Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EEgOphioxdkSz22stubtCEm6GE0.roa
File:                     EEgOphioxdkSz22stubtCEm6GE0.roa (raw, json)
Hash identifier:          YlyA172+cH3MUTcSFvsvILeEoIm5lv2R4YMRBQFAIM8=
Subject key identifier:   10:48:0E:A6:18:A8:C5:D9:12:CF:6D:AC:B6:E6:ED:08:49:BA:18:4D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       016F
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EEgOphioxdkSz22stubtCEm6GE0.roa
Signing time:             Tue 31 Mar 2026 07:53:25 +0000
ROA not before:           Tue 31 Mar 2026 07:53:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=10480EA618A8C5D912CF6DACB6E6ED0849BA184D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:d9:56:07:3b:14:8b:76:b2:b6:76:bc:ed:
                    83:8a:93:f3:fc:84:d2:93:99:bb:24:d3:5c:c1:61:
                    05:3c:4f:43:a5:55:1d:12:af:a6:be:d3:13:4f:91:
                    ae:c1:a1:41:ae:7d:41:eb:1a:9d:b2:8d:88:83:0e:
                    30:1e:cd:0f:23:3c:b9:a0:5c:43:62:45:e4:8f:a9:
                    e8:a0:f2:41:17:d4:c3:23:2b:41:f6:4e:f7:e0:c7:
                    80:a9:24:44:39:a1:cf:ae:fd:f1:51:0d:a9:dc:f1:
                    2e:78:3e:e6:d0:51:50:fc:57:13:ae:15:b0:eb:7d:
                    89:07:00:11:ea:a7:0b:cf:d1:e5:7e:58:06:f1:34:
                    0c:d4:db:e8:e5:fc:72:f1:7a:2d:d6:c3:bf:39:07:
                    5d:1a:5c:7e:ff:44:ba:fb:1b:9d:9f:ad:36:45:a0:
                    51:d1:c1:09:75:df:ab:70:94:02:79:8e:bc:89:04:
                    5b:72:c8:b7:7c:d1:46:43:59:a7:1d:9b:af:f1:11:
                    5c:5f:53:c0:86:1d:5a:75:58:f2:a3:a8:c9:fe:94:
                    9f:80:5e:ff:25:53:1c:39:2e:f4:be:d9:67:11:a5:
                    28:f5:29:6e:d4:70:a0:24:cc:d2:c2:b6:96:9b:9b:
                    02:b3:64:be:75:89:69:1e:70:ae:f5:22:4b:b3:26:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:48:0E:A6:18:A8:C5:D9:12:CF:6D:AC:B6:E6:ED:08:49:BA:18:4D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EEgOphioxdkSz22stubtCEm6GE0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:3c:28:82:51:9c:ea:fe:94:7c:1c:50:74:81:cc:c8:71:
         8d:43:39:a8:0b:55:cc:d8:5f:b6:89:fe:f3:ab:bd:84:20:44:
         32:14:c9:33:b2:fc:64:d4:cb:02:64:60:52:e4:7c:2d:d3:60:
         60:58:60:2c:d8:1e:4e:3a:32:cc:22:51:23:a9:b2:54:2b:57:
         8a:02:16:4a:9d:e5:0e:3d:14:fd:7b:e4:6a:bd:6a:ca:a0:d3:
         64:be:b5:98:d7:54:8b:05:bf:3f:4c:3c:06:49:47:6c:de:97:
         ac:57:d5:3e:bc:88:76:c3:45:43:ed:da:5c:95:1b:d9:d9:68:
         61:92:99:db:52:eb:ac:4b:3d:b0:ea:e3:c1:80:e6:d2:34:13:
         23:e5:65:5d:7b:60:48:4a:72:07:c2:4f:88:f1:c7:55:25:94:
         cd:27:d6:00:69:e9:7f:ff:8c:56:82:29:01:2a:2a:7a:c5:5e:
         b6:f6:0f:79:d7:76:4e:24:b0:45:9e:f8:e5:b5:e5:e2:5f:fc:
         82:c6:3c:26:c1:ff:64:90:35:95:09:cb:19:93:85:b2:ec:d8:
         83:45:6f:e1:60:65:ad:e6:76:21:18:17:40:4a:5f:d1:cb:57:
         2b:e9:68:bf:c0:c3:1d:25:8c:f0:72:bd:3b:47:70:9d:1f:7f:
         3a:04:ce:be
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEwNDgwRUE2MThBOEM1
RDkxMkNGNkRBQ0I2RTZFRDA4NDlCQTE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF49lWBzsUi3aytna87YOKk/P8hNKTmbsk01zBYQU8T0OlVR0S
r6a+0xNPka7BoUGufUHrGp2yjYiDDjAezQ8jPLmgXENiReSPqeig8kEX1MMjK0H2
Tvfgx4CpJEQ5oc+u/fFRDanc8S54PubQUVD8VxOuFbDrfYkHABHqpwvP0eV+WAbx
NAzU2+jl/HLxei3Ww785B10aXH7/RLr7G52frTZFoFHRwQl136twlAJ5jryJBFty
yLd80UZDWacdm6/xEVxfU8CGHVp1WPKjqMn+lJ+AXv8lUxw5LvS+2WcRpSj1KW7U
cKAkzNLCtpabmwKzZL51iWkecK71IkuzJgzFAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUEEgOphioxdkSz22stubtCEm6GE0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9FRWdPcGhpb3hka1N6MjJzdHVidENFbTZHRTAucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0oGgMA0GCSqGSIb3DQEBCwUA
A4IBAQBdUzwoglGc6v6UfBxQdIHMyHGNQzmoC1XM2F+2if7zq72EIEQyFMkzsvxk
1MsCZGBS5Hwt02BgWGAs2B5OOjLMIlEjqbJUK1eKAhZKneUOPRT9e+RqvWrKoNNk
vrWY11SLBb8/TDwGSUds3pesV9U+vIh2w0VD7dpclRvZ2WhhkpnbUuusSz2w6uPB
gObSNBMj5WVde2BISnIHwk+I8cdVJZTNJ9YAael//4xWgikBKip6xV629g9513ZO
JLBFnvjlteXiX/yCxjwmwf9kkDWVCcsZk4Wy7NiDRW/hYGWt5nYhGBdASl/Ry1cr
6Wi/wMMdJYzwcr07R3CdH386BM6+
-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:24 2026 by rpki-client