Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DcpscnFOafQKZP2SJ9nN5oHi4Fo.roa
File:                     DcpscnFOafQKZP2SJ9nN5oHi4Fo.roa (raw, json)
Hash identifier:          rDkmCTyeCOPSjPiXDnVcCFIqQ2KXpZmKrJCByGPgXwY=
Subject key identifier:   0D:CA:6C:72:71:4E:69:F4:0A:64:FD:92:27:D9:CD:E6:81:E2:E0:5A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0459
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DcpscnFOafQKZP2SJ9nN5oHi4Fo.roa
Signing time:             Mon 01 Sep 2025 01:34:04 +0000
ROA not before:           Mon 01 Sep 2025 01:34:04 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        27.135.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Sep  1 01:34:04 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=0DCA6C72714E69F40A64FD9227D9CDE681E2E05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:f8:ac:0a:dd:3e:fc:4d:be:61:87:ba:23:
                    e1:1e:29:2f:c3:1a:9f:e9:4d:3f:60:59:35:11:f7:
                    b0:4a:fe:01:bd:ad:f6:41:81:6f:51:a3:86:e1:f8:
                    3a:9c:15:40:29:2e:dd:01:75:0e:70:b9:8d:cd:4c:
                    9c:56:71:c5:25:9c:c9:7a:82:6a:e4:38:e8:2e:b4:
                    a7:bd:7f:9c:3d:de:f1:8c:ee:99:42:e2:b6:c5:31:
                    d5:8d:f0:96:0d:d3:e1:3f:72:7a:a4:e8:97:4f:33:
                    a8:b1:ea:46:7f:20:30:12:48:cb:65:03:13:8a:d5:
                    5c:34:cf:7d:41:2d:ee:ad:25:24:8e:03:db:5d:d9:
                    ee:5f:e7:49:91:5c:ff:c3:d2:a4:72:c4:54:55:7b:
                    a4:bd:37:ac:db:29:d7:d4:37:40:9e:9f:ad:e0:c7:
                    89:e5:3f:56:b1:ba:fe:0d:ec:4d:67:e7:4f:bf:87:
                    62:50:bc:64:41:36:c0:ad:ff:39:2b:24:3a:db:22:
                    ea:51:9b:85:27:24:e5:a7:df:ca:be:38:95:eb:8b:
                    9e:9b:21:13:95:5a:2f:37:20:a2:ab:47:eb:88:7c:
                    6b:4f:37:fa:92:e6:d6:da:7b:8a:b8:e5:c1:dd:b2:
                    37:fa:26:0d:f6:a3:64:00:ab:ae:ac:6b:97:fb:af:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:6C:72:71:4E:69:F4:0A:64:FD:92:27:D9:CD:E6:81:E2:E0:5A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DcpscnFOafQKZP2SJ9nN5oHi4Fo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:1d:fd:3f:56:bc:20:de:8f:b1:68:1c:4f:33:82:1e:21:37:
         d5:40:15:05:32:ed:96:14:36:21:4f:02:cf:b8:75:2b:9e:ba:
         a7:aa:0b:00:7b:78:9e:33:5c:e7:cd:10:e2:72:b1:52:f9:12:
         e1:81:b2:7d:05:fe:20:d8:fd:17:a2:47:59:6c:ad:cf:d3:d1:
         c8:44:b7:20:d3:e6:48:1b:df:ac:35:2e:43:c2:d9:e1:a8:29:
         30:75:00:42:e6:a1:94:00:56:76:20:20:de:3a:b8:69:2a:f5:
         d2:15:d4:a4:6d:2e:17:25:53:df:26:3c:2c:78:c2:81:1b:bc:
         14:7a:da:84:38:4e:c7:ac:55:4c:ae:61:68:57:ae:e2:49:a7:
         80:ad:c6:58:2b:87:79:20:ad:aa:56:66:86:fd:65:e4:4d:9a:
         b5:ce:53:41:7e:79:4f:4f:10:89:26:d8:96:4c:7a:7d:95:a4:
         b6:b8:2b:69:53:72:bf:ca:02:61:ba:e0:33:20:29:dc:1a:de:
         af:0a:5c:c8:6a:59:c3:95:c4:6e:f5:1f:6a:f5:71:d5:70:be:
         26:21:6d:17:27:f9:52:9e:d6:cf:ee:25:5b:d2:82:2d:76:cc:
         49:10:ec:2a:24:b3:e6:3b:e1:5b:f7:93:42:54:f5:3c:af:e6:
         65:9d:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:10:13 2025 by rpki-client