Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GOcrAQQunQsBff4PECbaYLY3k_0.roa
File:                     GOcrAQQunQsBff4PECbaYLY3k_0.roa (raw, json)
Hash identifier:          LKU7pKemaLZKcGS2I1jHQN3DGS9ehf7jwkbQick2S2I=
Subject key identifier:   18:E7:2B:01:04:2E:9D:0B:01:7D:FE:0F:10:26:DA:60:B6:37:93:FD
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0192
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GOcrAQQunQsBff4PECbaYLY3k_0.roa
Signing time:             Tue 31 Mar 2026 07:53:41 +0000
ROA not before:           Tue 31 Mar 2026 07:53:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.171.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=18E72B01042E9D0B017DFE0F1026DA60B63793FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:9a:97:64:89:6a:2b:83:6c:db:8a:64:ca:
                    dd:2f:0f:85:ae:4c:85:78:a9:d9:80:cd:51:ae:fc:
                    23:6a:a7:08:9d:80:bb:11:9a:c8:60:f5:fc:b8:b1:
                    f7:3e:e4:3d:09:6a:63:51:ae:74:3a:f8:f0:b4:e3:
                    4f:c0:d3:04:26:f4:72:19:e3:37:28:2c:6a:10:a7:
                    bf:5a:49:f8:40:f4:6a:30:f7:34:4a:ab:bb:27:ee:
                    41:74:94:dd:6e:09:23:0f:9b:16:c3:bf:38:53:24:
                    da:89:00:30:41:4f:68:44:65:b8:64:5c:f5:34:0d:
                    50:83:98:95:06:3c:8d:97:5b:32:9f:73:1f:cc:43:
                    7c:1d:8a:3a:75:5e:4e:14:8f:52:95:a6:9a:0d:d4:
                    13:14:d5:57:ea:cd:48:af:e2:d8:13:85:07:28:60:
                    7a:fc:56:bf:b2:f2:b9:61:8c:9e:4b:ab:b1:ee:49:
                    28:f7:50:6d:25:66:3c:73:c3:5a:f5:c5:cc:cb:1f:
                    6c:62:97:8d:9c:2b:4a:39:ff:45:b8:72:37:de:e2:
                    f8:fa:47:4d:75:bc:35:0e:a4:4d:2f:d7:fc:94:5e:
                    89:84:41:0f:73:a2:36:eb:f7:24:9e:37:bd:50:0d:
                    f9:15:3f:05:5b:9d:b8:a0:ca:51:60:42:59:96:9b:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:2B:01:04:2E:9D:0B:01:7D:FE:0F:10:26:DA:60:B6:37:93:FD
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GOcrAQQunQsBff4PECbaYLY3k_0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:84:d2:0d:7b:20:0b:bd:f1:1d:47:40:0b:b9:50:ba:b8:49:
         55:ec:6e:ec:06:80:85:da:84:ba:06:d2:9d:0d:89:c4:80:cd:
         ae:36:44:d3:2e:93:58:ee:8d:5e:f8:57:b2:30:4f:36:4e:1a:
         c3:14:3b:22:78:a9:29:6c:61:40:4a:54:de:01:37:8a:70:a3:
         d7:d4:7b:6a:fa:d2:00:6c:af:e0:8f:4f:7f:58:bd:f5:9d:47:
         33:85:ab:45:d1:d8:44:7b:02:af:ba:19:e0:05:df:6e:58:6f:
         94:f8:6f:a3:65:07:59:94:1b:d6:93:9e:da:6b:51:44:3c:bd:
         ac:e4:d6:71:a7:34:6d:e2:25:84:ec:b7:2e:e5:e0:7f:6c:c4:
         91:83:b3:76:9e:2c:7e:98:db:3c:84:3d:4d:72:85:0d:8d:81:
         16:04:2a:b4:9b:1d:fc:a9:25:83:6a:6b:1d:6a:34:47:9b:02:
         cb:d7:e3:4a:ee:b5:32:1f:d6:c4:64:ef:98:9c:e8:7e:bb:92:
         9c:0a:d4:71:f9:88:8f:02:0e:e7:02:88:60:dd:06:09:1e:47:
         5e:be:fb:28:e3:13:1e:9a:32:c3:f6:80:45:bc:f3:68:ba:71:
         6e:62:c8:96:13:26:bd:79:21:44:65:38:16:61:e8:7c:1c:7c:
         90:c5:2e:ee
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzNDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE4RTcyQjAxMDQyRTlE
MEIwMTdERkUwRjEwMjZEQTYwQjYzNzkzRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxh5qXZIlqK4Ns24pkyt0vD4WuTIV4qdmAzVGu/CNqpwidgLsR
mshg9fy4sfc+5D0JamNRrnQ6+PC040/A0wQm9HIZ4zcoLGoQp79aSfhA9Gow9zRK
q7sn7kF0lN1uCSMPmxbDvzhTJNqJADBBT2hEZbhkXPU0DVCDmJUGPI2XWzKfcx/M
Q3wdijp1Xk4Uj1KVppoN1BMU1VfqzUiv4tgThQcoYHr8Vr+y8rlhjJ5Lq7HuSSj3
UG0lZjxzw1r1xczLH2xil42cK0o5/0W4cjfe4vj6R011vDUOpE0v1/yUXomEQQ9z
ojbr9ySeN71QDfkVPwVbnbigylFgQlmWm7c5AgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUGOcrAQQunQsBff4PECbaYLY3k/0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9HT2NyQVFRdW5Rc0JmZjRQRUNiYVlMWTNrXzAucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0qtoMA0GCSqGSIb3DQEBCwUA
A4IBAQBxhNINeyALvfEdR0ALuVC6uElV7G7sBoCF2oS6BtKdDYnEgM2uNkTTLpNY
7o1e+FeyME82ThrDFDsieKkpbGFASlTeATeKcKPX1Htq+tIAbK/gj09/WL31nUcz
hatF0dhEewKvuhngBd9uWG+U+G+jZQdZlBvWk57aa1FEPL2s5NZxpzRt4iWE7Lcu
5eB/bMSRg7N2nix+mNs8hD1NcoUNjYEWBCq0mx38qSWDamsdajRHmwLL1+NK7rUy
H9bEZO+YnOh+u5KcCtRx+YiPAg7nAohg3QYJHkdevvso4xMemjLD9oBFvPNounFu
YsiWEya9eSFEZTgWYeh8HHyQxS7u
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:42 2026 by rpki-client