Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wlItwiYeYPDlY9zi-UTNUo9mXDU.roa
File:                     wlItwiYeYPDlY9zi-UTNUo9mXDU.roa (raw, json)
Hash identifier:          eE9jqfhMOigq+uB5dB+HBVg1P/YywnErcw/SagafwMU=
Subject key identifier:   C2:52:2D:C2:26:1E:60:F0:E5:63:DC:E2:F9:44:CD:52:8F:66:5C:35
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0618
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wlItwiYeYPDlY9zi-UTNUo9mXDU.roa
Signing time:             Tue 31 Mar 2026 08:21:29 +0000
ROA not before:           Tue 31 Mar 2026 08:21:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        203.181.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C2522DC2261E60F0E563DCE2F944CD528F665C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:4d:b8:c8:72:39:d6:b7:57:f0:2f:5e:63:
                    7b:c9:40:6b:99:df:c4:5e:7b:32:02:2a:31:b5:aa:
                    0c:25:aa:2c:af:ea:0f:a9:1b:d5:6c:86:33:1c:06:
                    9e:e2:e0:60:e0:a7:a8:42:b0:ed:9e:f8:ca:73:c4:
                    ab:ab:f0:d1:5d:03:8b:68:0e:b5:41:6f:69:d4:42:
                    f2:f6:01:6c:ae:ff:d2:08:a8:6c:8a:48:98:97:ed:
                    ac:bd:81:23:31:39:b2:0e:1d:07:04:c1:86:35:62:
                    77:ff:c4:8a:b8:ab:93:5f:c0:1f:96:a7:8f:8c:29:
                    d6:91:27:95:d1:f3:57:58:39:8d:15:d2:50:b2:ae:
                    e4:1b:17:bb:ee:3a:2e:99:f3:94:ca:10:da:2c:1f:
                    e7:dd:4d:ea:8f:82:f5:c7:a8:24:d9:35:e8:82:4e:
                    d2:26:39:94:08:90:ab:da:ff:39:82:11:30:52:c8:
                    90:2e:2d:13:9c:97:ec:77:a7:a9:38:11:ca:00:39:
                    bc:22:3b:72:b1:0d:d3:59:04:a4:cc:8f:95:1c:19:
                    c1:1a:ac:f9:06:dd:01:66:22:2f:93:9c:46:7f:bb:
                    12:c5:25:3e:1c:44:a6:05:15:67:47:f0:83:18:c0:
                    62:38:07:77:36:e5:86:78:12:5f:77:33:13:75:d7:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:2D:C2:26:1E:60:F0:E5:63:DC:E2:F9:44:CD:52:8F:66:5C:35
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wlItwiYeYPDlY9zi-UTNUo9mXDU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:b4:cc:a8:3d:a9:ab:00:fb:17:69:05:a6:77:6f:e1:3d:fd:
         61:b0:5c:73:42:10:e9:cf:06:65:9c:7b:fc:4a:b4:c9:1e:8a:
         30:55:05:d8:48:54:c7:c4:ab:d4:ef:49:95:46:3e:e3:d4:44:
         6f:b2:d4:5c:c4:49:81:61:ef:72:b4:46:29:20:49:b5:4d:a6:
         9c:41:76:22:53:c0:df:bf:0f:6a:7c:d8:6c:11:6d:de:75:52:
         d3:3a:69:cf:8d:ba:48:2e:76:cf:77:a8:25:35:a2:d6:30:e4:
         8b:65:1e:68:d0:75:40:d0:78:c2:4a:d6:96:98:f1:5b:70:b8:
         4e:da:b2:91:61:00:b2:ab:48:83:87:20:a7:76:92:e3:f1:10:
         77:e7:1d:5a:1b:81:0b:c9:d6:7b:f5:3b:1f:50:2c:fd:13:b4:
         0c:bb:be:db:d9:2e:b2:43:3e:8a:40:01:49:ba:af:da:7f:60:
         b9:2b:41:58:8d:c6:d0:b3:f0:0b:dc:c7:a4:a0:ce:3e:a2:d2:
         5a:e9:08:44:f9:52:bc:ad:25:01:6f:48:f1:75:b1:08:e4:8e:
         24:08:03:7c:09:8b:35:af:d2:f3:22:4b:0c:f7:ef:c3:0f:5f:
         be:60:63:76:75:a9:ce:c4:65:31:6d:65:4b:d7:32:69:47:5f:
         f5:e8:1f:d5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIxMjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMyNTIyREMyMjYxRTYw
RjBFNTYzRENFMkY5NDRDRDUyOEY2NjVDMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg3k24yHI51rdX8C9eY3vJQGuZ38ReezICKjG1qgwlqiyv6g+p
G9VshjMcBp7i4GDgp6hCsO2e+MpzxKur8NFdA4toDrVBb2nUQvL2AWyu/9IIqGyK
SJiX7ay9gSMxObIOHQcEwYY1Ynf/xIq4q5NfwB+Wp4+MKdaRJ5XR81dYOY0V0lCy
ruQbF7vuOi6Z85TKENosH+fdTeqPgvXHqCTZNeiCTtImOZQIkKva/zmCETBSyJAu
LROcl+x3p6k4EcoAObwiO3KxDdNZBKTMj5UcGcEarPkG3QFmIi+TnEZ/uxLFJT4c
RKYFFWdH8IMYwGI4B3c25YZ4El93MxN11zNfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUwlItwiYeYPDlY9zi+UTNUo9mXDUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L3dsSXR3aVllWVBEbFk5emktVVROVW85bVhEVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLtVIwDQYJKoZIhvcNAQELBQADggEB
AB20zKg9qasA+xdpBaZ3b+E9/WGwXHNCEOnPBmWce/xKtMkeijBVBdhIVMfEq9Tv
SZVGPuPURG+y1FzESYFh73K0RikgSbVNppxBdiJTwN+/D2p82GwRbd51UtM6ac+N
ukguds93qCU1otYw5ItlHmjQdUDQeMJK1paY8VtwuE7aspFhALKrSIOHIKd2kuPx
EHfnHVobgQvJ1nv1Ox9QLP0TtAy7vtvZLrJDPopAAUm6r9p/YLkrQViNxtCz8Avc
x6Sgzj6i0lrpCET5UrytJQFvSPF1sQjkjiQIA3wJizWv0vMiSwz378MPX75gY3Z1
qc7EZTFtZUvXMmlHX/XoH9U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:32 2026 by rpki-client