Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/28_zxpoSCMWfuUwacTktvqgX_5w.roa
File:                     28_zxpoSCMWfuUwacTktvqgX_5w.roa (raw, json)
Hash identifier:          4kILdEoFmwFP64NxLHAQQFMJiDlEB3Xvq+N5Qy54+wY=
Subject key identifier:   DB:CF:F3:C6:9A:12:08:C5:9F:B9:4C:1A:71:39:2D:BE:A8:17:FF:9C
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01A7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/28_zxpoSCMWfuUwacTktvqgX_5w.roa
Signing time:             Tue 31 Mar 2026 07:53:50 +0000
ROA not before:           Tue 31 Mar 2026 07:53:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.239.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DBCFF3C69A1208C59FB94C1A71392DBEA817FF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:79:3e:29:a2:0a:4a:8b:ca:cd:33:ba:15:
                    9c:60:94:60:7e:6f:c5:a9:7a:a1:de:f9:09:99:c4:
                    93:3d:93:f0:7e:03:e7:76:a8:ef:23:bc:ec:9f:18:
                    61:c6:14:a1:f7:91:c1:27:8a:58:e7:07:be:f9:f5:
                    a3:76:13:6e:8c:2b:bf:8a:a6:c8:62:30:55:41:98:
                    1e:d5:ad:85:5a:1b:d3:51:ce:2c:cd:2a:d9:71:a0:
                    56:df:40:cb:ef:e0:3d:17:da:d7:77:88:96:77:1a:
                    b7:2c:5a:73:04:14:c0:f6:fd:a4:03:c0:b7:cc:fd:
                    1d:b6:cd:28:10:ba:ce:72:45:d4:91:59:e8:8c:34:
                    86:46:3a:1e:75:31:04:3c:a4:bf:a1:91:93:69:f6:
                    06:16:8c:ce:2c:58:c7:5d:a6:44:b3:41:5e:f2:6a:
                    65:81:9c:10:46:5b:1a:19:da:04:d0:05:c0:78:9f:
                    32:71:06:2d:9f:c5:91:d5:d7:21:3d:23:6c:4c:4f:
                    0b:b1:ae:93:f5:4d:31:d8:3b:2a:65:c2:59:8b:1c:
                    7d:50:91:5f:b7:47:d0:47:85:5a:64:3f:f8:ce:4c:
                    ef:07:3e:90:2b:22:61:e8:8f:d5:13:45:b2:e6:e4:
                    9f:34:5a:97:d5:2f:31:77:1d:63:63:c1:9c:0c:95:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CF:F3:C6:9A:12:08:C5:9F:B9:4C:1A:71:39:2D:BE:A8:17:FF:9C
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/28_zxpoSCMWfuUwacTktvqgX_5w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:32:01:92:03:2e:2b:2e:f9:16:63:54:c9:c3:23:fb:33:a9:
         da:f4:5a:6e:1b:f4:c8:ed:c0:ec:a3:09:db:a4:5c:2b:a7:e0:
         da:ea:b1:13:86:81:22:e7:8a:ef:09:f9:f8:28:82:04:00:42:
         e4:52:18:a5:ed:f4:a6:00:ab:04:d5:1d:b7:ea:00:3f:48:f8:
         ab:fa:a9:f6:c8:7b:3d:9d:f6:6b:49:ba:46:0e:fe:5f:ee:31:
         17:4e:f6:b9:f3:94:6f:13:df:bf:06:81:a2:94:28:00:48:d6:
         cd:64:4c:ab:11:c2:da:8f:f4:fd:32:15:89:f6:8a:56:ed:e4:
         78:8a:a3:d9:db:e5:fc:0f:17:ed:b6:01:34:cb:42:f7:f1:f3:
         14:69:c1:e8:8b:7b:74:93:8c:89:eb:df:37:45:1f:16:06:0d:
         58:73:ea:9f:c9:e4:e8:4d:62:6a:ba:07:68:17:44:ff:c7:d3:
         b9:97:a3:48:39:18:61:4f:5b:b1:0c:59:42:a5:a9:27:5e:23:
         62:ed:ba:ed:9e:8f:f1:aa:94:50:e2:e1:51:79:40:74:69:3d:
         d6:2b:f7:47:c7:3a:a1:b3:e7:bb:9f:37:70:4c:53:1d:8d:10:
         d2:45:00:5c:f9:c3:3d:db:7b:01:fb:da:e9:44:b5:07:17:8f:
         ed:cd:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:00:11 2026 by rpki-client