Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/mwl4Dt_QOSrmzs4dWh7DEX_72TU.roa
File:                     mwl4Dt_QOSrmzs4dWh7DEX_72TU.roa (raw, json)
Hash identifier:          vdBDKFI/dpTY0bhwBfeaAEn2pJmYZAM0tQMJd8tQriA=
Subject key identifier:   9B:09:78:0E:DF:D0:39:2A:E6:CE:CE:1D:5A:1E:C3:11:7F:FB:D9:35
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0615
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mwl4Dt_QOSrmzs4dWh7DEX_72TU.roa
Signing time:             Tue 31 Mar 2026 08:21:27 +0000
ROA not before:           Tue 31 Mar 2026 08:21:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9B09780EDFD0392AE6CECE1D5A1EC3117FFBD935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:10:84:50:b8:3b:2d:0e:e4:3c:36:35:83:
                    f7:4f:2a:7f:fe:b2:dc:09:42:99:7b:9b:fd:65:63:
                    43:0c:52:d8:aa:a7:46:36:5a:1e:b4:32:2e:0e:57:
                    f8:06:92:74:e6:1b:06:4e:3a:c9:77:83:f9:87:34:
                    f2:32:1e:c8:46:ad:36:a6:51:2a:7d:62:82:ec:26:
                    64:49:24:40:ad:2d:51:f5:b0:b9:04:d5:f2:18:2c:
                    7d:ab:5e:75:02:53:b7:99:47:9d:d7:04:77:9e:4e:
                    60:9b:ca:16:c1:1b:92:89:61:c1:6d:9d:e4:9e:13:
                    75:87:52:9d:6d:e2:a4:97:c2:b5:8d:4a:c9:ef:11:
                    c3:df:9e:ad:22:df:84:59:23:be:be:6b:45:ce:bb:
                    b2:94:33:27:7c:83:3b:d6:50:5f:95:76:23:c5:4f:
                    62:c3:18:c4:e3:00:8b:b7:df:cb:1c:11:57:01:ea:
                    40:e2:92:91:da:56:a3:f8:25:46:33:01:7f:d2:23:
                    ef:71:14:22:fa:a5:99:3a:5f:9f:a6:79:d7:20:66:
                    d7:33:b7:dc:c4:49:13:1b:f8:3e:98:b7:09:1b:00:
                    5a:2f:17:27:d0:66:0b:f8:36:43:a6:3b:e3:59:fd:
                    ad:f6:92:df:e4:15:00:34:f4:72:5e:a5:ca:c2:d1:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:09:78:0E:DF:D0:39:2A:E6:CE:CE:1D:5A:1E:C3:11:7F:FB:D9:35
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/mwl4Dt_QOSrmzs4dWh7DEX_72TU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:70:5d:62:45:a7:02:84:5e:3b:5f:50:6c:03:00:03:23:54:
         46:8b:3e:d2:9a:ec:73:08:e0:b4:40:a1:24:74:2c:09:92:98:
         b0:98:75:e5:0b:fe:04:a9:b5:c0:1c:12:77:95:8d:d9:bf:43:
         22:82:ee:7c:3c:9d:b8:19:41:e0:90:9a:34:de:22:82:83:45:
         12:13:2d:36:19:e1:58:8e:90:61:2a:e0:6e:13:5e:bf:38:46:
         dc:9e:15:04:e9:5c:05:c0:c9:86:12:0b:e9:f2:9b:5a:87:f4:
         32:2f:a0:ef:bf:c1:bb:0d:8f:75:5d:d1:ec:be:18:3d:36:b9:
         bf:69:20:0d:81:0a:d2:0b:c9:ce:23:2d:39:e2:50:f0:fb:00:
         d8:fc:00:fb:80:c3:4f:bb:d7:75:29:ed:b6:34:90:e5:9a:46:
         cd:ac:72:79:e3:8a:8c:63:84:7c:02:91:35:de:50:28:45:ea:
         94:7e:d5:59:68:c6:d0:e1:d8:95:71:cb:ef:c5:8a:b6:c6:9f:
         94:1f:17:52:d3:67:c4:cb:73:a4:90:36:4a:d7:1b:b9:06:18:
         f8:ab:5d:97:8a:06:91:7e:81:5f:a2:43:e9:b9:de:f6:52:ba:
         69:bd:6a:34:90:96:ec:f3:dc:af:3c:36:67:c0:42:f9:13:bc:
         b2:a2:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:33 2026 by rpki-client