Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuFM43wU6az17-oHgbMmSDzQUwE.roa
File:                     TuFM43wU6az17-oHgbMmSDzQUwE.roa (raw, json)
Hash identifier:          IxPQwUhQdiLxVc3gXkECrwROzk5YQMZ2EiN0K/pFYAg=
Subject key identifier:   4E:E1:4C:E3:7C:14:E9:AC:F5:EF:EA:07:81:B3:26:48:3C:D0:53:01
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0613
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuFM43wU6az17-oHgbMmSDzQUwE.roa
Signing time:             Tue 31 Mar 2026 08:21:26 +0000
ROA not before:           Tue 31 Mar 2026 08:21:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4EE14CE37C14E9ACF5EFEA0781B326483CD05301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:d4:55:e0:f5:99:d5:1a:2c:21:fc:e9:4f:
                    25:79:34:5e:09:1e:f2:68:79:05:0a:c7:cd:93:95:
                    06:2c:0e:98:0a:7f:1e:15:52:49:91:70:b4:a8:9f:
                    47:78:f0:13:3a:32:ac:f3:83:5e:31:e7:3e:73:16:
                    26:46:98:69:85:5a:0b:0b:91:64:55:e0:7b:4d:41:
                    82:62:3c:44:98:b4:37:30:68:9d:8c:ab:8d:4a:04:
                    f0:3d:c9:24:0b:1b:cf:26:e6:62:cd:c7:f5:5e:e9:
                    46:14:5f:02:4e:ed:4a:01:a2:e4:69:11:1a:57:07:
                    0e:82:4a:4c:c8:cf:08:7e:01:0f:8f:3f:9d:d2:bd:
                    a1:56:bf:1e:0b:7c:33:6b:80:47:ee:72:6e:9f:b5:
                    a1:80:2b:1f:99:88:72:ef:d8:db:be:ae:84:e3:f4:
                    a7:a2:3c:4c:0a:9f:71:e8:01:ab:d2:98:88:3e:e8:
                    f6:ac:df:5b:2d:1c:cf:3c:1d:55:11:5b:c1:bc:bc:
                    2c:40:d5:a5:71:a7:8b:9b:d5:e4:76:fb:ca:20:c5:
                    a3:39:bf:c5:3f:84:f1:b4:75:d7:e6:3f:8b:3f:2b:
                    70:7a:09:03:45:78:64:8e:52:bb:ff:d1:f9:fc:d2:
                    d9:09:35:62:d7:2d:e3:98:2c:eb:49:a5:75:5e:be:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:4C:E3:7C:14:E9:AC:F5:EF:EA:07:81:B3:26:48:3C:D0:53:01
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuFM43wU6az17-oHgbMmSDzQUwE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:4f:d2:94:a8:f7:2b:7b:f6:08:8d:0a:12:93:c0:19:fa:52:
         2c:61:de:13:c3:43:c7:6a:cf:e5:cf:06:69:0a:d3:c7:a1:21:
         df:00:0a:6e:86:a1:aa:b9:e2:61:ae:d4:2b:2a:95:b0:8c:06:
         49:08:2b:e6:59:cf:bf:ae:44:e2:5a:bb:f5:17:43:7a:c9:c5:
         53:35:0e:7c:b8:9d:ba:39:5c:1e:ad:80:fb:0e:0c:cd:ec:db:
         b8:93:16:09:3b:36:2d:a0:0f:8e:9a:cc:58:9b:11:8c:f4:a2:
         74:09:ec:04:c2:c9:62:96:e4:11:45:75:2f:92:95:86:c6:47:
         28:eb:e7:b8:8d:bd:84:90:b9:9c:78:6f:2b:97:50:d3:99:31:
         8b:4e:64:ce:86:d2:3e:83:2c:15:aa:99:ca:6d:9a:17:e2:41:
         03:03:41:00:f9:16:cf:14:6f:05:46:ed:54:e3:9d:79:84:88:
         fe:87:b5:76:ce:44:8c:bc:48:ef:c4:fa:5b:df:c8:a4:10:0c:
         a1:15:02:6a:32:be:33:0d:cc:ad:bb:14:ac:f1:3a:55:84:b5:
         eb:44:0f:cb:9d:a1:58:4e:09:79:86:2c:bd:69:ff:60:69:e9:
         6f:06:01:f1:56:3f:c0:36:ed:e3:65:77:78:6b:bf:ca:50:29:
         b7:eb:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:25 2026 by rpki-client