Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/0DGNcuVzEDxWN-9amdesGP5mdD8.roa
File:                     0DGNcuVzEDxWN-9amdesGP5mdD8.roa (raw, json)
Hash identifier:          vyBa523j+uA0+4FjwpdH6MMgWygpcIQR/w3SXUxfeFA=
Subject key identifier:   D0:31:8D:72:E5:73:10:3C:56:37:EF:5A:99:D7:AC:18:FE:66:74:3F
Certificate issuer:       /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial:       24
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/0DGNcuVzEDxWN-9amdesGP5mdD8.roa
Signing time:             Tue 31 Mar 2026 08:44:16 +0000
ROA not before:           Tue 31 Mar 2026 08:44:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17936
IP address blocks:        218.228.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
        Validity
            Not Before: Mar 31 08:44:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D0318D72E573103C5637EF5A99D7AC18FE66743F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:bb:db:9b:c1:bb:d4:94:1d:53:ea:cb:91:
                    a5:4d:30:e7:4d:69:56:5c:b8:54:74:00:4c:c5:eb:
                    2a:3c:dc:7e:6d:b7:09:b8:9c:8a:76:e6:ea:f9:fb:
                    4b:82:a2:4b:29:e1:28:2b:55:14:8d:a4:d1:64:d4:
                    53:13:bf:03:ca:65:d6:79:9f:4c:01:85:a9:53:6c:
                    0b:cb:fe:5a:70:3f:85:b5:1e:37:f2:ec:b0:4e:42:
                    cf:9d:83:0f:91:7c:7e:72:e5:5a:7e:57:c1:4d:de:
                    93:73:cd:a8:e1:5e:f5:48:a8:38:75:ff:4e:0e:58:
                    0b:60:ff:88:49:e4:37:32:c5:1e:ec:cb:3d:cf:17:
                    17:e8:12:94:73:0c:e4:1e:ad:1c:a9:66:bf:8a:65:
                    3b:ab:63:a2:29:d1:cd:48:7a:6f:8c:c4:45:09:ef:
                    5b:0c:ed:2c:b0:79:f0:10:9c:9b:d6:d3:33:ac:3c:
                    7e:f3:52:6e:51:a9:b5:e8:7d:12:63:94:9a:b3:92:
                    72:a9:e0:56:6e:fc:35:a4:5f:e4:35:9d:04:08:a3:
                    72:d9:a2:e8:96:a6:49:7d:f8:53:9b:a6:58:3d:02:
                    a7:bc:c8:60:56:bf:f3:ff:46:85:16:ce:7f:b6:23:
                    35:60:d9:48:5d:d1:c9:33:00:c8:7f:0a:b0:eb:6c:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:8D:72:E5:73:10:3C:56:37:EF:5A:99:D7:AC:18:FE:66:74:3F
            X509v3 Authority Key Identifier:
                keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/0DGNcuVzEDxWN-9amdesGP5mdD8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.228.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:00:8f:c3:e6:07:8e:78:aa:7c:77:df:51:ac:c2:e7:f6:d1:
         1f:ef:5f:24:73:92:73:13:30:f6:84:b4:01:84:f6:59:21:6b:
         f4:fd:55:40:4f:c1:9a:88:26:d1:28:0f:e5:ef:23:c0:79:ae:
         f4:aa:2c:f7:dc:d9:f3:64:6f:5e:ce:d3:04:07:4f:de:60:e7:
         c8:92:f2:e9:9e:72:77:a3:42:b4:8f:01:89:2b:e4:53:be:7c:
         cd:28:52:ba:8a:d7:49:b8:c5:0a:3c:69:76:5b:6b:12:d5:ec:
         ff:45:1e:1f:d6:12:65:97:51:03:f0:c1:63:d1:fb:9a:db:59:
         df:c3:9d:96:0f:61:b0:51:d6:58:b9:14:91:6f:da:6e:f4:2b:
         a9:0d:f0:20:e1:97:db:ab:d3:98:ad:f7:52:a3:db:5c:3d:54:
         7e:32:c3:38:6e:7f:16:70:22:0a:b0:37:69:6d:16:e5:bf:14:
         a8:96:0a:f6:2d:db:5a:f1:7f:86:c4:59:15:68:2b:bd:98:44:
         80:b1:6e:2b:e6:4b:53:02:d0:c7:3f:80:2c:7a:d8:66:de:f2:
         19:19:6b:8e:ae:06:17:f8:5c:f0:73:10:14:d4:a5:75:9b:1e:
         9f:45:22:c0:20:99:ac:5e:a4:fa:db:9e:c0:b4:29:05:62:3f:
         5b:48:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:57 2026 by rpki-client