Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/tuyfM1-V7seh4FxCNU4ERvGetPo.roa
File:                     tuyfM1-V7seh4FxCNU4ERvGetPo.roa (raw, json)
Hash identifier:          92tlfW5rpPtfAHCh5Cto5YQpZQhyvJnh0U1WITQ3cYU=
Subject key identifier:   B6:EC:9F:33:5F:95:EE:C7:A1:E0:5C:42:35:4E:04:46:F1:9E:B4:FA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05B0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tuyfM1-V7seh4FxCNU4ERvGetPo.roa
Signing time:             Tue 31 Mar 2026 08:20:39 +0000
ROA not before:           Tue 31 Mar 2026 08:20:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.133.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6EC9F335F95EEC7A1E05C42354E0446F19EB4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:be:0d:7c:a1:0d:58:00:d3:7e:3a:cc:8d:
                    05:e0:d6:b3:40:77:41:e9:54:f0:bf:60:b5:f0:a1:
                    0a:84:98:3a:fc:fa:58:6b:6e:26:c4:0e:96:d0:67:
                    c2:46:bd:81:2c:8c:dd:67:47:6d:c8:51:7a:fa:b6:
                    1c:57:c7:18:f2:8e:1b:cd:0b:48:31:f1:23:16:a4:
                    49:f4:d0:7a:05:40:7d:ce:8e:7e:0f:ba:6d:5f:1c:
                    dc:40:4b:36:70:ef:8f:48:ba:27:22:c0:be:cc:f8:
                    33:10:26:04:8a:e7:86:35:14:32:be:61:db:e4:bd:
                    d2:db:f4:7f:ac:c3:e7:7c:f0:50:1f:fa:a2:46:30:
                    e8:ac:76:9d:d9:73:e2:09:e9:f0:48:ee:6f:f6:37:
                    17:9b:2b:f3:7c:f1:3e:e7:ff:9c:ca:26:64:12:ea:
                    bc:af:9a:76:21:60:cc:7f:3a:ed:3d:c3:62:1a:18:
                    6a:f2:a7:34:92:06:ae:44:c9:e9:37:db:49:fd:94:
                    5b:f8:25:f0:e9:9b:22:05:2c:70:e6:ae:74:89:14:
                    bc:d2:79:d6:5a:e1:37:6b:33:8b:ce:19:f0:49:0a:
                    f7:b7:c6:c5:ff:2d:0e:01:e5:2f:d0:ff:76:bc:20:
                    a3:26:ba:51:59:49:d2:a1:8e:da:ca:ee:22:59:1f:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:9F:33:5F:95:EE:C7:A1:E0:5C:42:35:4E:04:46:F1:9E:B4:FA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tuyfM1-V7seh4FxCNU4ERvGetPo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:fe:4a:fd:51:8c:63:de:7f:3c:f6:b3:7f:2d:06:1a:f2:4a:
         f4:66:19:c8:24:39:d6:d6:84:1d:5e:7e:4c:a0:c2:db:00:0e:
         d0:b6:7d:67:6c:8b:68:27:35:d5:c8:93:99:64:60:3f:8c:49:
         f9:4f:d6:9e:72:ce:5e:21:1b:4e:55:a1:18:76:d9:0c:27:0a:
         83:5b:17:7f:4c:f8:df:cb:f1:81:24:f0:13:93:7b:8c:95:97:
         18:2b:e5:78:72:cb:ae:bc:ab:dc:74:a2:32:91:fe:dc:7f:54:
         45:02:12:1e:6e:0f:dc:ef:c6:22:3e:42:95:9b:64:eb:bc:f9:
         0e:55:b4:cc:98:d9:1d:6c:db:02:cf:66:0b:0c:a1:38:39:c3:
         50:ba:ab:8e:16:57:50:56:80:1c:4e:50:76:a0:de:ee:b6:3d:
         63:00:0a:84:44:67:6d:af:83:02:98:fe:5f:50:9e:de:00:3d:
         77:54:a7:ff:b1:2c:e0:ec:db:52:17:e5:ca:5b:0f:c4:ca:40:
         aa:0b:7f:26:88:78:9e:31:78:e2:36:2a:84:53:64:b2:c3:d4:
         72:5a:5e:f3:15:73:84:4d:8a:ad:6e:e0:c2:26:4c:0c:ca:b0:
         01:1b:96:d9:01:b0:4a:b5:a3:a2:4d:c6:7c:39:7f:b0:8a:90:
         5b:51:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:38 2026 by rpki-client