Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/A_xBxGRXsWXcJozrZnuwScA6vdo.roa
File:                     A_xBxGRXsWXcJozrZnuwScA6vdo.roa (raw, json)
Hash identifier:          5CVsfTcaVL2P0ORfVb7VwNGXHLDUNDU8rd6fEXsKeMk=
Subject key identifier:   03:FC:41:C4:64:57:B1:65:DC:26:8C:EB:66:7B:B0:49:C0:3A:BD:DA
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0186
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/A_xBxGRXsWXcJozrZnuwScA6vdo.roa
Signing time:             Tue 31 Mar 2026 07:53:37 +0000
ROA not before:           Tue 31 Mar 2026 07:53:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.152.186.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=03FC41C46457B165DC268CEB667BB049C03ABDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:16:dd:6f:ed:85:08:6d:5d:d6:f7:c9:c2:
                    a0:e8:16:e9:cc:a1:25:2e:3a:72:94:9c:48:e3:cf:
                    32:01:bb:70:ed:d1:b8:49:a5:2a:b6:21:81:71:6f:
                    57:73:47:71:b9:d7:2b:52:50:8d:19:f6:a0:26:6a:
                    af:4c:a6:8f:0d:ea:35:30:a6:35:f5:c8:78:61:c6:
                    8d:2b:4e:1f:57:c3:c1:b3:90:3f:05:c0:68:01:16:
                    e6:45:7e:4a:0e:7f:d3:5c:56:ab:4c:cb:5f:07:2c:
                    b0:1d:b5:8f:a8:8a:ba:d3:70:a1:a0:4b:b5:41:7a:
                    5c:19:85:6e:82:ac:99:a9:f0:5d:9b:64:c8:a6:3c:
                    a7:f0:e8:01:51:fe:ab:5f:a6:45:39:4b:a7:32:06:
                    89:c4:a3:bf:7f:4c:d9:7c:83:6f:d2:ea:d3:97:47:
                    04:3f:d7:77:69:e4:ce:92:b4:38:7b:61:40:88:e9:
                    fa:7f:3b:20:b0:a8:7c:34:b8:58:90:72:6a:b6:9f:
                    22:e3:dc:c7:b5:83:9f:b8:e2:1e:47:1c:f1:c5:87:
                    94:47:72:68:18:3a:27:db:2d:a3:ba:94:ba:e9:f4:
                    77:2e:63:f7:d1:d1:51:18:5e:b9:bc:af:6a:c0:c1:
                    70:88:1a:2c:77:8d:a0:86:4d:8d:20:14:f0:f6:0c:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FC:41:C4:64:57:B1:65:DC:26:8C:EB:66:7B:B0:49:C0:3A:BD:DA
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/A_xBxGRXsWXcJozrZnuwScA6vdo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:59:7e:3d:19:18:ec:8f:ad:cd:8e:00:3e:9f:7f:c2:b9:
         4f:ab:59:dd:f5:32:b2:cf:33:f3:fa:ce:d1:e5:d0:5b:02:4e:
         fa:70:8e:0f:39:fe:73:d6:5b:b2:fc:5b:dd:c0:07:57:3e:e2:
         67:b3:7d:32:d2:a6:32:b6:7d:ea:a4:a9:5a:07:c9:37:14:df:
         08:51:af:c6:1b:55:7d:66:a9:54:01:de:2a:43:02:70:ee:10:
         f5:ce:71:75:36:2a:0a:07:92:79:67:44:26:84:f0:72:12:ec:
         51:90:e1:06:e5:f2:0f:cd:5f:df:48:b2:9e:2d:ee:28:f8:64:
         3b:19:4c:a5:de:47:39:f3:72:fb:cd:55:19:d0:ca:24:5e:6e:
         2c:b2:ae:a4:3a:d4:b6:d5:ab:6d:ea:4d:96:55:aa:48:e2:aa:
         67:e3:08:73:4a:d8:ab:d2:de:a9:52:5f:f6:fd:fc:31:d7:b4:
         5d:8e:b4:a6:37:a7:4e:a0:e4:8e:55:24:54:b6:44:01:8c:5b:
         7b:37:f4:5a:b0:93:9f:04:ac:ce:b1:6d:d6:6a:1d:b4:25:9c:
         69:08:f6:e0:21:23:67:a1:2a:bf:f3:36:e4:2a:d6:f2:d7:5c:
         c1:65:e1:b9:2f:7a:5c:7a:db:2f:ce:04:0e:58:cd:3d:2e:ec:
         0a:69:c0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:13 2026 by rpki-client