Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DLZvs2-daWSCFkXuN65Imuqk3Zc.roa
File:                     DLZvs2-daWSCFkXuN65Imuqk3Zc.roa (raw, json)
Hash identifier:          8JJ8ZMJzrI0rxxTilh1PHJaIP/BFRVVlDF3fJ5oriuY=
Subject key identifier:   0C:B6:6F:B3:6F:9D:69:64:82:16:45:EE:37:AE:48:9A:EA:A4:DD:97
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01AB
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DLZvs2-daWSCFkXuN65Imuqk3Zc.roa
Signing time:             Tue 31 Mar 2026 07:53:52 +0000
ROA not before:           Tue 31 Mar 2026 07:53:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.239.94.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0CB66FB36F9D6964821645EE37AE489AEAA4DD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:69:5a:8d:b1:b7:ed:1f:d3:8c:f4:7a:e8:4b:
                    9a:96:f8:8a:1e:cb:03:5c:f2:50:c0:4d:13:7b:04:
                    37:23:06:b7:d8:e5:da:79:b1:24:7a:ff:b7:c7:5f:
                    66:c8:3b:38:0c:9f:aa:d7:3e:49:54:e8:12:69:79:
                    5f:9c:f1:ca:87:9e:e6:82:33:43:45:c9:4a:6e:b9:
                    2e:ba:ec:4f:af:30:da:1a:fa:7d:8a:f4:71:04:db:
                    60:13:69:8e:8d:83:b7:5d:3d:ff:a1:a7:47:f5:05:
                    da:f3:ed:76:c3:36:7e:aa:75:82:72:b7:39:8a:16:
                    b4:90:47:e7:b1:a4:c5:7b:2f:58:2e:fc:72:b0:39:
                    b0:2c:5d:c2:fc:1b:84:dd:c8:b1:98:6a:fe:6b:b9:
                    4e:22:f0:68:7b:31:75:57:17:0c:98:4d:ca:aa:93:
                    21:22:73:80:c0:4d:03:f3:b6:73:16:a1:9a:7a:84:
                    03:79:5f:eb:ee:ae:46:e2:77:10:4f:9a:58:b7:01:
                    f8:e9:1b:cb:a3:e9:fc:e2:57:46:85:6e:81:6b:e9:
                    14:38:01:f5:1d:e0:ea:1c:95:e4:66:fa:2a:73:ac:
                    82:6c:59:fd:43:34:9d:16:02:58:19:a5:44:57:53:
                    9d:db:38:29:61:30:ca:42:c7:21:02:4a:af:2a:33:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:6F:B3:6F:9D:69:64:82:16:45:EE:37:AE:48:9A:EA:A4:DD:97
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DLZvs2-daWSCFkXuN65Imuqk3Zc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:a4:24:97:66:1e:0e:ee:54:61:89:97:a7:9c:78:96:15:
         b4:dd:e9:82:97:a2:4f:34:17:1b:61:fc:aa:71:a5:f0:c4:b5:
         cf:94:9a:06:99:06:62:ad:c1:97:29:21:be:aa:5a:5d:ee:82:
         1b:66:bd:b4:80:20:93:1d:14:22:15:b2:3d:1c:93:be:32:4a:
         84:55:60:db:6a:e7:2c:00:1a:ca:fb:f8:aa:a1:8c:c3:96:e4:
         1a:c6:34:85:1d:15:5a:33:6a:cd:52:50:55:c0:e2:06:60:f1:
         88:fd:4f:77:7e:98:a2:96:34:c4:c5:28:74:a6:10:fa:5a:00:
         30:a9:c2:4c:a4:ba:ca:0b:1b:5f:c0:90:e0:54:17:0f:c1:b5:
         e1:45:1e:83:b5:ca:0c:d1:3b:99:ce:f2:0c:22:80:76:db:33:
         d2:5c:cb:4f:b0:27:02:dc:25:96:bc:c0:1c:92:25:8d:1d:e7:
         e1:82:ed:d7:6f:1e:bc:5c:98:57:50:33:dc:9d:e4:70:5c:37:
         7f:41:6e:11:5a:ad:e0:38:70:35:01:70:7f:c5:7f:08:80:ea:
         be:f0:8f:fe:c7:7b:e0:05:f8:7b:77:61:4b:2d:32:1b:dc:2e:
         12:67:07:7f:58:4a:c7:9d:c6:5f:76:0d:1b:0c:f5:04:8f:47:
         b1:eb:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:24 2026 by rpki-client