Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/E0zh4kpgn4mvzCEFe7doICJuw78.roa
File:                     E0zh4kpgn4mvzCEFe7doICJuw78.roa (raw, json)
Hash identifier:          zxZO9PSYt8TDtAHrGTQ6ZArOUnXghsX979ZoW1fJcjc=
Subject key identifier:   13:4C:E1:E2:4A:60:9F:89:AF:CC:21:05:7B:B7:68:20:22:6E:C3:BF
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0182
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/E0zh4kpgn4mvzCEFe7doICJuw78.roa
Signing time:             Tue 31 Mar 2026 07:53:36 +0000
ROA not before:           Tue 31 Mar 2026 07:53:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.152.30.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=134CE1E24A609F89AFCC21057BB76820226EC3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:fa:ee:b2:10:06:51:b6:b8:47:bf:53:f4:
                    5a:64:d3:ff:35:e1:b4:13:09:2f:b5:15:23:3a:24:
                    3f:32:a7:10:49:dc:df:86:36:60:30:04:5b:7e:c1:
                    37:00:c3:52:98:1d:e8:b7:c0:e0:d2:24:12:23:dc:
                    e6:f7:cc:d0:bd:5b:7a:e4:0d:ed:07:0d:04:da:de:
                    3e:e3:42:34:e4:72:ec:64:02:7d:d3:54:28:83:97:
                    d2:16:e8:34:8a:61:ad:22:9a:00:07:f4:94:03:e8:
                    c9:e6:42:88:d9:18:2b:2a:9d:4b:69:8f:1d:1d:03:
                    12:dc:42:36:8f:25:04:92:64:06:62:94:d3:74:ea:
                    11:83:75:50:fc:39:9e:f5:3d:16:64:15:bd:4c:4b:
                    bb:a8:92:46:3b:6e:5e:fc:72:f4:ac:1f:29:a2:0b:
                    37:2f:d3:b9:6d:18:01:19:ae:46:9d:3f:b6:f9:df:
                    9c:1c:91:be:fb:0c:c1:7c:d9:e1:0e:45:05:32:72:
                    86:ab:5b:db:94:88:9e:37:a8:1e:fc:ca:61:aa:ee:
                    ef:95:07:97:c6:51:75:ed:ca:43:09:f6:2c:af:c7:
                    37:36:a4:0b:e1:25:59:9d:10:2d:2f:16:9a:9c:5e:
                    0b:1a:3a:02:00:fb:68:74:d5:18:b7:04:16:34:a9:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4C:E1:E2:4A:60:9F:89:AF:CC:21:05:7B:B7:68:20:22:6E:C3:BF
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/E0zh4kpgn4mvzCEFe7doICJuw78.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:5b:d9:3d:67:73:5f:cb:bb:41:50:e9:7f:f8:3c:2f:91:75:
         1c:0f:63:d7:8d:08:3a:4e:96:c1:42:f4:d4:8c:68:17:27:64:
         ff:20:70:a6:e9:49:40:7f:0a:fa:67:54:ca:bc:7c:6c:98:f2:
         90:25:b5:4a:8c:41:8e:e0:02:1a:53:86:89:4d:1d:34:c4:8c:
         f0:f9:57:52:37:47:95:64:66:84:23:7e:10:3f:b0:c9:65:6a:
         a7:af:6a:c8:09:5e:50:9a:22:4f:bb:ee:94:d1:80:6e:ab:cd:
         d5:62:67:b4:22:92:2a:ee:87:08:6f:f9:40:a3:e8:af:2b:d5:
         4a:b4:57:46:f9:a9:f1:06:a9:94:bc:ad:2f:55:e9:87:ce:67:
         48:7f:b9:56:8b:5f:39:be:e5:48:9f:fe:d3:4e:d4:78:1c:c5:
         2a:8d:46:13:43:14:79:dc:69:f7:7b:37:9e:f6:55:e8:14:71:
         16:03:bb:7e:1f:2e:74:9a:d0:ea:f3:de:e8:9f:41:68:e6:e4:
         18:21:46:dc:26:12:c7:52:da:8c:8f:eb:a4:70:73:7e:91:36:
         fc:fe:ad:73:74:6d:06:37:7b:0c:5a:cc:d2:d0:e0:07:4b:62:
         e8:c3:e0:bf:00:4c:e9:73:3d:da:d8:d3:e8:cd:e6:c8:4c:11:
         10:2b:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:26 2026 by rpki-client