Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/sefDGOSXvlz8EnHp-LqBqKEGzA4.roa
File:                     sefDGOSXvlz8EnHp-LqBqKEGzA4.roa (raw, json)
Hash identifier:          QF9pjDu/cPxfeiW1qKySTg0bgrKdKFL4pviM0nOU8PI=
Subject key identifier:   B1:E7:C3:18:E4:97:BE:5C:FC:12:71:E9:F8:BA:81:A8:A1:06:CC:0E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05D9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sefDGOSXvlz8EnHp-LqBqKEGzA4.roa
Signing time:             Tue 31 Mar 2026 08:20:56 +0000
ROA not before:           Tue 31 Mar 2026 08:20:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B1E7C318E497BE5CFC1271E9F8BA81A8A106CC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:64:6e:1b:21:3e:a2:e8:0d:be:c8:f5:ba:
                    bd:8c:23:c7:1d:8b:f2:df:c3:ea:33:b1:de:73:02:
                    27:bd:dc:1c:b1:d6:cd:a5:80:58:a7:5e:6f:89:99:
                    6d:12:08:f2:27:a4:f2:69:55:b9:97:47:2f:7d:f3:
                    0f:19:5c:82:48:a2:37:a6:5a:c1:c9:3f:c2:e9:dc:
                    5e:bf:65:9e:01:1b:ea:87:55:5b:d2:d6:f1:fa:9f:
                    04:c0:fe:31:d9:5b:0c:e2:64:90:07:85:09:90:83:
                    04:d0:3d:73:83:a3:7b:2e:68:9b:69:67:5b:73:16:
                    5e:d4:47:5e:96:f2:b3:10:85:d7:35:9b:2c:cb:7e:
                    75:97:e6:e7:9d:a2:4f:27:99:2f:89:a8:46:8f:6f:
                    e4:0f:bf:fb:c8:be:d5:c4:84:2e:1a:48:eb:f4:85:
                    8d:6f:5a:b2:1c:fc:06:10:57:76:63:ea:2c:52:ec:
                    b2:d7:87:9e:3e:ce:88:a9:a8:c9:55:b3:60:e3:59:
                    be:05:61:b9:25:db:c7:65:1b:01:4b:c9:fe:5b:2f:
                    32:a5:6c:f0:86:56:52:11:fd:2d:fb:ae:ac:c9:8d:
                    00:c2:ae:ab:b4:64:c0:0b:94:a6:ff:d8:0e:5d:c0:
                    b7:fd:42:64:75:f5:a1:79:71:59:8c:6a:68:d7:9e:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E7:C3:18:E4:97:BE:5C:FC:12:71:E9:F8:BA:81:A8:A1:06:CC:0E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sefDGOSXvlz8EnHp-LqBqKEGzA4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:32:77:f7:ee:1e:dd:1f:00:17:75:8b:b7:f1:0c:f2:f5:
         5b:06:cb:c6:d1:69:ce:dd:a1:ef:69:de:fa:97:cb:40:6b:00:
         d0:88:cf:09:71:ac:17:f5:5c:8e:1f:50:5e:2b:ab:6f:f1:17:
         71:81:c8:ea:78:66:24:52:b9:bc:be:b0:42:06:12:35:84:ce:
         19:be:05:77:f6:88:ff:d4:4a:3e:2e:7f:18:31:b8:10:a8:a2:
         69:70:99:86:f0:89:00:82:0c:71:32:05:3b:08:78:b6:84:de:
         69:85:a6:f7:6d:67:63:d5:a0:54:cd:6c:90:73:03:49:4d:91:
         52:a4:ce:39:49:08:59:b4:10:7d:ec:9e:e7:9f:6e:1c:1b:29:
         03:cb:ef:01:1e:bd:39:e7:3b:d9:aa:1d:37:09:39:59:8c:16:
         a7:40:83:f4:66:8d:a7:b1:63:74:22:22:e4:84:91:5b:87:e5:
         4e:11:5e:6d:d3:f3:c2:cf:2e:ba:ee:b7:62:69:4d:f0:91:63:
         c8:b4:52:23:14:03:c3:1b:c4:95:4f:26:8e:f6:fc:86:ce:e9:
         14:60:2c:e5:bf:ed:1e:68:70:d5:22:9f:fc:12:1d:d2:a8:ef:
         8d:5d:11:4b:43:8a:74:3c:9f:24:a1:dc:78:24:fa:50:2a:56:
         16:20:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:21 2026 by rpki-client