Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Eygd2zlO8x0SQovvCc3ACPjkrzM.roa
File:                     Eygd2zlO8x0SQovvCc3ACPjkrzM.roa (raw, json)
Hash identifier:          Ll3oNFgfzY/T5JmVGrgF0lAbJLyS9dDLEEN8FNE3ycE=
Subject key identifier:   13:28:1D:DB:39:4E:F3:1D:12:42:8B:EF:09:CD:C0:08:F8:E4:AF:33
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       060D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Eygd2zlO8x0SQovvCc3ACPjkrzM.roa
Signing time:             Tue 31 Mar 2026 08:21:23 +0000
ROA not before:           Tue 31 Mar 2026 08:21:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=13281DDB394EF31D12428BEF09CDC008F8E4AF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:90:8e:40:bb:a7:b2:3f:cc:1a:11:74:7b:
                    86:2f:40:9c:54:50:80:c8:74:81:af:af:57:33:7b:
                    0d:9d:b6:5e:e9:6d:27:ff:5d:99:d2:6f:41:23:75:
                    b5:88:d8:52:8d:c5:2c:e6:55:9f:66:aa:50:0e:6f:
                    45:a0:c1:c1:75:e7:d0:84:bd:21:90:55:22:52:e2:
                    36:ff:77:58:da:0a:65:2a:4e:a4:69:26:13:b3:5b:
                    73:ba:cb:2f:48:34:b3:3a:f2:36:3f:89:87:c3:97:
                    ae:f1:88:d9:9c:f3:a0:ec:59:e2:d1:0f:3f:40:24:
                    78:de:ef:23:23:87:e4:32:14:8e:92:e0:e6:4a:ac:
                    fa:c7:d5:77:44:d3:e6:8f:b8:25:25:8a:d7:fc:a2:
                    22:1b:04:a3:22:b7:b6:ea:e3:1c:34:03:f8:ea:98:
                    2e:93:8c:ee:89:1b:a8:1f:66:b9:d4:b9:b0:0c:c2:
                    5a:15:84:bb:f4:75:2a:b8:36:ec:64:e5:9b:80:3a:
                    17:c0:2b:31:a0:bb:5a:bd:9c:18:62:83:02:0a:0f:
                    85:b4:ab:7e:6f:2a:c0:ba:38:de:23:b3:88:7f:f3:
                    15:96:3a:75:5f:a7:be:8f:c9:21:e9:93:58:f8:45:
                    3f:2f:02:cd:8a:1e:d1:64:f7:7a:74:6b:fe:3b:7a:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:28:1D:DB:39:4E:F3:1D:12:42:8B:EF:09:CD:C0:08:F8:E4:AF:33
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Eygd2zlO8x0SQovvCc3ACPjkrzM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:5c:da:51:4f:e2:df:f0:af:78:4b:94:aa:98:c3:d8:31:
         ed:3c:ca:b5:23:b8:22:95:70:ad:e9:07:c9:d4:c0:b0:e2:f1:
         80:0d:ed:d5:78:c4:30:3a:14:a0:5e:3b:55:aa:af:59:53:64:
         f2:0b:57:17:0e:76:bc:da:13:86:7f:d4:58:09:62:ea:e3:e1:
         f1:45:b9:06:99:9f:bd:ea:30:87:61:f4:cc:ac:b6:ee:a7:46:
         b3:f5:d4:d0:cd:56:38:a8:16:41:5c:fd:96:e2:fa:fd:61:8a:
         99:27:54:69:42:a0:b0:3f:e9:10:e4:af:f0:3e:2c:bd:2b:2e:
         bf:92:91:27:06:1d:50:73:ef:0f:12:85:d9:4c:b7:52:f9:ce:
         67:61:38:de:c0:77:05:45:ea:3f:41:91:3f:71:9b:21:08:66:
         2c:ad:c2:a2:74:bb:9a:0c:94:28:c6:36:10:76:51:28:d7:77:
         ba:ab:d6:fa:1f:bf:2e:49:93:ea:18:3c:f6:2b:d2:ef:1e:97:
         12:13:c4:09:c3:52:d9:5f:c1:b1:10:f4:56:6a:5f:fc:71:d6:
         f4:27:62:94:16:3b:6c:bf:78:fb:b9:ec:2f:9a:c5:a8:f8:63:
         df:fc:4d:0a:fa:40:c4:aa:43:51:9e:70:5f:42:91:a0:7e:07:
         20:bf:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:48 2026 by rpki-client