Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/kwJR9qO4MHo-CRlbKICtXP82YkI.roa
File:                     kwJR9qO4MHo-CRlbKICtXP82YkI.roa (raw, json)
Hash identifier:          32Ea1KobExJZn/2tpxlNk3UPYglFwA915fRnStbnRkg=
Subject key identifier:   93:02:51:F6:A3:B8:30:7A:3E:09:19:5B:28:80:AD:5C:FF:36:62:42
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       5A
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/kwJR9qO4MHo-CRlbKICtXP82YkI.roa
Signing time:             Tue 31 Mar 2026 08:31:59 +0000
ROA not before:           Tue 31 Mar 2026 08:31:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        101.203.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Mar 31 08:31:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=930251F6A3B8307A3E09195B2880AD5CFF366242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:77:c1:9c:aa:6e:b3:cd:1e:a9:72:a9:5d:
                    10:9a:40:1d:ac:c6:b3:4b:2d:45:95:28:b7:88:06:
                    82:53:13:52:47:7c:18:38:37:22:71:19:ea:ad:62:
                    4e:eb:9c:60:73:cc:3d:de:d2:d2:7c:e0:db:84:2f:
                    39:7b:7c:13:9d:e7:75:2c:4b:df:c6:20:e4:f5:17:
                    ef:17:3f:74:25:cf:05:89:52:8d:e6:c9:cb:ca:20:
                    4c:dc:8d:8e:08:3f:1c:1e:32:a0:d0:7a:0c:ef:a5:
                    17:b5:42:ce:af:c5:c4:cb:f2:9f:73:e5:a5:34:2e:
                    da:c3:10:f1:e7:3a:4f:57:c9:2f:aa:38:db:36:cd:
                    ff:ee:e6:78:a5:54:2c:6f:46:05:a2:f1:91:57:0a:
                    1f:33:c6:ca:fd:92:94:cf:fe:6e:44:3c:c8:da:0e:
                    92:55:25:fe:59:a6:5e:11:01:0a:29:f4:db:f8:ad:
                    bd:d9:21:c3:32:4b:9f:ec:5a:db:ec:c0:08:09:a5:
                    de:61:d5:cb:12:6e:05:85:da:da:9b:cd:45:30:82:
                    65:76:bb:31:64:e3:a7:b4:21:77:04:c2:8b:cb:f9:
                    8e:4c:e1:a5:9f:47:c3:5e:0e:50:77:c2:59:92:eb:
                    52:9f:af:75:3f:78:38:1e:a5:55:cd:f0:d8:d5:69:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:02:51:F6:A3:B8:30:7A:3E:09:19:5B:28:80:AD:5C:FF:36:62:42
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/kwJR9qO4MHo-CRlbKICtXP82YkI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d5:89:69:84:8e:fc:e8:9a:36:2b:c0:19:8d:80:fe:46:8c:0c:
         37:85:ff:52:e3:a6:15:8c:c9:2c:0d:b1:0e:b7:19:ba:36:95:
         6c:d1:e9:15:8a:2f:60:ed:46:8f:9f:04:a7:df:b3:0b:d1:f4:
         73:ac:b1:bb:5c:34:a3:d2:5c:35:b0:1d:58:8d:0b:70:a3:27:
         be:04:70:02:2e:47:c0:2b:5d:84:62:03:df:19:69:e7:25:2b:
         aa:42:38:ac:c0:04:9d:e2:cb:fc:5d:93:7d:34:ad:08:bf:49:
         59:1e:7c:c5:e7:98:b1:83:26:1c:b2:29:b0:4f:e9:8f:28:73:
         e1:dc:d8:8c:49:dd:bc:24:9c:4e:12:07:1c:e3:15:a9:68:12:
         d1:f6:b1:84:70:c4:4e:6e:bd:0e:2d:53:56:93:07:cc:24:a9:
         88:7a:01:76:e6:48:a3:ba:87:fe:be:d5:8c:3e:db:c1:6d:c2:
         56:f3:8a:a0:c8:6b:2f:61:69:59:91:92:8a:54:5f:85:65:55:
         71:f1:e5:d6:68:ea:cd:16:0b:f5:37:b1:78:85:af:6f:ef:52:
         e0:f9:4d:c9:43:9b:6e:0f:d6:d0:1d:b3:bb:1b:14:0d:f0:f5:
         eb:05:2e:87:c6:03:62:74:4b:d8:80:ee:1e:8e:9d:80:dd:e2:
         ec:39:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:00 2026 by rpki-client