Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/E1JnWRNuliCYXMJEkrBhNDfOl48.roa
File:                     E1JnWRNuliCYXMJEkrBhNDfOl48.roa (raw, json)
Hash identifier:          WOTFlZ2T71OScC8j3q70lLhcGRyOFyH2AwWSRVhpLyQ=
Subject key identifier:   13:52:67:59:13:6E:96:20:98:5C:C2:44:92:B0:61:34:37:CE:97:8F
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       73
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/E1JnWRNuliCYXMJEkrBhNDfOl48.roa
Signing time:             Tue 31 Mar 2026 08:31:25 +0000
ROA not before:           Tue 31 Mar 2026 08:31:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 23:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Mar 31 08:31:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=13526759136E9620985CC24492B0613437CE978F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:a7:93:92:98:44:9e:4c:35:9f:5e:96:36:
                    86:81:4a:d3:a4:f5:54:94:98:1c:be:18:4c:b1:d2:
                    16:67:42:dd:bf:1d:9b:d1:06:0d:4a:9c:63:ae:7d:
                    2e:47:dc:96:b2:dd:dc:6a:bf:58:79:79:be:e1:67:
                    6c:d9:cc:79:5e:90:93:4c:01:02:4b:c3:65:e7:88:
                    99:74:ac:b2:17:87:38:8c:d5:6a:af:76:d0:7f:ff:
                    11:0c:e0:0e:b5:26:47:b4:a9:59:52:03:fb:ac:3d:
                    23:03:f6:d8:c7:50:a6:b9:02:b0:0f:25:75:30:c0:
                    1b:33:b8:68:8d:62:fb:b3:4c:42:49:68:29:3e:07:
                    c0:af:50:29:c6:aa:18:1a:22:14:df:74:81:dd:3f:
                    da:e7:4b:b5:5e:d1:91:98:12:a9:38:8a:3a:b6:f5:
                    36:5b:ae:9b:2a:a4:39:8b:69:14:ea:82:26:d9:9a:
                    10:64:01:7a:ed:70:77:67:c8:c0:73:bd:f8:cf:ec:
                    66:d4:20:99:ea:52:82:4d:c8:d2:1b:07:0c:13:58:
                    3c:3a:b0:b0:16:14:68:a1:1f:a0:63:4d:54:25:45:
                    15:3c:2a:c8:20:32:b6:47:4b:34:3c:b9:ff:f7:73:
                    c0:a0:df:76:3f:5a:b2:31:cb:5e:01:66:34:da:72:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:52:67:59:13:6E:96:20:98:5C:C2:44:92:B0:61:34:37:CE:97:8F
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/E1JnWRNuliCYXMJEkrBhNDfOl48.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:a8:26:e5:4a:6b:4e:1d:e7:dd:b2:59:1c:10:95:6c:85:
         a0:d4:03:a2:67:95:ea:40:45:7e:38:3e:69:f1:91:a5:c7:f8:
         12:b9:08:8f:fc:d4:6a:2d:b6:8c:e4:6a:cd:0b:9b:12:c9:81:
         d7:cc:40:bd:79:d4:b6:e7:98:d9:5e:83:79:e1:4c:78:65:06:
         54:99:f1:ff:55:cc:d7:41:dc:0f:d7:58:13:81:c3:83:5f:91:
         13:af:45:a2:de:0b:62:9b:26:d6:10:62:af:47:fb:14:fe:99:
         91:01:52:bf:c2:41:c9:06:ae:27:29:36:e9:38:4d:1f:4d:da:
         c7:cf:e9:b7:f0:1e:22:01:fb:03:f4:f5:76:ba:be:25:66:0c:
         12:af:70:f7:9b:5e:2f:7a:83:b4:71:0b:27:aa:71:78:d3:9a:
         61:9c:9b:62:3b:82:6c:9b:46:ff:f7:55:21:24:8a:5e:84:22:
         d4:c7:5e:ea:92:b0:ae:d9:3b:e6:17:e7:e2:7f:b6:a0:df:cc:
         6d:80:bd:e6:8b:77:a8:6f:1f:06:cc:12:7a:7e:34:83:5a:90:
         80:e2:d2:54:b1:36:fd:18:9c:ed:17:df:3e:06:a5:6f:07:32:
         95:98:49:9f:e1:58:e6:ba:0a:a8:3f:fb:3f:9f:d5:27:0e:52:
         0e:c9:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:18:34 2026 by rpki-client