Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/znwwMerBIzlM2a543oSr3LPf_6c.roa
File:                     znwwMerBIzlM2a543oSr3LPf_6c.roa (raw, json)
Hash identifier:          GRJyRNBnALkPmTbisZ8Hyw+wbJghNyDHTNrPg6oE9J8=
Subject key identifier:   CE:7C:30:31:EA:C1:23:39:4C:D9:AE:78:DE:84:AB:DC:B3:DF:FF:A7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0595
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/znwwMerBIzlM2a543oSr3LPf_6c.roa
Signing time:             Tue 31 Mar 2026 08:20:26 +0000
ROA not before:           Tue 31 Mar 2026 08:20:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.159.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CE7C3031EAC123394CD9AE78DE84ABDCB3DFFFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:70:36:8c:a2:ae:db:4c:1f:b6:54:3c:55:
                    18:1c:56:aa:38:60:ca:c7:8c:95:6f:57:ee:e9:4e:
                    9e:04:8a:74:22:19:16:b3:f9:1d:3f:4a:dc:31:78:
                    57:c8:7d:59:6b:ca:63:4e:bd:fc:7e:d2:93:80:02:
                    82:ec:ad:38:f8:54:98:3a:1f:40:63:9b:5a:e5:42:
                    9e:50:0e:2f:7e:79:11:7d:fa:45:91:a3:d9:2f:45:
                    13:c2:ac:9a:a9:d1:58:b9:57:b2:05:1b:a4:ce:28:
                    50:e1:54:37:99:e3:bd:7b:a6:be:0f:73:6d:da:85:
                    fe:6a:11:f3:c0:82:5f:25:43:e5:b6:2a:bb:d6:54:
                    3a:56:ca:7f:aa:5f:68:9a:c3:58:00:f3:db:b5:ea:
                    a4:61:66:f4:ad:59:9d:59:76:ad:9c:d0:46:ed:d1:
                    51:a7:cd:0b:e9:27:b3:c1:c7:c1:0e:ad:7f:c0:5a:
                    fa:fb:91:85:af:d9:06:15:8b:45:92:0f:89:1a:b7:
                    21:6d:be:92:48:00:4f:b8:ee:2e:47:e6:67:44:e4:
                    b9:8e:43:18:2a:c8:45:05:15:1f:ac:9a:8f:75:76:
                    f4:11:68:4e:35:b9:ee:04:62:6f:a9:1c:30:81:24:
                    9f:34:22:d9:c0:8c:46:c6:1f:bf:ca:07:f0:0b:87:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:30:31:EA:C1:23:39:4C:D9:AE:78:DE:84:AB:DC:B3:DF:FF:A7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/znwwMerBIzlM2a543oSr3LPf_6c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:7e:3e:6f:df:52:b2:7f:fc:fe:21:30:9e:89:b5:d8:ae:
         0c:db:bd:94:32:8a:61:f4:fb:19:cf:5d:06:de:af:44:e7:07:
         1a:bc:0b:4c:08:2c:89:02:f5:d6:74:8b:b5:64:8f:f9:02:d0:
         bc:cf:33:97:61:7f:25:a3:62:57:bb:0e:f0:de:6d:4d:57:15:
         d3:d8:57:2e:1f:ff:2d:79:2d:f8:01:36:38:1a:92:e7:11:1c:
         d5:76:7f:a7:38:f8:92:18:15:ca:9e:f7:e0:67:01:08:4d:a3:
         9c:ec:15:8a:b3:dd:47:f2:fc:ac:d4:f4:2a:f9:da:3f:e2:ad:
         03:93:a1:21:0c:a4:a7:72:b3:e2:01:84:3d:bc:76:73:09:72:
         dd:34:ea:02:73:c2:d4:1d:8c:31:ce:f0:2b:9d:e7:a3:44:54:
         35:2e:91:d7:21:31:35:82:9e:1b:6c:99:4e:00:7d:3a:8d:f8:
         2c:00:48:18:f7:9b:51:19:08:68:15:68:4b:69:2a:8d:a7:c0:
         13:8f:0f:64:d1:3a:88:2c:8c:da:45:14:f1:b8:9a:fc:ab:c5:
         39:11:6e:ad:e4:3c:6f:5d:5e:a5:33:2c:af:98:76:82:b6:a1:
         fa:b0:72:0e:fe:e2:d1:e5:0d:7b:20:51:b0:35:1b:0e:2e:7e:
         8a:1a:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:39 2026 by rpki-client