Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/p49vfGOmYzF4J23GBwOEw9rPkHc.roa
File:                     p49vfGOmYzF4J23GBwOEw9rPkHc.roa (raw, json)
Hash identifier:          YLSl4SDC72xy/8xbTV5bNMYU3FWuQjd7oIHSQV+EKVw=
Subject key identifier:   A7:8F:6F:7C:63:A6:63:31:78:27:6D:C6:07:03:84:C3:DA:CF:90:77
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05B5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/p49vfGOmYzF4J23GBwOEw9rPkHc.roa
Signing time:             Tue 31 Mar 2026 08:20:40 +0000
ROA not before:           Tue 31 Mar 2026 08:20:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.135.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A78F6F7C63A6633178276DC6070384C3DACF9077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:96:c1:72:15:5e:20:af:6d:4e:57:fe:e3:
                    d1:65:2d:63:fd:d8:5d:7b:74:e3:78:8e:b1:aa:03:
                    cd:fd:2c:a3:b9:25:fc:72:f8:eb:c8:bb:3b:98:7a:
                    69:66:50:06:4f:84:6e:0f:aa:b5:d0:53:c9:7e:f2:
                    6c:69:b1:2e:2d:06:1f:97:e6:b5:f0:a1:ab:2c:cc:
                    63:8e:dd:33:bb:75:66:56:12:54:78:46:f7:77:89:
                    8e:e2:07:45:6e:c8:48:c1:e8:11:8c:e7:26:d7:43:
                    1f:33:de:ba:1f:cb:48:5c:d8:13:87:af:e9:de:f0:
                    0d:49:84:28:50:cf:5c:21:ef:94:7e:b2:65:d4:64:
                    88:fa:fd:8e:70:d6:26:1e:d8:4f:55:99:24:21:d6:
                    05:8f:48:5a:19:db:9c:7d:4a:05:fb:31:81:81:ec:
                    55:ae:65:30:46:e9:f5:1a:7d:c0:85:33:b4:ed:4d:
                    70:d9:1a:a7:6a:40:c3:b5:66:ec:f9:2f:a1:17:b3:
                    ee:86:4d:bb:09:7f:b6:a1:4a:08:be:5c:c5:9f:61:
                    35:00:9d:d9:75:c9:cd:50:dc:41:15:42:8a:4c:a1:
                    a5:68:67:37:76:5a:66:e8:ff:57:3b:90:82:40:e3:
                    63:6b:13:08:2b:ed:75:88:93:14:05:95:17:d4:bf:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8F:6F:7C:63:A6:63:31:78:27:6D:C6:07:03:84:C3:DA:CF:90:77
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/p49vfGOmYzF4J23GBwOEw9rPkHc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:95:2e:83:b1:c5:70:c0:ff:f7:49:61:1c:a7:84:b9:39:3c:
         75:dc:aa:9b:ad:38:33:f9:d3:0b:99:ab:c1:7d:55:f5:83:4e:
         53:eb:49:9c:36:4d:bb:11:c0:d7:8d:38:8a:c0:6e:f7:1f:21:
         e9:6d:19:ca:a2:53:8e:fe:28:da:6a:59:47:50:a5:6a:41:9a:
         0f:50:1d:6f:51:e9:0f:f7:74:21:5b:85:5e:5c:cd:af:01:80:
         7c:7d:f1:29:91:53:67:95:eb:28:c3:60:42:50:48:71:7f:2e:
         59:5b:57:0a:31:bc:37:f0:12:4e:d7:c0:d4:8c:8f:08:ab:51:
         4e:55:ff:5a:0d:c4:8b:80:ea:ff:b8:01:5e:8e:9f:19:ad:a8:
         ff:d5:c1:f4:39:22:a9:46:a1:5f:3f:a4:7e:9b:3b:b7:a4:4e:
         f9:89:04:36:f7:bf:31:9c:b5:7d:2b:fc:9a:22:0b:8d:58:d5:
         01:c6:da:a3:ae:c6:5c:8c:3a:0c:c8:3c:83:26:0d:fe:55:29:
         db:c1:0a:f8:ec:2a:71:ac:90:0e:68:67:8e:34:c1:23:ae:c0:
         9a:9f:cb:9b:71:de:10:83:07:fd:58:75:f3:4b:98:55:d9:8b:
         62:ec:41:ed:3b:cd:db:f5:fd:1f:5b:7f:bf:81:20:b1:68:61:
         d8:dc:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:21 2026 by rpki-client