Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2ylMJNLkClGly2btU6QLTaquTRA.roa
File:                     2ylMJNLkClGly2btU6QLTaquTRA.roa (raw, json)
Hash identifier:          H3wrPEuXsBOqPM5hcftuJz2pfhyAahs5rYi4I3lCM4c=
Subject key identifier:   DB:29:4C:24:D2:E4:0A:51:A5:CB:66:ED:53:A4:0B:4D:AA:AE:4D:10
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       060F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2ylMJNLkClGly2btU6QLTaquTRA.roa
Signing time:             Tue 31 Mar 2026 08:21:24 +0000
ROA not before:           Tue 31 Mar 2026 08:21:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DB294C24D2E40A51A5CB66ED53A40B4DAAAE4D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:be:5e:e0:ac:42:db:57:f7:21:7f:70:3f:
                    b1:66:8a:6b:44:d9:9e:e7:c4:90:97:f3:0a:74:15:
                    e1:8f:ac:b8:d2:aa:23:67:53:a1:4c:01:a8:79:21:
                    65:8b:15:8d:e9:43:81:51:ae:14:7b:a4:44:c6:76:
                    9d:a2:8f:0e:a0:20:1d:11:c3:f7:98:fd:f7:06:99:
                    ba:b7:74:56:50:ad:f6:5f:90:58:55:12:8d:80:be:
                    3d:ea:1f:13:c6:10:86:e2:e2:98:6b:d9:b7:c8:33:
                    0a:40:d0:1d:aa:b8:c2:97:9b:2b:bd:22:7e:70:81:
                    1c:0c:65:d8:0c:11:8b:39:22:63:f5:8f:87:34:18:
                    84:9b:8b:d6:6e:01:05:0c:c1:fd:6f:7c:4a:72:29:
                    a7:f4:17:8f:bb:1a:5f:52:14:dd:2b:35:fa:2f:ba:
                    65:db:c4:fc:98:2d:c0:5f:b5:98:ba:46:6e:b9:51:
                    7c:e9:e2:af:b9:da:aa:11:87:8b:54:f8:b3:fd:17:
                    e1:8a:a2:1f:0a:14:f8:63:63:16:36:82:db:8c:71:
                    42:31:74:f3:b7:fa:cc:91:6f:b7:80:45:eb:63:18:
                    70:1b:f3:03:74:d9:73:ae:ec:1b:1f:7e:c1:39:62:
                    fe:4e:fd:fa:57:ea:64:39:0d:07:18:5b:01:03:a8:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:29:4C:24:D2:E4:0A:51:A5:CB:66:ED:53:A4:0B:4D:AA:AE:4D:10
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2ylMJNLkClGly2btU6QLTaquTRA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:49:e8:f2:69:2a:01:54:e2:d5:7b:53:52:23:1c:9a:29:
         42:21:94:54:92:b4:e5:bc:45:b2:82:9a:61:3c:78:9a:22:c2:
         a0:33:dc:ba:f8:e4:1f:bb:c1:19:60:86:8e:17:ef:68:d9:f7:
         66:04:5e:87:b8:cd:f8:c1:1e:ce:19:30:2c:f8:f2:3c:20:ab:
         02:f6:0d:5d:48:ea:13:57:e9:3e:20:64:3f:f7:4c:05:a7:05:
         75:28:23:2b:c8:52:94:9a:e1:fa:ef:73:07:a8:39:38:26:27:
         6d:cf:76:3f:2c:85:bf:a3:e6:17:81:08:9c:44:d2:31:43:b5:
         a7:e5:bb:7b:37:b6:12:9e:91:b9:0c:16:86:fa:31:8f:cb:11:
         23:40:12:5d:1d:05:95:85:88:75:d9:6c:8d:14:5c:f0:28:8c:
         03:b2:33:63:1d:5b:6d:2f:2f:84:6e:ab:90:74:62:cf:b4:4e:
         ad:f0:78:ee:b4:19:b8:3f:ab:76:cc:5e:2f:3f:ef:65:dd:ba:
         ce:86:f9:e7:ac:fa:1c:30:90:61:f2:dc:2c:86:76:9e:49:21:
         ea:a1:64:a5:b0:3c:ec:4e:31:db:54:df:60:ac:94:9b:be:55:
         cd:ec:90:f8:69:33:9f:c6:46:d8:bb:db:e1:51:e4:c5:9c:ab:
         b6:b2:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:35 2026 by rpki-client