Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/0c0nmlw7d56o2deSZ81XsyiWZlk.roa
File:                     0c0nmlw7d56o2deSZ81XsyiWZlk.roa (raw, json)
Hash identifier:          pq0eYu1MKdTlgjZu6ot49dXudA4NI1e2cbGTWyo9QEE=
Subject key identifier:   D1:CD:27:9A:5C:3B:77:9E:A8:D9:D7:92:67:CD:57:B3:28:96:66:59
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       97
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/0c0nmlw7d56o2deSZ81XsyiWZlk.roa
Signing time:             Tue 31 Mar 2026 07:40:58 +0000
ROA not before:           Tue 31 Mar 2026 07:40:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7514
IP address blocks:        211.13.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Mar 31 07:40:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D1CD279A5C3B779EA8D9D79267CD57B328966659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:22:a9:cf:9c:7d:1c:2f:e8:ba:e5:b2:47:
                    dd:04:3a:86:ca:db:e7:8b:ca:4d:ce:1c:55:2d:91:
                    81:cc:0a:1b:0c:2d:62:72:3a:6e:67:a4:dc:a7:35:
                    ce:bf:60:46:73:43:81:d7:a5:05:e0:fc:00:69:d3:
                    50:0b:84:2e:94:16:8c:b0:b5:fb:da:2f:e0:51:0b:
                    86:16:68:b0:01:50:e4:bd:1f:d7:0a:81:d4:43:7c:
                    eb:b9:9a:3c:44:7d:68:19:67:00:cc:6f:e8:73:77:
                    a8:e9:56:4b:b4:df:d0:b2:6a:6a:18:e2:4d:66:0e:
                    47:ae:bd:57:b9:7e:c3:b4:63:1f:41:b6:8e:ef:ad:
                    de:b5:6f:41:3d:04:c0:3b:65:81:ee:6f:e1:a5:0f:
                    2b:6b:d4:da:e5:2f:70:3c:16:25:59:25:b2:2a:d7:
                    59:02:7a:0d:25:d6:fe:55:72:cf:b3:88:f1:d4:f3:
                    d3:b3:a5:3c:cb:7a:e3:a7:8b:7e:91:98:4f:1c:a2:
                    96:bd:60:01:89:24:8e:fb:0d:a0:db:1d:36:cd:d8:
                    9f:e8:d5:bd:8b:a5:3c:2f:f8:a8:b5:e7:12:9a:c1:
                    46:62:2b:19:ea:55:89:af:54:b1:4f:59:f4:de:1c:
                    ec:73:8e:23:47:4b:c6:94:d4:45:a8:a6:39:97:6a:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:27:9A:5C:3B:77:9E:A8:D9:D7:92:67:CD:57:B3:28:96:66:59
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/0c0nmlw7d56o2deSZ81XsyiWZlk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:38:9d:20:8a:8b:18:81:c1:59:01:bd:b4:a6:d4:8f:68:
         d2:cf:92:42:0a:1a:32:ca:b4:e1:36:03:93:ce:8d:ce:52:60:
         05:73:20:df:bc:b0:f3:e2:86:c6:18:9e:e7:95:fd:d3:ad:48:
         c8:89:f2:68:3d:58:9c:26:5c:5e:8c:8b:6e:94:a2:b3:e4:44:
         ab:bb:58:fc:c2:f8:be:b7:f1:3b:ad:6f:ae:ef:c6:b3:3b:42:
         71:b2:d1:26:8f:6d:d0:53:53:a6:2c:27:af:c5:24:b0:21:70:
         1d:9c:25:ce:75:b0:63:d8:e7:cd:25:af:76:2f:03:ab:08:4f:
         07:73:f5:f0:fa:01:82:7b:bd:3a:a4:fe:aa:04:2b:a3:c2:8b:
         63:56:ba:76:56:6f:a7:2f:bc:9a:ec:e9:70:f5:a2:52:70:33:
         1d:97:2b:f8:ba:8d:24:31:0c:de:b2:3e:6f:fa:75:0e:74:fc:
         87:a7:46:67:fa:8c:4d:65:11:c0:39:12:fd:3a:29:cc:f2:a0:
         2e:99:f4:b2:30:69:67:17:e1:f8:01:b1:66:cc:af:d4:d6:32:
         25:c6:3d:5b:e2:3d:fc:7a:89:a9:ff:94:ec:a2:77:17:9f:60:
         34:50:8c:79:04:68:d6:f2:00:8b:ff:96:b8:b2:33:0f:54:b7:
         2d:47:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:12 2026 by rpki-client