Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/zwnFbeumSqper6upk_AojxDrsZQ.roa
File:                     zwnFbeumSqper6upk_AojxDrsZQ.roa (raw, json)
Hash identifier:          P5iaF2t3gD27Jx0SiAzth+FtuaZqEe5Wrbw7HTHKz3A=
Subject key identifier:   CF:09:C5:6D:EB:A6:4A:AA:5E:AF:AB:A9:93:F0:28:8F:10:EB:B1:94
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0575
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zwnFbeumSqper6upk_AojxDrsZQ.roa
Signing time:             Tue 31 Mar 2026 08:20:12 +0000
ROA not before:           Tue 31 Mar 2026 08:20:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF09C56DEBA64AAA5EAFABA993F0288F10EBB194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:a9:b1:0d:61:fa:17:6d:3e:84:62:ed:ea:
                    a7:66:2a:13:9b:f1:a7:03:b4:fa:ef:69:47:2a:34:
                    e6:04:3a:83:39:dd:41:32:37:d8:c5:fc:46:d1:20:
                    ab:a3:ce:45:d3:34:f2:34:e3:2d:86:6b:4f:68:aa:
                    49:2a:fc:9b:f2:6a:0c:53:64:d9:14:3d:cd:5d:3a:
                    98:8c:28:08:51:30:e9:d7:47:be:3b:cf:d3:86:4c:
                    bb:ba:5a:c9:7b:80:8b:b3:4d:6b:b0:5c:f3:a5:6d:
                    b4:2d:ee:80:a7:87:27:a7:2c:0a:4b:18:90:80:cd:
                    7b:50:a7:be:a2:03:30:e3:ef:ff:ad:2c:cd:31:15:
                    23:73:36:1a:a7:fa:a6:cb:51:31:a8:55:b9:46:e1:
                    69:a2:3b:f2:fd:02:2c:76:79:c5:80:8f:32:41:07:
                    05:de:7c:c8:12:bd:a1:de:56:38:fc:43:61:7b:57:
                    c1:f5:e3:aa:33:60:b7:20:91:88:0b:ac:ef:cb:65:
                    99:ab:9f:e5:36:a3:20:db:c5:2f:27:e2:85:ad:90:
                    6c:dc:4d:66:80:ec:0c:2e:04:73:c0:91:98:e5:98:
                    74:ca:83:85:87:51:68:b8:b1:61:1b:a4:09:3e:4b:
                    3d:0c:bb:ff:f0:48:25:b5:9f:52:6d:e2:7c:fb:bd:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:C5:6D:EB:A6:4A:AA:5E:AF:AB:A9:93:F0:28:8F:10:EB:B1:94
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zwnFbeumSqper6upk_AojxDrsZQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:3b:be:e4:53:b5:af:67:34:3f:a1:0e:90:cf:fc:e0:b3:
         aa:e6:3e:1e:bf:93:5b:5a:89:9f:bc:f0:f3:85:74:1f:23:c9:
         c7:34:7d:e9:c3:4d:d7:7b:fc:06:ef:af:82:fc:15:a8:d7:99:
         ee:32:71:12:cc:5f:84:75:b9:1e:88:b1:1e:1a:ed:83:1b:bb:
         4c:86:bb:69:8f:dc:7c:75:fd:d7:0a:37:d8:e4:eb:f0:8e:1d:
         d6:6f:19:d1:6f:4c:f3:f6:79:d0:f3:97:f2:bb:b7:e7:77:05:
         3f:24:21:c2:bd:dd:04:37:c3:62:51:75:6a:ce:2f:ef:5c:b5:
         3e:c7:f8:c7:21:08:ae:ed:17:fb:26:fa:58:e2:78:1a:73:83:
         6e:49:7a:ae:14:66:b5:f0:1b:67:b8:03:9a:22:d5:d0:76:18:
         52:55:43:8c:37:e9:0c:0c:5e:04:14:54:df:87:0b:0c:88:02:
         89:57:c1:00:c5:44:d8:2c:9a:d6:d0:46:73:b0:c1:28:9b:6d:
         cd:a6:5a:48:66:04:0b:30:d1:b6:66:e0:3a:f6:d4:ee:04:6f:
         fa:46:d4:33:9f:14:82:a7:2e:76:2c:21:9a:0d:d2:fb:cc:ea:
         ca:e9:15:21:e0:84:80:c5:22:e5:53:28:81:df:2f:fe:da:91:
         58:bd:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:49 2026 by rpki-client