Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pAXuxizGoxWFHQ_a6pZJfHSZR3k.roa
File:                     pAXuxizGoxWFHQ_a6pZJfHSZR3k.roa (raw, json)
Hash identifier:          a1NbCIHEJ6SLd5rKJ8xv52iokhenkqieENLGcoqEdyM=
Subject key identifier:   A4:05:EE:C6:2C:C6:A3:15:85:1D:0F:DA:EA:96:49:7C:74:99:47:79
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0622
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pAXuxizGoxWFHQ_a6pZJfHSZR3k.roa
Signing time:             Tue 31 Mar 2026 08:21:32 +0000
ROA not before:           Tue 31 Mar 2026 08:21:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.229.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A405EEC62CC6A315851D0FDAEA96497C74994779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d0:94:78:05:97:58:fb:54:c7:44:51:09:ed:
                    7e:0d:14:94:c3:47:dc:02:02:72:f9:c9:f2:2a:be:
                    59:3b:18:7d:38:27:27:9e:03:84:20:9e:7c:45:94:
                    da:8b:61:29:c8:3a:7a:bc:8e:41:f9:65:92:8a:c7:
                    50:14:8e:d9:15:55:11:49:7b:0e:e2:49:6e:d5:12:
                    83:7b:f3:78:4d:5b:ad:f1:15:82:36:02:ce:e5:f7:
                    6d:04:a4:d8:9d:12:79:35:86:3c:e9:89:82:13:92:
                    4f:0a:09:24:bb:25:4b:20:8d:a3:5e:f2:4b:5b:67:
                    2a:e5:cc:93:d7:b4:a5:a1:52:49:66:a9:56:c6:b9:
                    a4:0e:f9:31:ab:be:6d:93:0b:2e:ff:ba:6f:27:f2:
                    39:5e:49:a6:a0:46:b9:5e:c2:91:f9:44:5d:a1:92:
                    06:4f:8e:75:4e:09:c9:2f:a0:e5:c1:0a:21:a1:85:
                    8a:5d:e4:3d:fe:f8:58:4e:9e:9b:dc:f6:0f:41:da:
                    58:b1:de:e9:1b:d9:7b:4d:16:08:99:d5:fe:f9:1d:
                    4f:46:7f:0a:a7:9f:04:a8:e5:70:56:56:1a:73:81:
                    8a:8c:33:50:14:0b:ef:53:15:90:4c:20:2d:8e:a6:
                    8b:ae:76:90:fd:72:5c:3d:a3:79:8b:9e:da:10:b2:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:05:EE:C6:2C:C6:A3:15:85:1D:0F:DA:EA:96:49:7C:74:99:47:79
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pAXuxizGoxWFHQ_a6pZJfHSZR3k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:de:1e:ac:89:1c:6b:4b:51:10:23:0e:23:a1:0e:78:10:95:
         c9:ce:42:c4:84:f7:86:48:33:5d:50:69:1b:bf:50:d5:4f:8d:
         23:cc:4f:b5:0f:4b:a1:1c:91:11:6f:53:7d:d9:c9:d6:41:c5:
         5a:ac:a2:68:e5:85:3b:82:d0:82:49:ee:33:be:ae:97:52:ab:
         3d:ff:52:1b:00:6c:c7:20:07:56:0b:16:a3:9d:97:26:05:5b:
         e9:fc:b0:b5:c9:d1:6a:0d:3b:58:5e:14:74:73:8f:5e:f9:ae:
         47:41:05:de:3a:8d:84:90:35:25:9e:c7:b9:d5:00:87:03:2d:
         28:71:95:e1:4e:16:22:63:06:dd:f7:54:8d:f5:6e:9b:a9:62:
         06:85:cb:8b:86:64:12:3f:f0:79:65:98:22:a7:a3:84:76:bc:
         e1:85:49:c2:fe:d5:e3:fa:0f:bd:1d:eb:b0:72:68:83:f8:00:
         f3:79:1e:93:0a:ce:fd:e1:fa:2c:5a:08:77:1d:05:ff:29:d5:
         57:71:b3:32:7d:a3:c8:ac:b3:ae:fd:f7:18:18:8c:88:2c:f4:
         aa:54:08:17:aa:a8:64:bd:db:0f:2d:13:1f:cb:75:45:37:3d:
         1b:ee:04:c8:10:4b:31:ff:cb:61:cd:e4:27:8b:0c:e8:fc:ec:
         bf:8e:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:14 2026 by rpki-client