Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/es2Gi2ne1JqX7aALNZAlLyLTUfY.roa
File:                     es2Gi2ne1JqX7aALNZAlLyLTUfY.roa (raw, json)
Hash identifier:          nPjmIcz67B/aODXmcU6n3ZxM9f53zVMsEleX899LbAo=
Subject key identifier:   7A:CD:86:8B:69:DE:D4:9A:97:ED:A0:0B:35:90:25:2F:22:D3:51:F6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       058D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/es2Gi2ne1JqX7aALNZAlLyLTUfY.roa
Signing time:             Tue 31 Mar 2026 08:20:23 +0000
ROA not before:           Tue 31 Mar 2026 08:20:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7ACD868B69DED49A97EDA00B3590252F22D351F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:a5:d1:27:4d:67:15:ce:88:9c:5f:79:02:
                    22:39:d4:ef:be:8c:bc:68:a7:7c:33:16:3a:e7:ee:
                    c5:80:b0:59:e5:e1:ee:a5:d2:36:bb:c0:45:9e:86:
                    34:b2:16:d6:de:87:de:0a:62:c6:cf:db:8c:a9:c9:
                    73:8b:29:40:1e:5d:09:c7:b2:fd:e9:ed:4a:67:36:
                    ec:75:a7:de:17:c1:3b:d3:21:17:08:b8:82:58:ff:
                    39:2e:64:35:fb:47:b2:8d:44:0d:8b:d1:0a:c3:37:
                    42:c5:f5:db:f1:af:10:23:7c:90:f3:5b:29:dd:f6:
                    db:dd:22:47:80:d5:49:d4:ed:6b:a0:62:93:26:e3:
                    95:37:34:52:8d:76:a9:88:12:20:4f:53:53:54:fc:
                    cf:01:11:37:a3:be:e9:32:89:1b:52:c9:ad:7d:47:
                    98:0d:a9:1f:f7:99:9a:b4:2a:be:16:bd:67:58:4d:
                    3e:95:07:fb:70:2a:a1:c1:c5:62:29:b8:05:c2:50:
                    bd:37:d4:12:78:41:b3:0c:31:9d:c5:76:98:4f:b7:
                    b6:10:dd:60:a3:d6:82:36:6c:b8:fe:73:1b:6a:6a:
                    c2:1a:c0:55:ac:2b:cb:a9:1c:31:52:cc:4d:99:83:
                    5f:00:0f:aa:ac:9a:85:e9:13:e1:1b:bd:0f:7d:92:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CD:86:8B:69:DE:D4:9A:97:ED:A0:0B:35:90:25:2F:22:D3:51:F6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/es2Gi2ne1JqX7aALNZAlLyLTUfY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:bd:ca:8f:b5:bf:1f:92:d4:fb:c7:db:cf:12:50:74:4a:e7:
         bd:3a:9c:77:fc:23:f3:48:e1:c3:5b:8c:28:8b:28:ba:e2:6f:
         2a:fb:a3:4d:76:d7:eb:50:98:c9:c6:09:16:df:07:8e:ae:36:
         c6:fe:78:8e:78:c8:56:90:73:be:09:38:14:8a:b8:78:e2:57:
         78:ef:09:bf:c4:75:6c:0e:c0:c4:09:2f:d4:6d:6f:c5:04:e9:
         d0:05:ef:fb:50:7b:95:a1:b1:99:7e:a8:d5:dc:ab:73:df:90:
         a8:c2:88:ac:93:25:84:b5:2f:02:0d:a5:65:32:e8:94:e1:ac:
         27:1c:7f:4b:86:25:a5:eb:10:16:a5:cd:05:f2:74:77:93:0a:
         4a:91:b8:dc:c4:26:31:48:eb:d0:e9:7b:5c:af:8d:ae:69:28:
         c7:38:fb:6a:e7:82:c4:66:85:7a:6e:56:55:7a:88:22:a6:d5:
         a5:a5:a1:76:59:11:6f:82:45:0b:f2:aa:2c:b8:c6:d7:01:2e:
         08:aa:44:63:e7:9e:88:bd:b8:bf:53:09:f5:df:d6:26:fb:34:
         6c:42:33:02:c0:7e:f2:91:fb:07:3a:5c:1d:9d:78:b2:fe:59:
         1f:de:af:4b:6f:87:b2:8e:47:5d:93:f5:fd:5c:5c:8d:51:9d:
         66:22:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:32 2026 by rpki-client