTV8.roa
Signing time:             Tue 31 Mar 2026 08:19:46 +0000
ROA not before:           Tue 31 Mar 2026 08:19:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.2.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A279B590086E24E147753D177A4035CCB9F24D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:2c:4a:31:90:21:58:2d:96:2e:da:55:02:
                    f4:56:a1:41:54:91:e4:9d:3e:fd:68:3a:50:e0:e6:
                    37:35:b7:23:65:eb:4d:c1:55:70:0d:7d:5a:fc:83:
                    cf:50:85:87:61:2b:26:a7:eb:1a:c5:6b:ab:1b:66:
                    29:e5:94:0e:9f:4b:57:aa:14:e6:e1:f2:6e:2f:d2:
                    09:3b:61:c5:19:58:c1:20:db:f8:12:f9:41:74:2c:
                    22:cc:b5:95:94:de:d3:ab:bd:4b:41:33:bd:f6:d4:
                    57:9c:94:aa:08:f1:2a:56:79:4c:19:8c:4b:2f:36:
                    59:ae:7c:85:c4:2a:4f:8a:7b:ac:58:43:12:df:93:
                    c5:56:b2:9e:64:d1:da:c5:62:b1:7b:9e:95:ae:2f:
                    3f:ce:59:af:4b:13:2d:e6:28:0f:0d:ee:a2:1e:4a:
                    c9:cd:2e:94:14:5f:ce:23:d0:ec:14:fb:49:89:f6:
                    13:0a:74:58:67:16:3d:54:24:e5:6e:b0:a4:89:a6:
                    42:33:3b:70:97:bb:2c:a0:d2:7c:67:4c:f0:03:51:
                    3b:c4:58:02:7e:80:59:67:29:c1:d2:80:59:e3:75:
                    be:81:d8:0e:fa:ba:91:f2:2c:bc:25:4d:29:7e:5e:
                    e3:af:1c:a7:75:52:95:9b:40:7f:39:03:03:27:59:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:B5:90:08:6E:24:E1:47:75:3D:17:7A:40:35:CC:B9:F2:4D:5F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/onm1kAhuJOFHdT0XekA1zLnyTV8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:27:74:44:f3:c7:54:0f:d5:76:d7:b4:c5:00:07:f8:b1:
         dd:74:be:2c:a6:2b:2d:ec:72:b7:b9:8d:a1:9c:70:0e:23:8c:
         70:54:05:54:4c:c0:c4:ea:d0:54:28:c7:0d:81:72:af:70:b1:
         64:97:9e:c5:f2:fa:21:09:d7:00:4a:3c:82:53:c5:8c:c5:ee:
         57:b6:39:9d:6e:05:bb:01:8d:6e:12:d9:85:ce:a6:3f:ea:74:
         c5:26:7d:f4:f6:17:30:c1:b0:a4:fd:da:74:80:2c:e8:8a:e0:
         08:e3:c3:bd:a0:50:be:5a:8e:0f:8d:aa:bc:08:e2:87:2a:e1:
         68:62:d6:55:0b:d9:7b:69:96:26:74:4a:51:bd:7d:38:64:c4:
         aa:34:d6:b4:c0:64:74:8b:43:08:90:ac:d0:7e:c3:fb:86:b8:
         1c:ae:32:d8:b0:9e:94:25:cd:54:d6:76:3d:b9:82:50:cb:e9:
         95:e8:cb:ea:8c:9a:2e:a9:de:59:87:13:d3:65:dc:a6:1f:00:
         fc:7c:01:01:12:a7:94:dd:b2:7f:69:9d:a6:b5:1d:df:e9:62:
         68:d2:e3:d2:a5:3a:f1:78:7a:8b:c2:f7:0b:11:24:b8:4a:18:
         6b:f6:05:fd:f1:6e:49:f6:97:e9:f5:3a:1d:2a:49:7a:b2:04:
         70:96:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:21 2026 by rpki-client