Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WPmwSB_Sz5wsD-__-J_RoK1aGOo.roa
File:                     WPmwSB_Sz5wsD-__-J_RoK1aGOo.roa (raw, json)
Hash identifier:          UqXRi95l3jYKi3XgSU7m29I8x55JB83WuNtycn1Rbv8=
Subject key identifier:   58:F9:B0:48:1F:D2:CF:9C:2C:0F:EF:FF:F8:9F:D1:A0:AD:5A:18:EA
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       022A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WPmwSB_Sz5wsD-__-J_RoK1aGOo.roa
Signing time:             Tue 31 Mar 2026 07:35:50 +0000
ROA not before:           Tue 31 Mar 2026 07:35:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        210.128.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=58F9B0481FD2CF9C2C0FEFFFF89FD1A0AD5A18EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:92:15:40:8e:83:ab:1a:80:fc:76:d8:0b:
                    c1:85:01:36:d1:ee:2a:17:eb:bc:e1:35:c9:4b:f7:
                    84:2c:b9:f9:a0:82:d1:c0:8a:42:5b:19:5d:4a:a4:
                    d0:8e:13:ed:62:74:3f:05:63:c7:69:de:4e:89:30:
                    3a:2b:5b:69:66:e9:f1:87:66:61:25:15:ee:d7:4b:
                    0d:cd:61:15:1f:23:92:10:a4:06:8c:25:82:dd:4e:
                    5a:65:b4:c3:4f:6e:03:d6:8a:5e:22:43:6a:61:e6:
                    09:aa:e2:17:95:77:d0:36:78:00:0a:a4:22:d1:d8:
                    e7:35:de:be:14:68:3d:6e:49:42:b4:17:b0:ea:92:
                    8f:30:3a:5e:c5:1f:be:d9:3b:c3:32:95:40:41:f4:
                    89:28:3a:74:e8:f6:02:ad:21:3e:78:71:d8:73:79:
                    75:46:d2:c0:8c:f5:0d:27:6d:4c:37:c8:92:10:29:
                    28:10:28:07:86:2d:54:11:ab:83:5a:b7:06:55:6a:
                    f5:cf:b8:a8:2c:c0:70:1e:9d:75:42:0b:36:60:72:
                    a3:77:8a:49:84:ab:24:2b:90:81:f9:03:96:f7:21:
                    cb:8e:41:57:2f:20:05:a5:37:91:33:38:20:f2:f3:
                    b8:00:64:ab:b9:07:94:4b:da:5a:54:e2:c6:1d:69:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F9:B0:48:1F:D2:CF:9C:2C:0F:EF:FF:F8:9F:D1:A0:AD:5A:18:EA
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WPmwSB_Sz5wsD-__-J_RoK1aGOo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:05:79:86:6c:10:ea:3a:0a:c3:6d:2a:51:10:9c:45:60:ff:
         da:ee:b7:8f:40:f4:f2:b5:45:59:00:5a:04:1d:9d:86:c8:bb:
         e8:2a:82:48:87:d8:33:0a:42:68:63:37:ea:c4:f2:1e:08:44:
         20:c7:12:07:cb:d5:db:64:99:5b:cc:1e:48:0e:02:15:a9:b3:
         3f:bc:f8:9b:15:b0:8b:f0:37:a3:18:e5:a6:2c:f4:94:24:e2:
         a5:ae:88:cd:92:f8:ec:79:d8:40:58:02:67:ea:14:3e:5d:78:
         f9:dd:89:9c:d6:83:3b:20:a3:6c:72:e8:40:b8:57:b5:ac:0f:
         6e:08:4c:7b:f9:47:d0:22:60:1a:1e:1e:2b:26:76:a0:a5:b8:
         da:f5:ac:87:46:e3:61:33:6b:3c:06:d3:4d:51:17:8b:d6:67:
         7f:76:cd:f9:6c:fb:82:1a:3f:13:ae:06:f2:0a:43:9b:19:3a:
         40:a9:93:46:46:ae:dc:ac:87:f4:11:6b:29:aa:6b:10:39:7f:
         05:0c:c0:85:20:27:f9:2d:a2:ca:9f:d7:a2:3b:e7:5e:36:81:
         fc:b6:72:95:7d:58:4b:a3:ac:d1:a9:6b:99:bc:86:da:44:62:
         5e:6a:9b:90:43:1a:73:1c:52:01:0f:2c:fa:ee:e2:e8:f6:39:
         6e:7b:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:04 2026 by rpki-client