Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1mUdSq_4AehRMg7rDV20jrdFvo4.roa
File:                     1mUdSq_4AehRMg7rDV20jrdFvo4.roa (raw, json)
Hash identifier:          eoZawuBUDuApTRa/OpP23ng2ZfXncGt1vS1BGyGsFWw=
Subject key identifier:   D6:65:1D:4A:AF:F8:01:E8:51:32:0E:EB:0D:5D:B4:8E:B7:45:BE:8E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05E8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1mUdSq_4AehRMg7rDV20jrdFvo4.roa
Signing time:             Tue 31 Mar 2026 08:21:05 +0000
ROA not before:           Tue 31 Mar 2026 08:21:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512 (0x5e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D6651D4AAFF801E851320EEB0D5DB48EB745BE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:e7:4d:ce:8b:f6:5f:9a:07:e1:84:a3:a4:
                    ef:5b:61:d3:3a:2f:a1:7d:1f:69:ef:13:69:cd:33:
                    2d:83:f1:74:b2:03:c7:d5:e8:4b:21:dd:5a:49:37:
                    49:e3:09:51:55:55:cf:2c:67:aa:93:87:ff:05:d6:
                    7c:81:dc:d1:ad:af:a0:e6:ab:d8:96:f1:2b:fd:19:
                    70:fc:c0:c0:d0:91:f3:4f:ce:34:68:d7:c4:59:08:
                    1e:fd:fb:10:48:43:68:fd:88:94:ab:e6:a3:aa:05:
                    2e:ba:8b:a3:01:71:17:cd:ee:20:fe:30:27:0b:f2:
                    f7:96:3e:94:76:28:6e:04:5a:2c:f7:47:9a:bb:cd:
                    e8:4c:35:9d:72:76:10:3f:fe:ff:cc:ee:cb:c3:99:
                    84:72:e8:b8:da:fa:17:48:80:01:5e:9f:a6:01:eb:
                    bb:b5:65:ec:5e:63:30:e9:99:0b:2b:48:bc:9a:43:
                    50:c6:02:18:7f:f3:5b:ad:d0:e7:91:0c:52:57:f8:
                    f3:99:b6:2a:9e:71:26:7b:71:9a:f6:29:b6:d0:80:
                    19:b9:32:9b:6a:9f:b3:b5:df:07:a0:46:28:e3:1d:
                    d7:f6:08:0d:6d:11:6c:22:ba:82:f5:ff:f7:62:ee:
                    7f:0a:12:4c:fd:86:a7:37:99:b6:41:b6:9d:98:3d:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:1D:4A:AF:F8:01:E8:51:32:0E:EB:0D:5D:B4:8E:B7:45:BE:8E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1mUdSq_4AehRMg7rDV20jrdFvo4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:55:7d:b2:2e:ba:fe:1b:48:e5:1a:59:64:2e:f1:b1:e2:
         13:a2:97:e3:4e:b8:38:77:9d:5f:a7:89:35:e4:1d:30:57:8f:
         57:c1:3c:f5:eb:b7:cf:14:7a:2b:9f:7b:bf:31:f5:75:46:cb:
         b0:a7:4c:b1:7b:02:30:ff:53:f8:ef:f3:c1:87:7b:0b:46:3a:
         f6:32:2c:0c:3e:01:a8:ea:26:8e:9f:77:11:5c:7b:e7:c8:90:
         80:3d:d9:8d:72:36:9c:a4:66:df:4a:f4:5f:64:b1:d1:81:f6:
         21:84:b9:4a:87:36:0e:2a:41:aa:19:eb:61:40:23:c5:fc:4f:
         2f:eb:d3:65:1c:56:3c:ee:d7:bb:6d:bb:a3:07:74:2a:9b:4d:
         3d:8e:22:97:22:6a:cc:10:c9:56:4f:68:99:38:f8:e3:b1:99:
         57:3a:20:04:11:c7:2d:32:a2:4f:13:08:28:71:35:44:df:c2:
         7e:b1:25:9b:18:4a:ad:9d:1a:77:59:64:1b:a9:16:bc:8e:a9:
         de:4a:b5:1c:ba:46:d6:7f:05:c2:ca:e7:1d:00:73:45:de:d5:
         8e:92:0b:37:db:92:a5:29:79:bb:4e:db:ac:73:0b:4a:31:c4:
         a0:c0:b3:db:90:25:7b:dd:1d:69:c4:37:97:d5:90:96:02:a1:
         0a:a1:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:18 2026 by rpki-client