Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/Dt79vFPcVcwFzmmsrA2o8tGM_pQ.roa
File:                     Dt79vFPcVcwFzmmsrA2o8tGM_pQ.roa (raw, json)
Hash identifier:          qiUYBVNv4cnPIe3toWzdcEzD5dMqEHTKmCGLscDv8h8=
Subject key identifier:   0E:DE:FD:BC:53:DC:55:CC:05:CE:69:AC:AC:0D:A8:F2:D1:8C:FE:94
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       D2
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/Dt79vFPcVcwFzmmsrA2o8tGM_pQ.roa
Signing time:             Wed 14 Oct 2026 00:06:15 +0000
ROA not before:           Wed 14 Oct 2026 00:06:15 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 13:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Oct 14 00:06:15 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=0EDEFDBC53DC55CC05CE69ACAC0DA8F2D18CFE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3e:7d:0a:53:c6:fe:a1:3f:1e:93:fb:27:fa:
                    ed:b9:74:de:46:10:94:09:80:69:08:37:be:a1:09:
                    47:c6:b8:91:a7:f4:31:b5:79:1c:d2:ce:5c:e7:a6:
                    de:f9:b1:f3:36:33:6b:f2:d9:c8:66:56:77:4f:14:
                    ad:87:e3:dd:bf:6f:46:bb:e9:d1:92:67:a7:6c:18:
                    a9:7c:e5:62:65:53:d9:fe:0f:d5:91:89:60:94:48:
                    63:2f:b8:ea:7c:3b:98:26:f6:cd:64:5c:38:10:28:
                    f4:da:9c:30:6b:f7:c0:8c:f3:a2:0e:56:cb:0a:e4:
                    d5:84:94:5b:7c:47:91:52:ac:57:34:5e:8f:fb:35:
                    db:eb:50:2a:96:c3:9f:3e:6c:72:3e:93:52:9d:f4:
                    f4:67:b1:c1:cf:52:a6:8b:83:de:20:49:8a:45:7f:
                    cd:a1:13:81:b4:2b:12:27:61:a4:4b:bc:eb:d9:44:
                    0e:dd:a6:92:35:15:31:6d:0f:40:b8:45:0e:42:d0:
                    15:56:2e:6b:08:02:4d:8f:fe:58:7b:b1:cd:e1:ff:
                    e6:76:90:24:25:f6:34:08:22:25:75:4b:c0:bb:5c:
                    9a:d8:70:8c:f7:82:17:e2:df:99:1f:bb:63:e7:12:
                    71:fe:74:16:60:49:1c:ae:a1:e0:87:f8:2a:76:ee:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:FD:BC:53:DC:55:CC:05:CE:69:AC:AC:0D:A8:F2:D1:8C:FE:94
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/Dt79vFPcVcwFzmmsrA2o8tGM_pQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:61:40:cc:99:c2:ee:16:a2:e4:81:7d:cc:b3:a4:55:01:
         c8:97:92:db:c0:67:2e:98:29:a6:d6:2d:2c:10:f1:59:15:68:
         53:81:da:49:70:7a:f2:a7:e5:13:e9:b9:c8:05:a8:bb:1e:4e:
         63:03:61:e5:84:48:e0:0d:ca:ff:82:a3:9b:9e:de:db:0c:9f:
         5c:31:72:7e:03:ec:8d:56:a9:18:96:11:0a:76:cc:5a:74:14:
         bd:31:75:96:f4:68:ad:fd:f9:9a:53:3e:74:62:71:37:bd:62:
         94:d0:48:37:ac:ff:af:34:b0:40:0e:e1:5f:a5:32:10:73:af:
         50:61:07:a7:cd:6b:e3:6d:ae:a4:57:04:68:65:9f:af:d1:05:
         d6:ec:3f:f6:6e:ff:51:36:af:9c:f2:7c:da:9d:90:ee:5a:e1:
         a9:2d:c3:fe:3b:41:b4:23:23:1e:1a:99:e8:04:67:56:1a:37:
         2c:92:8f:33:47:5a:76:ab:51:62:b4:41:31:e7:4f:8e:f5:c9:
         4d:ba:b4:55:9a:56:a6:ca:e1:8e:24:ef:3e:ea:6e:d0:72:0c:
         c0:c3:c6:15:51:90:ce:d7:60:01:ee:f2:16:de:18:62:15:44:
         3c:f6:26:34:0a:53:c8:9c:33:19:12:3a:9c:10:c8:ff:ba:47:
         b0:4e:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:48 2026 by rpki-client