Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gLbr99zqCFCH5M5Rtzk_KAgQHvU.roa
File:                     gLbr99zqCFCH5M5Rtzk_KAgQHvU.roa (raw, json)
Hash identifier:          n2STpvRnh0/qGPS9pB9KzmeSdYPh5yIFdQ2TzlGsj8s=
Subject key identifier:   80:B6:EB:F7:DC:EA:08:50:87:E4:CE:51:B7:39:3F:28:08:10:1E:F5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0614
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gLbr99zqCFCH5M5Rtzk_KAgQHvU.roa
Signing time:             Tue 31 Mar 2026 08:21:26 +0000
ROA not before:           Tue 31 Mar 2026 08:21:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=80B6EBF7DCEA085087E4CE51B7393F2808101EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:37:b5:78:1f:d6:6b:c9:a1:6b:70:f8:1f:
                    f4:5b:a5:ec:d7:65:e1:90:47:2a:2b:9d:08:c2:9b:
                    be:6b:5e:e3:e3:07:d8:92:c2:46:16:b2:ad:58:17:
                    1f:01:a5:39:db:a5:e5:6a:ed:53:62:ae:4d:6d:8c:
                    a0:09:68:88:bc:84:f1:c2:b7:15:32:60:58:01:65:
                    a6:f6:f6:d9:2f:ee:16:40:1e:87:80:df:47:d7:1d:
                    79:2b:ca:9b:04:03:a9:51:15:69:98:f3:6d:47:74:
                    ee:37:01:f7:87:66:f9:cd:c7:65:df:84:bb:b6:6f:
                    4a:d3:a7:5a:2f:a6:39:23:dc:80:50:d3:ed:3a:7a:
                    ed:12:8b:c9:57:6d:42:dc:42:a0:8f:13:58:bb:89:
                    57:f7:80:33:d9:4a:f8:03:e0:86:aa:6d:41:12:00:
                    c0:bc:36:2f:67:66:15:ad:c0:c8:fa:6e:f8:cd:06:
                    34:d5:7c:16:80:a2:08:c4:c0:e1:45:03:d8:b8:fd:
                    49:7e:f4:2b:3a:db:40:dd:16:a2:23:8f:10:fa:9d:
                    f2:e9:40:91:e3:31:16:0a:b1:a3:9e:c0:07:b5:f1:
                    d4:bf:75:13:28:8d:b7:d2:74:89:d3:8a:b2:db:cc:
                    22:bf:e8:f5:a6:be:8f:65:85:7f:6a:2b:cf:bd:1f:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B6:EB:F7:DC:EA:08:50:87:E4:CE:51:B7:39:3F:28:08:10:1E:F5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gLbr99zqCFCH5M5Rtzk_KAgQHvU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:6d:03:e0:54:84:eb:a7:dd:97:f1:16:ac:cc:3c:3f:8b:
         04:de:0a:5b:39:4f:8a:c5:b7:a8:ae:3d:4c:0d:c6:94:3e:3d:
         04:59:4e:04:7c:95:fc:26:27:fe:4e:a8:9d:3f:17:52:8a:7f:
         f3:9e:53:81:e1:80:9b:c2:d3:57:79:a1:96:7c:1a:21:12:86:
         a8:45:6d:e4:e1:59:dc:60:9c:0c:55:cf:96:70:8b:b3:a0:14:
         aa:9b:2c:54:13:ae:76:32:46:8e:01:ad:15:f6:96:51:ad:ff:
         3a:1d:09:e7:d1:7f:70:25:5c:6a:18:6d:67:e8:dc:1f:12:f0:
         d0:19:9a:15:47:0d:da:07:c2:d9:0e:d5:f6:ad:db:1c:77:83:
         67:b4:53:30:cd:05:ec:ec:a2:4a:59:21:f8:83:c4:d1:aa:29:
         6e:bd:96:2c:60:a3:1b:7a:0d:18:c9:19:8d:f0:f1:44:56:cf:
         c1:1a:a4:43:6f:89:65:1f:6e:82:07:84:e3:b5:c6:08:ad:0f:
         41:31:22:ee:46:1a:14:11:f0:f9:0f:60:f6:1b:c0:19:f4:03:
         8f:88:bb:da:b3:56:c5:a3:1d:0a:7c:b6:6f:14:a9:f6:cc:a8:
         e9:2a:b2:1c:62:02:5e:cf:91:67:03:3f:31:1e:7c:35:50:0c:
         19:96:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:26 2026 by rpki-client