Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/x4ZdyqYofFM5C3vr9twHQUri6iY.roa
File:                     x4ZdyqYofFM5C3vr9twHQUri6iY.roa (raw, json)
Hash identifier:          S0uZFwStrc7gxHfRi4CDZS6uca5rb2ETBcBD1cBGDZM=
Subject key identifier:   C7:86:5D:CA:A6:28:7C:53:39:0B:7B:EB:F6:DC:07:41:4A:E2:EA:26
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04F1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x4ZdyqYofFM5C3vr9twHQUri6iY.roa
Signing time:             Tue 31 Mar 2026 08:19:08 +0000
ROA not before:           Tue 31 Mar 2026 08:19:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7865DCAA6287C53390B7BEBF6DC07414AE2EA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:aa:2b:dd:61:77:b2:e5:9c:58:8f:f4:36:
                    b8:5b:c0:2a:1d:ac:c8:32:e5:8a:84:fa:27:52:7f:
                    ae:df:29:e9:17:23:e6:3f:02:3f:08:27:f5:bf:ad:
                    e5:8d:a4:9f:bb:44:10:8c:1a:9c:37:56:3e:bb:13:
                    07:55:3c:b4:a3:7d:2e:41:ca:f4:3d:fa:16:3c:ec:
                    45:6b:35:40:77:f9:53:81:6f:fd:72:e8:14:76:c6:
                    27:8c:5e:cf:e3:49:64:77:1d:8f:d3:e6:c1:6a:56:
                    d6:78:c7:09:07:17:c5:11:22:c1:5d:10:97:a9:c1:
                    c2:f0:9e:07:cf:25:46:a5:86:e9:5d:85:4c:1d:1f:
                    14:df:16:90:be:95:8e:2c:4f:ec:dc:1e:ee:67:2f:
                    d5:3e:af:c6:92:5b:e6:39:2a:80:b8:b4:55:a8:19:
                    97:8a:39:fe:96:de:4f:9d:7b:c1:9c:2a:a1:49:82:
                    2c:a0:be:22:ba:65:d2:08:ba:ff:49:b8:e2:43:49:
                    c9:13:d9:75:92:45:8d:aa:1a:32:d6:b8:70:8c:55:
                    3d:91:51:5e:50:c0:1f:38:fb:75:f5:e9:74:e2:62:
                    b8:dc:1e:12:32:35:da:eb:35:de:95:d9:6d:e6:d1:
                    bb:ae:0b:ec:3e:3a:e0:25:23:b6:4c:93:d7:1d:ee:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:5D:CA:A6:28:7C:53:39:0B:7B:EB:F6:DC:07:41:4A:E2:EA:26
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x4ZdyqYofFM5C3vr9twHQUri6iY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:f4:15:fc:dc:6d:e8:06:53:df:c5:40:7d:36:0c:f6:c9:
         72:98:91:59:8e:eb:f6:f7:52:9d:62:d4:e3:18:e0:08:23:66:
         f6:d9:25:80:27:9a:21:eb:35:7e:01:1d:47:bb:52:94:3a:ef:
         42:49:9c:a7:85:47:84:e8:e2:00:b8:b4:fd:b9:6f:00:80:81:
         b6:c2:3f:77:22:05:f1:1b:65:c6:1f:02:ed:be:d0:a0:e4:34:
         c4:71:c1:5a:47:f3:99:89:ed:f3:2b:2f:9a:66:f7:4c:a2:25:
         57:77:dd:80:7f:16:78:a4:cb:68:6c:50:02:e6:60:21:1f:72:
         33:c2:fd:19:d7:bf:87:63:d4:21:14:3c:f4:b4:ce:91:f9:9a:
         94:f5:60:6b:a7:b7:d4:db:30:8a:12:6e:03:58:73:52:bc:86:
         96:97:3b:8f:c5:2e:2b:ca:59:99:9e:42:6c:57:be:4f:af:18:
         5a:57:a9:c9:df:2e:58:f5:48:33:a2:5f:03:31:20:f9:88:ac:
         84:ab:05:fd:12:fa:d5:98:b3:50:9a:8e:81:3b:e1:19:3d:68:
         48:38:2f:c6:f1:7d:41:08:64:93:37:ef:da:04:a7:fd:c2:53:
         e1:bd:17:1b:64:fe:23:9d:42:ff:eb:28:de:eb:74:be:8c:a8:
         99:78:46:d7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3ODY1RENBQTYyODdD
NTMzOTBCN0JFQkY2REMwNzQxNEFFMkVBMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC09aor3WF3suWcWI/0NrhbwCodrMgy5YqE+idSf67fKekXI+Y/
Aj8IJ/W/reWNpJ+7RBCMGpw3Vj67EwdVPLSjfS5ByvQ9+hY87EVrNUB3+VOBb/1y
6BR2xieMXs/jSWR3HY/T5sFqVtZ4xwkHF8URIsFdEJepwcLwngfPJUalhuldhUwd
HxTfFpC+lY4sT+zcHu5nL9U+r8aSW+Y5KoC4tFWoGZeKOf6W3k+de8GcKqFJgiyg
viK6ZdIIuv9JuOJDSckT2XWSRY2qGjLWuHCMVT2RUV5QwB84+3X16XTiYrjcHhIy
NdrrNd6V2W3m0buuC+w+OuAlI7ZMk9cd7uDVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUx4ZdyqYofFM5C3vr9twHQUri6iYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L3g0WmR5cVlvZkZNNUMzdnI5dHdIUVVyaTZpWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQkNMAwDQYJKoZIhvcNAQELBQADggEB
AAvk9BX83G3oBlPfxUB9Ngz2yXKYkVmO6/b3Up1i1OMY4AgjZvbZJYAnmiHrNX4B
HUe7UpQ670JJnKeFR4To4gC4tP25bwCAgbbCP3ciBfEbZcYfAu2+0KDkNMRxwVpH
85mJ7fMrL5pm90yiJVd33YB/Fniky2hsUALmYCEfcjPC/RnXv4dj1CEUPPS0zpH5
mpT1YGunt9TbMIoSbgNYc1K8hpaXO4/FLivKWZmeQmxXvk+vGFpXqcnfLlj1SDOi
XwMxIPmIrISrBf0S+tWYs1CajoE74Rk9aEg4L8bxfUEIZJM379oEp/3CU+G9Fxtk
/iOdQv/rKN7rdL6MqJl4Rtc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:20:02 2026 by rpki-client