Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4DlBXd9dYDZdSgQi3g-I3a6dNo8.roa
File:                     4DlBXd9dYDZdSgQi3g-I3a6dNo8.roa (raw, json)
Hash identifier:          ywt7ThaadslvQRVmoCI0nArCUy/6VEf6dhH2KSrB0mA=
Subject key identifier:   E0:39:41:5D:DF:5D:60:36:5D:4A:04:22:DE:0F:88:DD:AE:9D:36:8F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0612
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4DlBXd9dYDZdSgQi3g-I3a6dNo8.roa
Signing time:             Tue 31 Mar 2026 08:21:26 +0000
ROA not before:           Tue 31 Mar 2026 08:21:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E039415DDF5D60365D4A0422DE0F88DDAE9D368F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:60:cb:48:40:33:f4:7e:f8:d5:da:6a:01:
                    b2:66:f1:ee:69:6e:f5:e9:bc:2f:11:46:3c:63:d1:
                    d5:4d:b2:82:64:e3:5f:97:c6:32:15:21:24:82:53:
                    a0:32:1c:a3:73:90:14:4d:8b:33:89:9a:70:db:99:
                    91:4e:10:0b:57:8b:16:6b:4d:ae:38:15:b5:da:3e:
                    7f:d0:5c:39:b1:77:cf:d3:e5:43:d2:49:48:39:ae:
                    f7:a1:e3:68:a3:7b:75:b1:60:cd:a8:52:2a:35:eb:
                    e1:d4:c0:59:f3:d5:0a:3c:9b:c3:a8:07:86:cc:92:
                    5d:33:5b:70:fe:99:ca:08:42:55:c4:06:65:94:3f:
                    23:1b:83:2b:f9:09:33:68:1d:bc:a3:4c:a2:7e:3b:
                    80:bd:3e:b7:1e:e9:81:cf:45:5d:e0:a3:a1:84:3b:
                    b1:0c:e4:06:9d:b0:60:00:9c:e5:f1:8e:ed:8f:83:
                    26:5d:26:80:f2:bf:81:56:cb:cd:32:c0:cc:70:e6:
                    8f:92:97:2e:3a:ac:06:95:a0:af:25:7d:18:02:52:
                    b6:46:50:fd:8d:b1:ba:a3:c6:5e:fb:5d:0a:d2:88:
                    b1:80:03:94:26:29:13:ae:5a:24:7a:07:fc:60:19:
                    a8:4f:70:71:7c:4f:cf:1c:b8:ef:42:c1:8a:61:38:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:41:5D:DF:5D:60:36:5D:4A:04:22:DE:0F:88:DD:AE:9D:36:8F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4DlBXd9dYDZdSgQi3g-I3a6dNo8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:ae:e2:14:c3:54:a6:c9:39:3b:f1:e1:ab:cb:82:9a:0d:
         b5:d6:2a:b6:96:fe:b2:28:b0:47:f3:1f:5b:32:24:b1:72:bc:
         dc:7c:02:34:3f:27:78:87:01:1b:4f:25:b4:af:96:8a:df:a3:
         31:d9:9d:fa:b2:7e:e8:d4:93:bd:a1:88:04:7b:24:dd:ee:e5:
         22:86:c8:70:00:f7:24:e5:1d:3a:6f:3f:72:34:4c:25:66:6b:
         7d:76:e0:77:51:51:a6:11:67:43:18:90:dc:3d:5c:32:ac:a0:
         4d:2f:65:ab:18:fa:16:4e:de:2a:c7:8b:5a:51:66:94:7d:fd:
         b0:ce:84:3e:fe:5b:90:f5:9e:3e:15:ed:52:ab:3d:83:a6:ca:
         03:07:1f:a1:1d:63:e8:d9:76:55:7a:99:bd:0c:e3:d8:75:ea:
         4b:68:64:f5:ef:69:37:60:c8:8f:d2:ea:af:87:c2:b1:4e:45:
         44:14:51:f6:29:d6:44:26:0c:9d:24:4d:15:d4:67:70:93:5a:
         1e:32:81:1d:08:00:3e:3d:5e:18:b5:36:12:bc:b8:60:8d:6b:
         da:da:cb:0e:4f:f0:cd:31:c2:c5:dc:58:33:1a:bb:59:9c:1c:
         49:1d:0f:6d:8c:bc:11:c8:b6:6a:7b:36:44:4c:85:cd:33:5e:
         3e:6d:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:26 2026 by rpki-client