Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wvBROB6foMdV4T4Pi4UH0h2X6cE.roa
File:                     wvBROB6foMdV4T4Pi4UH0h2X6cE.roa (raw, json)
Hash identifier:          iQLfmIo0QrraADxZC4bGmvVqkPJjvXfrLtn2ifPCWXs=
Subject key identifier:   C2:F0:51:38:1E:9F:A0:C7:55:E1:3E:0F:8B:85:07:D2:1D:97:E9:C1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05F7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wvBROB6foMdV4T4Pi4UH0h2X6cE.roa
Signing time:             Tue 31 Mar 2026 08:21:14 +0000
ROA not before:           Tue 31 Mar 2026 08:21:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.192.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527 (0x5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C2F051381E9FA0C755E13E0F8B8507D21D97E9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:5a:60:39:0f:fb:40:f9:b1:b1:98:4a:b1:
                    76:42:13:27:13:64:98:a9:7e:16:81:dc:da:f7:d8:
                    08:25:cc:aa:9b:91:70:d2:46:b0:88:61:9d:32:14:
                    6a:ad:54:80:82:10:fa:9a:2f:64:81:e1:05:7c:cc:
                    ee:3c:c2:8f:fa:66:88:34:68:ff:52:b2:7d:63:66:
                    cb:d0:e2:d6:a1:29:92:8a:d9:65:48:99:71:64:12:
                    ed:63:e6:ff:a8:c8:a7:0e:51:24:b0:93:7e:cf:bf:
                    1e:b0:49:0e:8e:a4:40:15:49:94:79:b4:92:f1:d4:
                    6d:35:a7:08:ec:c1:82:45:dd:f4:04:c8:14:87:cc:
                    0e:65:a5:e3:1d:05:28:fc:40:a6:2e:76:15:be:68:
                    89:cf:56:fd:4f:e4:fe:cd:f5:37:0b:6c:2d:51:8c:
                    85:00:73:7d:fe:21:e7:ed:66:e4:81:a0:65:b0:2a:
                    fd:16:72:b4:61:66:4e:01:33:58:c1:46:4f:ba:b5:
                    f4:b0:bb:be:3f:9b:aa:20:a2:40:7a:20:0b:8d:99:
                    30:ab:b4:dc:93:4b:a5:88:72:3d:c7:81:1d:75:de:
                    17:c1:6c:29:ea:2c:5f:d4:21:e0:31:2b:92:e7:e7:
                    f4:c4:7a:00:02:82:57:43:4c:81:68:02:22:e9:f1:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:51:38:1E:9F:A0:C7:55:E1:3E:0F:8B:85:07:D2:1D:97:E9:C1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wvBROB6foMdV4T4Pi4UH0h2X6cE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:6d:df:ae:3b:bd:b0:ae:f6:fc:bc:9f:86:1d:ec:68:15:
         b8:33:70:ce:0f:f9:08:c2:39:47:e1:1e:b4:76:85:e2:a5:78:
         1b:c0:fc:1e:12:c9:a9:c2:84:0c:e5:29:c6:f1:ce:a1:1b:e7:
         95:ed:5d:63:0f:8d:51:6d:cf:01:62:ba:48:a2:00:bf:01:05:
         11:e1:d7:3e:11:53:0b:67:02:66:6b:56:a4:98:d1:89:8b:fc:
         f1:14:f3:96:6d:44:3f:02:d6:6d:52:c7:f1:c2:c4:b3:35:39:
         49:99:23:ce:8f:bb:b1:0b:ff:0c:89:27:1b:68:cd:ba:2b:5f:
         81:d7:e9:b0:96:15:c4:a6:ec:e7:a6:a9:b9:28:8f:b8:d3:95:
         30:e2:02:bc:44:d0:26:a1:a9:79:ee:bc:ac:39:c4:6e:d9:b1:
         3b:25:e0:1a:46:31:ea:49:8c:a7:2d:6a:62:ed:56:81:c9:55:
         71:32:02:60:71:95:5b:12:87:5c:da:7d:56:b7:5f:36:82:e1:
         19:73:e9:49:5d:b8:9c:b0:dc:f6:e2:b8:51:0b:6f:87:d5:56:
         0d:92:ea:e9:10:d7:f5:3b:76:82:9a:dd:60:91:24:a3:38:f2:
         3b:29:4a:be:17:0b:f5:f4:17:e0:3f:14:a3:e7:89:f5:e2:db:
         0e:a7:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:26 2026 by rpki-client