Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/E3p2E6Lxp56QDgcliopwN6JBdEU.roa
File:                     E3p2E6Lxp56QDgcliopwN6JBdEU.roa (raw, json)
Hash identifier:          rT1Gb5rwMkMjxCfF55QcpznObblV/iLbGvFl+u3yJKg=
Subject key identifier:   13:7A:76:13:A2:F1:A7:9E:90:0E:07:25:8A:8A:70:37:A2:41:74:45
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01B7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/E3p2E6Lxp56QDgcliopwN6JBdEU.roa
Signing time:             Tue 31 Mar 2026 07:53:57 +0000
ROA not before:           Tue 31 Mar 2026 07:53:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        211.14.128.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=137A7613A2F1A79E900E07258A8A7037A2417445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:09:78:bf:25:0c:ab:6c:26:31:5c:71:02:
                    84:11:9e:cb:71:5c:2c:0b:ef:2f:8b:de:7a:83:6c:
                    4f:df:05:a9:08:ce:e6:86:3b:84:ff:98:6a:ed:ff:
                    d6:2f:a5:d0:21:1a:39:76:02:5a:95:bf:95:f6:46:
                    bf:63:bb:34:57:1b:eb:1a:41:de:06:2a:e3:ba:5d:
                    f0:fd:ce:ca:4b:9b:96:76:6e:ed:ac:2a:45:3e:45:
                    bb:67:1a:93:e1:29:de:42:ca:c3:ed:6e:0f:8e:43:
                    ab:6c:12:de:c1:ec:59:8b:60:83:f9:e8:2f:24:37:
                    75:f0:ef:a4:88:b0:e6:31:96:98:c3:72:3c:47:f6:
                    65:5a:b4:e3:f3:04:47:95:59:ae:07:60:5d:52:7d:
                    51:e7:b3:16:41:14:e8:bb:84:98:3e:73:5e:39:00:
                    66:9f:54:ed:6d:98:58:2b:ce:83:de:ce:19:ec:65:
                    26:43:b0:dc:ac:18:47:c9:89:01:25:c8:34:c5:7d:
                    ce:80:3a:25:c2:13:b3:0a:9d:55:52:83:7d:2b:21:
                    6f:ca:7d:da:00:cb:61:1e:67:6c:40:54:b9:45:a9:
                    47:6f:70:84:4a:bf:ec:34:cc:a4:2d:d0:3d:fe:47:
                    37:ab:52:5c:f2:b3:f4:a2:27:46:15:9e:10:8f:75:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:76:13:A2:F1:A7:9E:90:0E:07:25:8A:8A:70:37:A2:41:74:45
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/E3p2E6Lxp56QDgcliopwN6JBdEU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:40:77:81:d7:bf:b9:49:1d:be:13:25:8d:e5:15:ca:da:3f:
         99:20:0b:c3:d3:d4:25:00:22:9f:58:60:b9:9a:e8:9c:7b:3c:
         6e:93:73:b6:ad:a1:b6:b9:1a:f3:57:30:15:b4:ba:ee:17:22:
         66:af:ad:47:b4:d1:85:90:13:31:3d:f6:55:12:44:08:b8:9a:
         18:14:5b:94:3d:e2:a7:7f:d8:c0:a4:5f:83:87:40:4c:94:06:
         27:0c:b1:92:f4:88:59:81:1b:bb:25:d8:b7:fc:0c:b0:d1:34:
         90:46:e7:54:2f:39:2b:d5:d8:3e:f2:68:42:83:88:86:17:a8:
         b1:44:28:66:27:c3:28:70:c6:da:83:05:cf:b3:78:48:8b:4d:
         01:30:09:de:2b:67:7e:42:ce:92:f7:7d:53:4c:8a:d9:6b:ee:
         c3:d1:fc:2c:cb:95:f8:9e:15:24:af:06:3b:bc:93:57:d3:76:
         6e:98:0c:89:9b:94:7a:36:9f:11:92:69:29:a2:9b:eb:d8:3b:
         02:ee:80:11:c6:b8:7c:c4:f3:56:c7:b5:21:cc:1f:a1:3d:86:
         9c:ee:15:a4:a6:d7:2b:02:de:01:15:ca:3b:2e:18:6f:31:d9:
         72:fa:81:7e:12:55:e8:bf:22:9f:7d:c4:21:c6:c9:11:0c:62:
         65:d3:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:42 2026 by rpki-client