Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vP-VJGFFsjAk-HDeMcP-dNK2QSc.roa
File:                     vP-VJGFFsjAk-HDeMcP-dNK2QSc.roa (raw, json)
Hash identifier:          ffNYlsCSUHj6vhPNnBMIUd6KBN+omm9CT5Hg6y/r1MQ=
Subject key identifier:   BC:FF:95:24:61:45:B2:30:24:F8:70:DE:31:C3:FE:74:D2:B6:41:27
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       058E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vP-VJGFFsjAk-HDeMcP-dNK2QSc.roa
Signing time:             Tue 31 Mar 2026 08:20:23 +0000
ROA not before:           Tue 31 Mar 2026 08:20:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.143.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BCFF95246145B23024F870DE31C3FE74D2B64127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:6b:16:fa:35:a7:01:02:d1:52:e7:9e:00:
                    b4:26:bd:97:e9:17:b4:b5:2c:7f:26:c5:76:81:3c:
                    12:ea:5d:8f:c5:c2:b3:d3:80:fd:a2:19:82:33:0f:
                    39:ba:da:ef:10:a1:50:7c:87:b7:18:dd:d9:4b:76:
                    33:28:ca:e6:d4:b4:b6:75:7a:c1:c5:f0:f4:91:4c:
                    06:7c:7f:5c:d7:45:24:f9:2a:eb:8e:23:e8:63:be:
                    d5:1c:14:09:cd:ff:39:4d:48:00:de:4a:8c:83:64:
                    7a:80:b5:55:7e:bd:f2:e3:56:96:2a:94:5c:9a:9a:
                    5e:52:53:34:74:aa:25:85:1c:3b:8d:2d:39:b8:5a:
                    de:d0:19:1b:12:d8:7b:26:13:39:01:d1:c2:e3:d5:
                    89:d3:31:cb:b8:ac:8b:cb:df:2c:8e:a2:d2:36:95:
                    32:96:8f:b6:78:38:05:73:ed:bf:cc:eb:3c:c6:06:
                    ed:f3:42:7b:49:97:c2:9d:0e:cf:e9:8c:8b:e9:f6:
                    84:1a:7a:b6:a7:5a:2a:8f:5a:01:bd:b7:15:c1:d4:
                    ed:81:25:6a:46:b9:44:84:dc:0d:b1:e7:fb:0d:8d:
                    7c:66:b0:24:34:ff:5f:e4:77:bd:d4:af:ea:b6:73:
                    e4:2c:dd:63:ee:6c:e6:95:40:0e:3d:15:a5:ce:3d:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:95:24:61:45:B2:30:24:F8:70:DE:31:C3:FE:74:D2:B6:41:27
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vP-VJGFFsjAk-HDeMcP-dNK2QSc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:b9:74:73:a7:09:36:c8:33:1d:dd:09:b8:65:89:32:64:
         91:74:52:08:8c:16:3a:30:e1:1b:6d:9a:fb:f5:8d:d1:6d:3d:
         39:00:24:2f:f4:3e:ab:e1:5a:42:a1:26:a6:ed:f6:85:ed:16:
         69:97:ba:1d:82:67:89:1e:65:df:46:8d:01:0e:ee:13:4b:d8:
         ac:91:c1:8e:d6:70:05:cc:b3:f0:05:a6:41:01:31:36:fb:8e:
         e8:3f:46:fa:3f:25:6d:bc:94:2e:5c:f2:d1:ae:8c:3e:57:b9:
         b9:8f:c5:65:3e:1d:66:72:1c:f8:b4:d1:fa:67:d3:f3:e6:4a:
         31:fc:8e:65:4d:5e:24:0a:fd:33:64:12:06:46:8f:60:6a:c1:
         e4:4b:f2:f9:ad:ea:71:e3:67:36:40:25:48:fe:f0:30:d6:63:
         5c:bd:3a:72:1f:f9:c5:29:13:03:ed:f1:e6:ec:b3:e7:1b:93:
         ed:28:fc:25:72:9e:e3:ac:d9:f1:f5:8e:89:70:a2:f3:24:50:
         4a:09:52:9f:2a:54:c1:09:00:07:ab:77:1a:28:7e:61:d5:ed:
         ab:d5:b4:72:0b:00:ef:f4:7a:7d:ef:aa:c4:9e:f8:87:ec:7f:
         67:60:63:2d:a7:c1:ba:31:ea:47:1d:18:f1:a8:d4:cf:db:a4:
         29:f0:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:20 2026 by rpki-client