Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dlcOw6L78WgeoBwiTHKmaxI-zJ8.roa
File:                     dlcOw6L78WgeoBwiTHKmaxI-zJ8.roa (raw, json)
Hash identifier:          jLOw7ghCf4ZM3Ige2WlCob8o3GLZFWqDUNsQ/GWg28M=
Subject key identifier:   76:57:0E:C3:A2:FB:F1:68:1E:A0:1C:22:4C:72:A6:6B:12:3E:CC:9F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       060C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dlcOw6L78WgeoBwiTHKmaxI-zJ8.roa
Signing time:             Tue 31 Mar 2026 08:21:22 +0000
ROA not before:           Tue 31 Mar 2026 08:21:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=76570EC3A2FBF1681EA01C224C72A66B123ECC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:97:c5:f8:7b:04:bb:21:e0:ce:f3:ee:24:
                    b1:ca:a2:03:81:5a:ed:18:b0:f8:d8:cc:4c:2d:46:
                    38:87:51:a3:17:ce:97:7e:15:f5:61:a9:24:b1:43:
                    fd:c2:9d:72:8d:89:c0:4b:3f:99:14:82:de:6f:75:
                    6d:9b:cc:cd:84:cd:ce:0a:43:f9:1b:a4:fb:88:a8:
                    bf:02:05:fb:9a:5e:e7:aa:1e:e3:c6:a4:5a:c6:9a:
                    c2:99:a9:d8:0d:ae:f7:f3:e4:ff:d4:ce:0b:9b:2b:
                    bc:17:3b:58:02:f2:ea:74:79:4c:af:d7:d5:5d:4f:
                    a9:19:3d:8d:e0:b5:33:76:2e:79:39:3b:cd:91:68:
                    af:fd:09:89:7f:5a:08:c9:90:88:b5:6d:a6:d6:7c:
                    bf:a9:34:9e:3c:89:38:4d:8e:b1:3d:cd:f8:03:87:
                    91:f2:28:4d:3b:8a:6f:21:48:6f:91:b2:79:e5:95:
                    b1:4e:bb:de:72:e1:4c:8b:fd:77:2d:e4:ca:cb:b7:
                    0c:19:14:72:2f:2b:ee:ab:fc:17:48:67:95:18:35:
                    09:52:25:ba:fb:42:45:af:f9:59:ac:f4:c6:1f:f8:
                    84:e0:fc:11:3e:13:27:8d:be:4e:cf:e3:a6:1d:ff:
                    89:31:d6:d9:40:5c:67:92:71:d5:1b:5a:1d:7b:3e:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:57:0E:C3:A2:FB:F1:68:1E:A0:1C:22:4C:72:A6:6B:12:3E:CC:9F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dlcOw6L78WgeoBwiTHKmaxI-zJ8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:bf:5e:f5:66:72:8f:05:26:0b:a6:e1:b6:00:13:5b:a8:
         63:5a:cb:95:4d:85:d0:d6:41:a9:46:71:2a:66:11:ce:53:6d:
         61:f5:97:b2:39:be:c0:a4:b9:d8:21:c4:f6:ee:fa:cb:e1:30:
         ad:51:0e:ec:5b:66:61:e5:31:49:3b:9c:6a:1a:49:65:55:d9:
         4f:d2:2e:88:a2:b9:b1:b3:44:22:50:0b:c1:fa:87:d4:cc:ac:
         04:d7:83:fa:b7:d5:d4:5e:6b:e5:ce:ec:14:9a:5b:dd:ec:ce:
         e2:28:80:a1:af:2b:c3:d5:aa:2b:b7:c6:63:c7:4a:38:3c:a8:
         f0:15:4d:be:d5:e5:9c:8d:9c:d1:f0:1f:75:44:7e:4c:14:c0:
         3a:a1:68:ce:81:1f:92:83:af:44:aa:32:0c:5f:da:bd:03:40:
         ff:3a:3f:83:e6:86:79:ec:ac:48:18:1a:01:8a:07:55:91:6e:
         35:36:c5:e8:3e:fe:67:27:88:8e:60:65:6d:f4:14:02:24:e5:
         ed:0d:27:03:1a:4c:ba:7f:99:ba:bf:04:4e:a7:66:63:b4:20:
         56:5a:b6:04:0f:61:15:7b:96:e1:55:47:00:0b:c8:ca:13:1d:
         3e:ba:e1:b3:97:b7:17:4e:7c:e1:cf:ba:8c:96:5c:75:8a:0a:
         e7:e8:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:40 2026 by rpki-client