Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EynqDaycP3AJmwtI1iYmxgwRr24.roa
File:                     EynqDaycP3AJmwtI1iYmxgwRr24.roa (raw, json)
Hash identifier:          t2dZGBo1TVl5eeEOpVbOEU59HzBiLm7M8XfkokPcaBs=
Subject key identifier:   13:29:EA:0D:AC:9C:3F:70:09:9B:0B:48:D6:26:26:C6:0C:11:AF:6E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0150
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EynqDaycP3AJmwtI1iYmxgwRr24.roa
Signing time:             Tue 31 Mar 2026 07:53:09 +0000
ROA not before:           Tue 31 Mar 2026 07:53:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.218.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1329EA0DAC9C3F70099B0B48D62626C60C11AF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:81:5a:d3:2e:65:ef:dc:07:29:87:c0:6a:
                    ec:e1:d5:59:45:b6:81:45:02:27:39:fc:1c:84:9e:
                    05:d4:db:31:85:c5:d9:2d:05:a2:19:22:44:86:59:
                    8d:0c:58:d9:71:79:46:3e:fd:99:b5:69:1d:93:1b:
                    85:bf:64:db:8c:2b:bf:32:52:f8:bd:f1:bd:d6:c1:
                    83:bc:fa:78:80:34:67:b2:ef:50:80:d7:58:8c:75:
                    02:21:d5:b8:98:c4:55:69:58:b6:30:52:49:da:59:
                    c6:98:08:83:35:55:2f:49:47:28:cb:f0:6a:80:94:
                    87:4b:21:65:f6:f1:8c:6a:c6:98:45:eb:a5:73:b0:
                    23:ea:8e:b0:bd:ba:ff:59:c3:ee:53:08:a6:6e:f3:
                    29:3d:c8:69:0b:cf:65:7d:fb:e6:1a:d7:1d:2e:9a:
                    df:47:8e:f0:eb:b7:08:6e:9c:90:55:8a:57:fc:b0:
                    bc:56:cc:69:32:ad:41:b1:d3:4a:7d:3e:81:d8:79:
                    83:ce:c4:b4:f0:44:20:7f:5d:52:d7:25:57:4e:a3:
                    67:d0:60:d8:63:c6:d6:de:05:c1:e4:cc:81:e3:f6:
                    74:c0:e8:0b:2e:27:91:41:94:c6:3a:c8:95:5a:76:
                    bf:b7:29:d9:83:93:da:31:6b:98:2e:b8:1a:c6:10:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:EA:0D:AC:9C:3F:70:09:9B:0B:48:D6:26:26:C6:0C:11:AF:6E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EynqDaycP3AJmwtI1iYmxgwRr24.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.218.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:f8:e9:76:bf:da:d2:ce:a4:2e:52:68:f3:2b:8f:b3:02:
         8c:6c:93:41:c9:a5:75:e0:49:cc:61:1a:89:3e:e3:0b:9b:d9:
         e2:f0:c5:f6:a8:67:32:e1:29:e6:1b:20:79:46:81:4e:fb:56:
         72:e8:00:08:a9:28:a0:53:16:39:6e:43:ea:21:e9:24:06:5e:
         14:77:32:42:3a:f6:d9:f7:8f:ae:e0:71:7d:f2:40:fc:ff:c7:
         f8:91:da:54:39:ab:c5:32:fa:12:2d:8e:50:7e:df:d8:78:7f:
         45:ac:9a:82:1b:59:1d:26:47:54:65:9e:08:2d:9b:11:3e:1b:
         20:39:a2:c4:33:03:09:78:73:af:dd:f9:5f:97:8e:68:47:ae:
         8f:f6:48:57:d9:15:c2:f8:c2:4c:52:03:45:77:5d:d0:c3:b6:
         2f:ad:af:de:50:8f:e3:2c:0a:68:ab:9b:f3:11:61:59:a3:bf:
         3a:8b:a8:12:a4:b8:58:28:f6:19:1b:76:76:ad:81:40:81:71:
         46:4b:f8:90:ef:c0:b5:3e:e9:29:c6:ce:7f:52:3a:1d:44:b7:
         86:06:0a:67:c0:44:93:54:01:c1:05:90:c2:4a:dd:be:44:e3:
         9e:1a:10:aa:b2:0f:5d:f7:e1:f4:60:cc:33:45:7c:a6:9a:1c:
         a2:19:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:49 2026 by rpki-client