Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/tzwhkM3uIxSd60QV9B47VHUArD0.roa
File:                     tzwhkM3uIxSd60QV9B47VHUArD0.roa (raw, json)
Hash identifier:          eQCDUAreWZ1wcpelq4IXV9oA+K8x9sxev4nnH28kRU4=
Subject key identifier:   B7:3C:21:90:CD:EE:23:14:9D:EB:44:15:F4:1E:3B:54:75:00:AC:3D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       055E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tzwhkM3uIxSd60QV9B47VHUArD0.roa
Signing time:             Tue 31 Mar 2026 08:19:56 +0000
ROA not before:           Tue 31 Mar 2026 08:19:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.157.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B73C2190CDEE23149DEB4415F41E3B547500AC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:5d:43:f8:12:9a:78:bf:80:91:c1:33:87:
                    aa:60:43:95:13:70:ec:b5:dc:e5:25:90:42:71:21:
                    96:3b:fc:13:b7:03:3b:25:ef:1d:da:71:b3:5d:06:
                    ca:5f:b6:4a:98:08:2d:58:6a:1b:26:eb:ee:3e:37:
                    10:d4:dc:38:8d:88:5e:0e:7c:1b:e8:dc:0d:f2:98:
                    d1:c7:31:9f:1d:16:b6:92:24:0b:64:af:17:32:5c:
                    b5:cb:a7:62:ac:1f:3c:eb:11:1f:86:ea:f7:6e:95:
                    a7:fd:c0:c7:67:65:33:ac:4e:ba:25:ad:55:b4:ca:
                    0d:98:8f:94:2e:ab:10:be:72:be:87:b3:ac:81:5c:
                    15:4b:79:50:9a:4f:be:c0:2a:1d:6c:fa:c3:b3:70:
                    df:77:16:3c:b9:49:19:28:01:c9:33:dd:32:1c:79:
                    1b:61:05:05:6c:55:9e:b4:ad:d7:ef:e5:96:96:a8:
                    1d:45:61:fe:c2:7d:43:70:0e:36:60:09:3f:fc:a7:
                    96:67:c2:80:60:01:8b:33:0a:10:df:ce:fc:09:20:
                    98:5d:ef:20:a5:ce:7d:d9:63:5b:08:43:7a:7f:1f:
                    d7:3b:4b:8b:2f:55:e9:99:7d:a1:69:d6:1b:b9:0d:
                    7f:f4:3e:df:35:c1:28:a1:e4:31:f7:8a:b2:8f:99:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3C:21:90:CD:EE:23:14:9D:EB:44:15:F4:1E:3B:54:75:00:AC:3D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tzwhkM3uIxSd60QV9B47VHUArD0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:05:6e:f6:03:1f:b9:a2:42:7c:86:09:e7:55:7b:30:1d:
         5e:6c:2f:2d:ec:dd:8d:75:45:7d:d8:12:06:b8:a3:45:77:04:
         e0:b0:f0:63:35:e0:5c:cd:76:83:bb:bb:4b:02:74:1b:9b:84:
         b5:76:ef:07:85:96:6f:1d:5d:80:20:eb:ca:67:f4:fd:20:85:
         2f:5f:e9:55:c2:a1:9d:e7:c4:5e:06:b4:29:42:b3:87:a1:74:
         9e:71:be:50:82:5c:13:34:ac:ff:1b:3d:24:3b:af:5c:21:9f:
         d7:9a:8b:dd:d8:09:ad:b7:60:cb:db:14:79:a3:87:6b:92:21:
         23:d8:76:1c:f2:63:99:cd:30:bb:d7:5b:78:6e:6f:30:d5:74:
         28:e7:ce:ca:cb:db:2b:d3:a6:3e:c5:d3:cc:b4:1d:d8:98:89:
         25:86:e4:0c:02:ff:d5:4e:a7:f1:d9:2a:ca:ba:12:b8:67:fd:
         ec:7e:6e:bb:7d:1d:fd:c5:15:0c:94:f4:ac:4d:52:af:4c:9b:
         9c:f6:c3:fe:ea:aa:13:e2:d8:18:a3:7f:dc:f0:d5:2f:40:b7:
         8c:5f:4e:80:e2:09:fd:df:de:2c:c9:c9:7a:af:a0:91:f1:21:
         3a:1e:d2:83:15:8c:c2:ab:dd:03:db:20:fc:68:f6:35:7d:1d:
         1e:22:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:27 2026 by rpki-client