Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8WWHxYiOeS0j15Y4SjeOA055GbM.roa
File:                     8WWHxYiOeS0j15Y4SjeOA055GbM.roa (raw, json)
Hash identifier:          ARwHAgMex6dPWczV5Sybecrrn6Y6srhNAS/DvChA+XQ=
Subject key identifier:   F1:65:87:C5:88:8E:79:2D:23:D7:96:38:4A:37:8E:03:4E:79:19:B3
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01CD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8WWHxYiOeS0j15Y4SjeOA055GbM.roa
Signing time:             Tue 31 Mar 2026 07:54:09 +0000
ROA not before:           Tue 31 Mar 2026 07:54:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        211.13.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F16587C5888E792D23D796384A378E034E7919B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6d:2d:9c:ae:c0:30:a2:f6:05:08:25:d4:07:
                    dd:0a:dd:3b:d0:51:d2:7e:9e:c6:7b:34:e4:df:3a:
                    b0:60:d9:06:53:1b:6f:b1:50:d5:61:ea:a7:43:61:
                    24:27:0f:b9:f3:a4:59:ce:da:b0:b8:29:70:c8:e0:
                    09:a8:d0:e7:9c:46:a5:8a:83:22:86:33:55:e2:47:
                    9f:65:49:5d:94:eb:8f:c7:57:7a:43:10:14:cb:64:
                    49:9e:57:4d:44:95:b2:55:40:20:06:39:67:02:bb:
                    e5:da:84:87:8f:52:42:d6:9d:9a:6b:80:ae:ac:d5:
                    d2:ef:e3:75:63:8a:4b:4e:25:39:93:96:e9:21:dc:
                    e0:8b:2b:fb:19:7c:a1:d6:20:2b:ed:bd:53:00:d7:
                    9f:2b:27:3b:c2:04:28:5e:53:99:61:d3:07:38:78:
                    e7:ac:b4:ca:07:36:01:d4:4e:6c:f7:93:c7:2a:97:
                    73:88:d6:12:c1:3b:6a:97:27:63:46:01:1b:ae:80:
                    a0:fc:d0:81:82:f9:95:54:92:a5:cc:d0:77:f7:84:
                    4b:49:ec:71:61:ca:23:3b:cf:fe:8e:21:ee:47:7d:
                    9b:e0:c4:5d:21:77:42:f5:ab:a6:ca:d3:0d:24:32:
                    14:47:59:43:20:19:fe:fa:3b:50:76:55:b1:36:01:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:65:87:C5:88:8E:79:2D:23:D7:96:38:4A:37:8E:03:4E:79:19:B3
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8WWHxYiOeS0j15Y4SjeOA055GbM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:81:ec:d9:20:07:fa:b7:1d:24:0d:eb:fc:66:61:d9:90:f5:
         af:12:6e:64:ca:9e:ea:0b:f4:2e:da:47:6a:fb:02:84:ea:14:
         ab:5b:11:30:b7:b2:51:b9:c3:c4:3b:fe:1d:a2:fc:3c:6e:04:
         3a:d1:5d:9f:62:f6:d4:33:c8:bd:c4:90:a0:43:c4:25:75:ab:
         21:9f:82:5a:65:1d:6e:07:c1:dc:3f:59:d4:51:6b:43:25:0c:
         66:1c:c2:e6:59:21:69:7d:17:da:f9:95:53:a6:6b:3c:d2:30:
         25:f5:1d:63:28:5f:54:2b:dc:57:17:b0:64:b5:8e:9f:ba:4f:
         c5:d2:a3:df:01:5d:8d:24:70:ba:17:ad:26:7a:c2:36:d3:72:
         71:7c:e2:a4:25:ca:63:fb:4d:88:02:64:ab:7a:29:26:a8:9f:
         b7:7d:49:d9:fc:21:eb:45:77:08:2e:35:3f:ef:a1:a1:4c:36:
         d6:fb:79:e0:02:e5:a9:38:ea:00:ea:dc:90:2a:19:71:96:60:
         43:a2:20:ab:71:eb:20:2d:13:e4:f4:4b:c3:87:1b:08:75:b4:
         9f:dc:66:d3:f3:2d:41:20:a2:0a:59:ce:68:a7:e1:1f:9d:d7:
         3e:43:45:ae:7f:42:7f:5e:d8:ae:27:e7:f0:66:bd:fa:26:89:
         83:78:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:00:12 2026 by rpki-client