Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/x4ihCwMWI2-_5EqrKItW3-CterU.roa
File:                     x4ihCwMWI2-_5EqrKItW3-CterU.roa (raw, json)
Hash identifier:          lROs8p4+p2BDBlUXgllBhOrEV4LYdLJobQUoEylixX0=
Subject key identifier:   C7:88:A1:0B:03:16:23:6F:BF:E4:4A:AB:28:8B:56:DF:E0:AD:7A:B5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0616
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x4ihCwMWI2-_5EqrKItW3-CterU.roa
Signing time:             Tue 31 Mar 2026 08:21:28 +0000
ROA not before:           Tue 31 Mar 2026 08:21:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        202.216.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C788A10B0316236FBFE44AAB288B56DFE0AD7AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:17:ed:7d:fa:67:43:1d:90:ba:1e:b2:b8:
                    40:69:22:47:ab:20:e3:5c:b3:7c:4b:d9:a0:6a:29:
                    98:a1:74:85:9a:6a:cf:fa:ff:ff:77:25:77:ac:43:
                    7f:1f:12:29:c4:f0:a3:20:e3:f9:84:ec:66:f5:0e:
                    65:4f:5f:69:75:92:e0:15:ac:13:57:43:90:34:6e:
                    23:8d:cf:41:d7:b9:f4:ec:a2:ff:ae:80:86:fa:c2:
                    93:d5:61:68:06:2b:cf:a1:14:ae:9e:4c:a3:85:57:
                    0e:4e:df:98:ad:41:e0:b7:c6:8a:a8:1f:32:74:c3:
                    dd:11:04:1b:6e:5d:d1:b5:b3:69:25:21:12:00:3b:
                    b5:cf:2a:a8:eb:68:17:6e:8e:0c:27:f9:41:e5:ac:
                    09:a1:81:46:38:b8:d7:79:98:cd:55:a9:a1:1a:74:
                    2d:59:22:cc:22:69:eb:d7:c6:b6:f8:bb:04:91:36:
                    2e:bd:d7:90:b4:7f:71:87:87:7a:aa:39:d9:a1:aa:
                    2d:1e:bc:d9:e2:f1:83:f7:82:69:aa:a3:9d:b1:e3:
                    cb:67:17:a8:90:bc:81:f2:ce:67:34:41:f7:d8:81:
                    9d:1a:b8:16:56:0d:61:c2:34:4a:c9:a7:5b:de:37:
                    d5:6c:10:b9:78:8f:6e:bf:12:b4:27:12:2c:17:b5:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:88:A1:0B:03:16:23:6F:BF:E4:4A:AB:28:8B:56:DF:E0:AD:7A:B5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/x4ihCwMWI2-_5EqrKItW3-CterU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.216.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:2a:59:97:42:b4:bf:e7:76:9b:a9:51:a0:90:d8:26:c3:9a:
         56:7c:8f:36:e9:bb:f2:8b:41:f6:22:3a:59:21:d2:59:aa:d3:
         e6:a1:ad:d3:22:3e:b0:25:f5:50:29:1a:c2:f1:e6:2c:8e:e4:
         3c:1e:a2:b8:28:8e:d6:89:8e:18:86:95:58:b3:8d:66:b2:a1:
         e1:eb:31:bd:b2:49:8c:ba:2c:44:1e:b1:d8:11:6e:17:b0:a1:
         b1:ab:1a:94:ed:30:64:b4:da:2d:50:07:33:85:69:65:73:ff:
         23:5b:00:a5:03:9e:ed:d9:25:f8:a7:be:7a:f8:8e:22:2d:57:
         de:46:c6:7e:cf:80:49:12:e6:ca:42:07:d1:ca:a4:16:c0:6b:
         a3:62:96:99:c4:0d:89:fd:01:df:41:10:76:aa:22:4a:21:ad:
         03:5b:ac:7b:29:70:a0:d0:f7:02:6e:08:a7:d0:24:bc:fd:8d:
         1c:76:4a:e0:c1:94:d6:af:a9:70:81:8e:04:41:68:25:71:3f:
         01:83:3f:42:a1:b9:8d:09:df:b9:ce:78:31:f6:8b:5d:31:ae:
         2d:b1:00:60:60:cd:39:e1:f5:05:b7:23:58:c8:c9:c8:a5:46:
         a5:73:f3:42:06:75:f7:6e:8d:3e:86:7f:6e:e1:13:7b:e8:d9:
         4a:d2:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:10 2026 by rpki-client