Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vFRT0aCPWrlF4cMxyPgnzGwmNx4.roa
File:                     vFRT0aCPWrlF4cMxyPgnzGwmNx4.roa (raw, json)
Hash identifier:          Bu4A/of+XGmpwSQgtlJ9VL9BI4gsrvveYj6Y2XiGWB0=
Subject key identifier:   BC:54:53:D1:A0:8F:5A:B9:45:E1:C3:31:C8:F8:27:CC:6C:26:37:1E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0627
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vFRT0aCPWrlF4cMxyPgnzGwmNx4.roa
Signing time:             Tue 31 Mar 2026 08:21:34 +0000
ROA not before:           Tue 31 Mar 2026 08:21:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.120.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BC5453D1A08F5AB945E1C331C8F827CC6C26371E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:a6:06:3b:5f:6c:a3:b2:21:96:5d:41:33:
                    f5:fa:12:d7:e4:de:eb:30:c3:d3:b8:be:60:20:36:
                    4f:47:36:59:61:26:9c:e2:95:c3:29:da:3f:33:e5:
                    9b:c0:b9:41:a6:66:e4:c4:04:4d:37:ff:d9:34:1c:
                    4b:9c:e7:4f:53:89:9f:ec:cf:50:b4:c6:6a:df:06:
                    c5:e8:3e:75:00:5d:5a:17:15:17:87:9f:94:39:60:
                    d7:33:43:8a:9e:06:58:ae:f3:b5:a5:b0:3a:f4:bc:
                    e0:37:0f:71:a1:e4:21:7e:51:d1:69:57:16:35:d6:
                    08:d8:a5:69:c5:49:2b:40:26:70:0f:a1:e1:d8:51:
                    9a:f6:c8:42:a7:2e:e7:4a:af:f5:40:60:fc:69:77:
                    61:c4:94:75:22:02:ba:a5:65:66:79:4a:3d:dd:e1:
                    9c:2b:83:d5:a2:6f:01:f3:a5:9c:de:c4:07:a7:07:
                    b4:33:64:0d:42:1b:73:bb:0c:76:af:a6:30:fa:47:
                    ea:8c:38:08:f5:d9:34:e6:c1:d4:d2:91:70:2f:21:
                    6c:15:88:fa:c5:12:50:1d:e3:b0:d8:61:48:cf:2d:
                    11:60:73:28:fd:61:37:d7:2c:b0:d1:94:a2:ec:ac:
                    ae:7f:d6:44:06:b3:18:9f:92:ce:05:26:d8:c5:d5:
                    9f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:54:53:D1:A0:8F:5A:B9:45:E1:C3:31:C8:F8:27:CC:6C:26:37:1E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vFRT0aCPWrlF4cMxyPgnzGwmNx4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:4e:0f:23:43:e9:39:ea:fe:76:87:6e:6c:6c:a1:7b:32:
         fd:35:bc:90:5e:63:32:92:9d:d9:e0:49:b1:3c:28:c9:cb:f5:
         5b:d5:ff:1a:e5:5d:a8:87:02:95:73:94:6c:54:23:48:b2:ea:
         f1:6e:7c:14:04:02:18:56:41:53:b0:34:9a:b9:dc:f9:d7:dc:
         ef:3f:0e:50:6a:22:b9:da:c1:5c:19:6f:e3:65:4c:ce:b7:f9:
         45:08:3d:9a:6d:32:65:f7:22:db:13:a6:0f:d6:41:01:34:04:
         f1:c4:03:fe:a3:2f:e8:80:94:fd:50:1e:09:31:e8:b5:30:b2:
         df:8a:80:29:bc:fa:56:9b:a4:22:73:d5:01:81:34:78:3a:36:
         57:d6:a9:6e:39:ae:eb:14:3c:ca:8a:77:a4:60:88:21:7e:fd:
         05:43:8b:47:73:bd:dc:d6:99:86:03:00:6c:b9:da:51:99:50:
         ff:0d:d3:6f:e6:b4:05:22:ce:d9:cf:35:1c:84:81:1d:c6:11:
         e0:04:4e:02:fd:04:b2:a3:64:05:57:cd:2f:6c:82:0d:08:57:
         e1:a5:7c:b4:6b:fb:44:bd:c6:30:81:1f:22:4c:79:7f:c3:b8:
         79:57:ca:81:7b:e0:d9:69:8e:57:25:7a:59:98:9b:26:cd:da:
         3d:5d:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:34 2026 by rpki-client