Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DQgOn_LFm-uGPNoelWAG8Aj0EOs.roa
File:                     DQgOn_LFm-uGPNoelWAG8Aj0EOs.roa (raw, json)
Hash identifier:          AVhmNLq0P7bMuRmj/QGjEtkmUxIulOAVwhS9hW67um4=
Subject key identifier:   0D:08:0E:9F:F2:C5:9B:EB:86:3C:DA:1E:95:60:06:F0:08:F4:10:EB
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       017A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DQgOn_LFm-uGPNoelWAG8Aj0EOs.roa
Signing time:             Tue 31 Mar 2026 07:53:31 +0000
ROA not before:           Tue 31 Mar 2026 07:53:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.140.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0D080E9FF2C59BEB863CDA1E956006F008F410EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:bf:83:1f:1b:3f:ae:a9:26:fd:4d:19:d5:
                    a2:7d:8c:d8:6a:2f:a2:4c:8f:d8:50:05:b1:e6:66:
                    c8:04:91:ec:7b:a2:ff:19:2c:c3:68:e0:d8:de:80:
                    98:1f:34:3c:90:27:97:88:7a:89:c3:47:47:89:c9:
                    f9:e9:04:36:1a:22:20:84:69:66:c8:83:55:a5:73:
                    5c:85:d2:f7:2c:34:28:b6:7b:b8:24:48:d1:86:10:
                    06:a9:92:2c:e7:fe:7b:40:d1:67:11:34:c1:f3:95:
                    56:a4:c6:40:0c:d4:ba:dd:7c:c5:20:0e:05:ea:3c:
                    05:22:7f:bb:71:0f:ec:30:f9:24:49:4e:a4:20:b3:
                    da:8d:8e:93:ee:c9:1b:67:e2:50:b9:31:a5:c4:93:
                    39:39:39:3d:80:4b:86:c7:7c:e9:3e:10:4f:bf:bc:
                    c2:48:c6:8e:94:81:cd:1c:45:61:9f:c0:66:55:fc:
                    1f:db:c0:6a:cb:bd:50:64:b4:82:52:2c:93:e6:8e:
                    94:97:fe:5b:1c:8e:5c:56:a8:43:d8:07:85:be:8f:
                    f7:1d:50:97:19:40:55:30:e9:f8:fa:ee:ef:f8:f3:
                    37:0b:c8:79:dd:c3:4b:73:0c:1e:c0:df:63:64:c2:
                    21:1d:8f:f0:35:32:59:35:f8:30:6c:3b:48:50:db:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:08:0E:9F:F2:C5:9B:EB:86:3C:DA:1E:95:60:06:F0:08:F4:10:EB
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DQgOn_LFm-uGPNoelWAG8Aj0EOs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:01:fd:b7:35:cf:b1:19:86:cd:36:d3:7a:2c:99:fc:10:cf:
         f0:0a:45:54:50:92:d2:4b:12:a3:eb:e9:73:d9:d4:1d:42:ae:
         9b:ca:87:fa:d7:e7:29:c0:70:26:35:93:e3:4c:3b:28:3f:44:
         b5:17:6e:31:ff:09:db:57:1d:51:57:7e:83:5e:eb:41:98:c0:
         26:06:c0:4c:37:35:35:22:9f:b7:28:b1:77:75:92:7f:90:c5:
         97:56:aa:39:11:cf:01:e2:09:a5:47:17:15:4b:9d:a5:a1:87:
         6d:5a:d6:16:31:52:74:b9:3b:ea:c2:f6:5f:da:61:fd:b2:79:
         65:4c:f7:7c:71:bd:32:24:c5:ef:85:09:66:78:09:5c:21:69:
         ee:e0:2e:bf:a4:e0:1a:39:2b:66:4e:61:f8:49:d7:1a:92:72:
         7f:6f:80:15:a7:cd:d6:83:c9:fc:ef:89:93:ea:5a:31:19:72:
         bc:d1:06:8d:7c:93:88:10:7c:d0:c1:9d:23:7d:a8:9d:18:5c:
         89:b7:17:6e:8a:b8:0f:55:a4:59:d9:90:2d:83:78:1f:eb:92:
         48:86:36:1e:9a:fb:a1:25:31:59:db:f7:99:b9:3e:bf:c3:28:
         e1:ec:a5:ee:27:2d:9d:03:fb:9e:aa:84:96:16:fd:c3:f0:cf:
         46:eb:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:37 2026 by rpki-client