Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BltA4BbM93i1oKhI6IlS2gcG8dw.roa
File:                     BltA4BbM93i1oKhI6IlS2gcG8dw.roa (raw, json)
Hash identifier:          EOiSCu/31IKcOObGcqxLm72VBVpDvJxX99pfKMvwBQ0=
Subject key identifier:   06:5B:40:E0:16:CC:F7:78:B5:A0:A8:48:E8:89:52:DA:07:06:F1:DC
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       016E
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BltA4BbM93i1oKhI6IlS2gcG8dw.roa
Signing time:             Tue 31 Mar 2026 07:53:24 +0000
ROA not before:           Tue 31 Mar 2026 07:53:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=065B40E016CCF778B5A0A848E88952DA0706F1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:0a:2a:76:17:50:9f:94:a2:00:b4:15:c5:
                    c5:cc:05:71:04:74:6d:a3:07:85:1d:49:27:1a:a6:
                    c1:a2:59:a1:8d:ca:d5:06:06:8c:48:1c:50:5a:8b:
                    bc:ad:c3:eb:bc:f8:a7:1b:13:93:ef:36:de:13:37:
                    9d:c6:f2:d7:b7:94:bf:ed:41:a9:35:f2:3e:22:d7:
                    4a:c1:ae:86:07:30:96:76:ae:a7:2f:fb:e7:b3:64:
                    0d:40:64:22:9f:b4:69:0b:75:54:3f:83:69:59:90:
                    41:f7:fa:c6:85:57:c8:6c:33:84:22:12:7b:e7:b7:
                    bf:2c:89:d0:24:d3:bd:61:7d:e6:60:29:0e:5e:91:
                    54:b8:9f:c4:db:7b:61:03:26:e6:d5:e9:e7:b3:89:
                    f0:61:51:d9:9a:48:44:7e:27:e8:c9:76:ab:f9:2b:
                    d0:c9:41:c7:d5:17:10:23:91:95:05:fc:a7:4a:6b:
                    ea:c0:2b:1f:fd:a3:93:be:7c:83:a8:57:32:f5:e4:
                    0a:76:bc:8b:10:c8:b2:9a:cb:7d:af:db:ae:de:85:
                    95:ad:a0:d5:d0:cd:59:ba:cb:10:bf:17:11:14:86:
                    dd:84:8a:33:a9:69:76:6b:4c:8e:c9:51:9b:80:5e:
                    41:f4:f1:df:6b:f6:9c:3a:07:a8:8d:eb:2a:ec:22:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5B:40:E0:16:CC:F7:78:B5:A0:A8:48:E8:89:52:DA:07:06:F1:DC
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BltA4BbM93i1oKhI6IlS2gcG8dw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:fb:a8:3c:4e:17:c5:0b:0e:5e:64:ab:2b:2b:a0:7d:45:
         fe:23:81:50:99:eb:5e:ab:8c:ad:2b:10:cc:ba:89:0b:4f:bc:
         4e:0f:13:de:7f:80:00:e4:1f:f0:8a:43:35:00:33:49:96:8f:
         1c:d0:83:14:8d:f4:4b:5b:54:62:ed:b1:d6:0a:85:14:c2:67:
         0f:94:9f:15:6b:98:02:b5:fd:05:41:53:dc:7b:48:f9:87:18:
         70:3a:51:f8:5e:2f:ac:00:1d:cb:d5:f5:c0:5a:4d:85:63:23:
         00:f4:7c:9a:4d:82:2a:74:c4:10:d9:39:ae:1e:40:31:06:b7:
         d1:4b:5d:f5:25:2c:f5:46:67:80:51:b7:4c:31:9f:08:eb:1d:
         3f:69:ea:e8:09:34:d7:09:46:50:f3:a5:f1:1f:e8:73:b3:c2:
         98:e6:53:6e:15:e0:57:1c:78:c3:4c:f3:ef:1b:0a:8f:8c:09:
         e4:e0:b3:af:a4:01:36:71:1d:c4:51:f0:ef:5b:d0:0f:a7:86:
         0f:9c:69:fd:71:67:f5:7c:1b:6d:01:4d:6f:a8:68:ba:1a:75:
         78:de:3a:a7:72:69:09:e7:63:da:41:1e:66:34:5c:a8:e1:f6:
         87:d5:2f:ce:41:18:a9:e8:0b:7a:64:28:79:4c:d3:a1:7c:d7:
         ca:b3:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:22 2026 by rpki-client