Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6aTiWVckKcs4ZCtKoQ5tRBTKsOQ.roa
File:                     6aTiWVckKcs4ZCtKoQ5tRBTKsOQ.roa (raw, json)
Hash identifier:          vjt8bmo/1lpdFtjruQeayuFReS2eTGlnacxu2hicSak=
Subject key identifier:   E9:A4:E2:59:57:24:29:CB:38:64:2B:4A:A1:0E:6D:44:14:CA:B0:E4
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0195
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6aTiWVckKcs4ZCtKoQ5tRBTKsOQ.roa
Signing time:             Tue 31 Mar 2026 07:53:43 +0000
ROA not before:           Tue 31 Mar 2026 07:53:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.171.122.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E9A4E259572429CB38642B4AA10E6D4414CAB0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:60:4a:60:df:4f:59:3d:2a:3a:af:16:07:
                    f1:7d:cb:a5:a0:c1:92:94:95:ab:a0:34:13:92:d5:
                    e1:cc:0e:ec:58:99:17:b9:84:2b:12:ce:5f:dd:26:
                    59:56:72:65:52:eb:7d:46:60:96:40:d8:3f:81:57:
                    44:56:71:5c:88:fb:19:94:d7:12:f6:e1:47:00:8c:
                    d7:01:17:c4:ef:85:bb:5f:47:b2:8a:68:ba:c8:90:
                    24:15:24:bc:bc:03:be:76:c4:c7:24:80:f0:ea:d0:
                    6a:a0:31:e3:e4:f2:30:0a:17:1f:a5:2f:f1:bf:ab:
                    a6:70:35:b4:20:8c:ad:9f:b9:61:47:84:d9:70:0b:
                    e9:34:79:3e:fa:db:f6:8e:72:c9:2b:88:48:5c:91:
                    5d:52:db:24:3d:76:fb:c4:c9:b2:6b:c2:73:a7:55:
                    06:15:f9:d7:37:b8:0b:47:63:c4:8b:ef:83:3b:52:
                    01:1a:06:aa:8d:27:70:42:79:af:ba:d0:9f:8d:2a:
                    ed:53:19:a8:c3:af:a5:05:f6:88:a9:19:78:5d:a8:
                    0b:00:98:22:93:2c:c0:2e:80:2a:f2:2b:50:c8:b5:
                    55:c0:bf:d7:a4:fe:66:ce:38:3c:4c:59:7d:45:f6:
                    91:9e:fb:ed:c1:69:12:e7:46:d1:ef:ad:0a:b3:85:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A4:E2:59:57:24:29:CB:38:64:2B:4A:A1:0E:6D:44:14:CA:B0:E4
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6aTiWVckKcs4ZCtKoQ5tRBTKsOQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:9e:bc:d6:1f:18:54:50:cb:8a:c8:1f:49:66:09:44:2b:
         98:92:e5:c6:1f:5f:36:97:d4:8b:74:e6:e6:61:4b:cb:e6:78:
         32:81:d5:ad:aa:03:81:71:47:29:ea:07:e6:99:cb:a5:ee:19:
         cf:53:b0:6e:ed:d0:a7:7d:36:f3:45:1b:a7:e9:7a:66:18:fe:
         12:8b:ad:70:02:4d:50:b8:72:9f:81:14:50:60:a5:66:ef:f2:
         34:91:76:e8:a7:ac:ac:d3:01:1e:6f:de:21:da:27:24:28:42:
         57:87:22:a5:e0:62:df:36:67:9a:ad:ec:6f:ab:db:a3:8c:03:
         2c:54:8f:56:e3:e2:d9:f4:7c:9f:90:23:1d:30:44:a6:57:fe:
         2c:8f:62:ea:7c:47:57:b1:41:e1:30:ba:07:67:2d:2e:f1:bc:
         ee:cc:79:5d:77:c7:69:0d:33:57:8c:ed:b0:bd:7e:6b:bf:10:
         2c:9c:4f:25:aa:04:d1:27:9f:7c:8b:59:6e:e6:24:7d:ce:1e:
         49:20:44:e0:69:09:80:21:5f:81:ab:f9:0b:84:07:a4:72:9c:
         88:74:ed:f4:e6:55:09:d6:9a:d9:8d:68:de:f3:e8:bc:0d:5b:
         f7:97:23:95:bb:dc:ab:81:cb:3a:59:09:1c:62:1c:44:65:3a:
         33:8c:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:26 2026 by rpki-client