Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa
File:                     0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa (raw, json)
Hash identifier:          1ckUY1zoubPZEBXFuLJKSdoUGooi8PSfchxlLfS13P8=
Subject key identifier:   D1:94:AE:45:0D:84:2C:6C:A6:3F:02:6C:3E:70:97:B9:B8:4F:C6:77
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0188
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa
Signing time:             Tue 31 Mar 2026 07:53:38 +0000
ROA not before:           Tue 31 Mar 2026 07:53:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.158.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D194AE450D842C6CA63F026C3E7097B9B84FC677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:42:e4:ba:e4:60:be:89:3d:96:f8:1a:3e:3b:
                    9c:aa:6b:be:1d:0a:7d:36:98:1f:47:8f:72:d4:00:
                    b9:d5:f7:95:ec:43:a8:99:65:66:17:a6:c6:a3:46:
                    de:0f:03:2c:e8:07:f8:77:19:d6:e4:6e:d1:1a:18:
                    29:a3:de:17:4d:f1:d9:33:7d:d7:41:fc:7e:b3:3a:
                    0d:1c:ed:72:9a:5e:97:96:2c:87:48:82:94:5e:61:
                    37:d4:95:a7:12:4d:3f:18:bb:e8:a6:6d:81:7d:e8:
                    4d:82:65:fb:eb:53:8f:3d:f5:e1:33:19:d4:77:ca:
                    22:8d:1c:1f:fb:0a:c6:35:12:10:aa:f4:26:a9:bb:
                    39:b7:5a:f2:56:4b:b6:ff:6e:54:d8:7f:34:51:e9:
                    19:26:45:70:41:d9:b7:52:54:a5:76:60:d0:15:da:
                    12:8e:b9:da:31:1c:a5:27:ee:c7:ef:f0:2a:96:f8:
                    3e:a8:91:eb:bd:42:d0:5f:60:e8:d7:b7:9b:78:10:
                    84:11:09:ca:74:c7:f5:88:33:99:6b:3b:b7:d5:65:
                    b3:1e:2c:73:e4:dd:f2:27:a5:82:f6:f5:ae:0f:02:
                    06:83:af:0d:16:23:a9:4f:9b:7b:5e:6e:2a:7c:14:
                    03:55:a1:93:d3:d6:10:7e:ca:a5:be:cc:a5:c6:d9:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:94:AE:45:0D:84:2C:6C:A6:3F:02:6C:3E:70:97:B9:B8:4F:C6:77
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0ZSuRQ2ELGymPwJsPnCXubhPxnc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bf:a1:d6:be:60:83:0b:98:ae:4f:da:28:91:15:53:30:e5:2b:
         76:03:ab:6e:fa:09:55:1a:e5:9a:18:9d:49:d2:84:85:30:bd:
         d5:f1:61:24:49:bf:bd:b3:c6:09:35:aa:88:f6:63:b1:20:33:
         3b:3f:8c:83:8f:d1:4e:cc:93:0d:a6:96:50:10:95:90:7b:10:
         81:45:89:a9:ea:13:b3:7a:f2:0c:d1:d1:3c:e4:a0:05:f5:65:
         ad:51:e1:e0:ad:0f:ba:be:6c:62:98:33:2d:6e:9f:d1:28:42:
         d5:95:94:5e:b4:3b:8b:08:17:3b:7b:70:5c:69:96:3a:52:e6:
         c2:45:4b:5f:a8:3c:bd:93:f9:f1:6d:5b:64:ec:fd:9b:3e:93:
         2e:c6:e3:ae:39:cc:45:99:de:d3:3e:54:f2:42:c9:d9:02:b3:
         ed:32:d4:ff:de:c5:f2:2b:0b:7d:bc:01:b5:bf:9d:55:0d:c0:
         15:d2:74:73:42:68:32:2b:68:45:9f:a1:cc:c1:f0:15:bf:c0:
         54:fc:8c:e4:f4:ee:75:02:c8:51:2c:36:b3:96:fe:58:98:42:
         b8:41:ac:eb:91:28:b9:72:80:36:5b:33:80:92:9f:67:75:28:
         86:ea:4c:22:bc:cd:ee:bd:47:f9:a8:31:07:43:ab:80:be:72:
         d9:f2:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:50 2026 by rpki-client