Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/7Ca-t6hDL_IkDCjp32Mf3-xhr8M.roa
File:                     7Ca-t6hDL_IkDCjp32Mf3-xhr8M.roa (raw, json)
Hash identifier:          M2qTZi9UNy8X8KKoencj6dLnmk7W/sYyG8LzceiN8gQ=
Subject key identifier:   EC:26:BE:B7:A8:43:2F:F2:24:0C:28:E9:DF:63:1F:DF:EC:61:AF:C3
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0168
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/7Ca-t6hDL_IkDCjp32Mf3-xhr8M.roa
Signing time:             Tue 31 Mar 2026 07:53:21 +0000
ROA not before:           Tue 31 Mar 2026 07:53:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        203.183.144.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EC26BEB7A8432FF2240C28E9DF631FDFEC61AFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:f4:16:16:d5:d5:30:56:41:b5:74:c9:69:
                    ea:cd:f9:c1:d3:f0:cb:01:a2:a8:f5:3e:9a:17:12:
                    21:14:e8:ee:a7:e2:aa:b1:43:f7:71:20:9b:79:08:
                    d2:44:e7:e9:25:d1:92:2f:5b:8d:14:54:06:0a:7d:
                    b1:11:42:72:25:c0:25:b5:3e:51:c1:24:e9:84:fa:
                    79:51:a8:06:cc:fd:fa:50:55:e3:7c:31:f0:aa:cd:
                    fd:e6:d5:fc:1e:89:44:13:19:d0:00:d4:87:04:a8:
                    80:5b:34:0e:66:47:38:48:bd:1a:21:9c:38:0e:cb:
                    25:63:38:4b:fe:3b:5c:fa:0d:c7:64:d3:81:56:a7:
                    4f:94:4c:1a:1e:56:3a:5e:51:51:1a:3e:a0:7d:b6:
                    db:d4:2d:ec:30:e0:a7:ab:dd:64:1f:94:18:dc:80:
                    3b:50:59:67:8b:ed:d2:d3:2c:30:7c:c6:d4:b3:08:
                    cd:d1:69:da:d8:2f:20:6d:3c:5e:3e:bd:62:ef:3e:
                    7b:c2:5d:d4:f4:d4:3a:10:44:d7:1c:e3:0a:55:77:
                    51:0b:d4:73:79:75:05:43:cb:7a:70:21:e4:26:30:
                    0c:0a:60:75:da:13:81:16:83:e6:ee:eb:c3:92:93:
                    e4:b8:fc:57:59:be:9c:53:50:58:5d:ec:0f:30:e6:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:26:BE:B7:A8:43:2F:F2:24:0C:28:E9:DF:63:1F:DF:EC:61:AF:C3
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/7Ca-t6hDL_IkDCjp32Mf3-xhr8M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.183.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:17:e4:d9:c0:e5:d6:03:e6:4f:ec:34:5b:bd:91:b0:7c:
         35:6e:fd:76:af:16:83:48:40:2d:e4:c2:56:f4:37:82:01:a8:
         d0:aa:3b:05:85:0a:a8:1a:26:19:b9:2f:de:e7:41:ba:b7:6a:
         5c:5b:64:f4:48:d6:6f:14:52:0a:51:1c:45:4c:c5:41:ae:ab:
         18:c9:b4:81:fd:d2:dc:f6:ba:e9:65:96:2c:f3:03:16:15:ab:
         56:35:c9:6f:70:6f:81:4b:79:05:70:88:cf:45:e5:ce:11:98:
         7e:50:ca:59:3f:31:20:36:e5:a5:d2:7e:c7:20:24:09:c1:60:
         1b:6c:01:1c:fc:f1:90:96:ea:e8:04:5b:5b:cb:06:77:c3:32:
         94:6d:da:46:1e:28:a5:97:9d:3c:eb:07:75:f6:f7:e6:ba:f4:
         b0:0e:50:de:5b:ae:4d:1e:3c:85:ab:19:ab:55:07:3d:50:43:
         d7:bb:88:66:97:d5:33:bc:7b:17:59:57:85:b7:d7:e0:d6:bb:
         0a:8c:96:98:53:fb:e4:d7:6e:10:68:3e:75:33:b5:8d:98:f4:
         03:6b:49:95:16:a5:e7:81:3c:45:f0:3e:dc:05:d7:33:fb:3b:
         35:2c:86:16:1f:30:73:30:fe:af:0a:26:b6:2d:bf:fe:d9:37:
         74:a4:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:38 2026 by rpki-client