Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oogdD-Vs-k77iKk_dFzd0ujWQUY.roa
File:                     oogdD-Vs-k77iKk_dFzd0ujWQUY.roa (raw, json)
Hash identifier:          +APNP2zSTkY4apjC2noEI+HW8DHgyn6lV82dFkJo7+4=
Subject key identifier:   A2:88:1D:0F:E5:6C:FA:4E:FB:88:A9:3F:74:5C:DD:D2:E8:D6:41:46
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0604
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oogdD-Vs-k77iKk_dFzd0ujWQUY.roa
Signing time:             Tue 31 Mar 2026 08:21:20 +0000
ROA not before:           Tue 31 Mar 2026 08:21:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.195.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A2881D0FE56CFA4EFB88A93F745CDDD2E8D64146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:ee:69:b3:fb:dd:99:b8:8a:5c:1c:7b:bb:
                    08:e4:bb:9f:3e:87:4d:08:b1:f2:f4:3e:51:fc:3f:
                    e2:50:ea:d9:93:94:96:34:63:63:8c:54:ca:7b:50:
                    2f:5a:55:ae:87:8e:71:82:2e:cc:54:3d:29:4f:ce:
                    63:0a:51:51:79:61:a7:9f:03:93:a0:9e:d4:a7:be:
                    f4:cb:d4:75:e4:85:58:e0:07:96:7a:e2:c6:d4:71:
                    23:f7:82:e7:9d:30:ce:c0:9c:da:52:d4:a7:a1:e5:
                    0c:93:ea:88:e3:21:ea:4c:0a:46:45:ce:ec:ec:ee:
                    93:19:c6:ae:a5:1f:41:ff:f1:ba:9d:2a:28:73:40:
                    6d:46:ec:05:e6:30:00:9a:5c:d0:bd:46:c1:ef:3a:
                    73:b2:dd:c6:3a:39:3d:31:98:a7:d6:77:30:61:f6:
                    8c:a6:0c:f0:52:74:b1:13:6e:38:d8:7f:6b:ee:5c:
                    61:f1:c7:14:a5:93:0b:85:81:7b:d4:a0:ec:30:50:
                    ac:9a:dc:43:37:c5:32:c2:50:40:1a:cd:42:3f:55:
                    b8:ca:89:e6:73:0b:60:df:d1:10:40:93:13:a8:8a:
                    c4:74:61:51:2e:88:17:ee:69:62:cd:e8:4a:ce:10:
                    d7:63:c3:4a:14:50:75:14:2a:fa:f6:28:27:cd:60:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:88:1D:0F:E5:6C:FA:4E:FB:88:A9:3F:74:5C:DD:D2:E8:D6:41:46
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oogdD-Vs-k77iKk_dFzd0ujWQUY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:1e:22:8e:0e:ad:55:3f:e9:27:9a:12:5f:f8:89:28:f7:
         b9:2f:c2:ee:e1:36:43:77:34:67:ba:92:ba:eb:04:86:c5:b2:
         db:9e:8d:28:91:99:22:e6:e3:ea:04:40:36:10:f8:3a:e1:5f:
         d6:fe:08:45:9e:b1:fd:2d:4d:cd:a4:22:17:cc:66:af:94:6d:
         73:c2:c8:bd:7b:ba:d3:ef:68:ab:f4:95:c5:05:64:b6:5d:ed:
         b6:13:44:19:34:36:bb:37:bf:f4:b1:d8:52:c7:f9:a8:5a:bd:
         66:c4:f2:8d:db:d5:cb:69:08:6d:29:55:7c:31:6e:b0:34:ce:
         74:c3:1f:37:b3:88:67:33:0c:c4:56:ff:ca:4a:6b:0d:f7:d7:
         ef:5f:7d:58:80:07:30:4e:77:1c:63:94:90:35:2d:d5:c2:9b:
         02:17:a6:d0:9a:c2:64:7a:53:81:a4:b6:c8:c6:e4:59:02:60:
         87:23:fa:ac:9e:e6:fe:56:4a:df:b4:fd:19:84:55:7a:c7:a4:
         68:28:71:21:41:8e:86:b5:7f:c3:06:34:d5:f8:19:e7:90:aa:
         04:bf:28:14:e2:5b:00:40:25:b9:e9:61:59:ac:17:e6:0f:da:
         03:39:f6:cf:67:34:c6:d8:17:95:8e:31:bd:1d:f2:b8:2f:96:
         77:f8:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:35 2026 by rpki-client