Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GoYKEIk29nNyeF_vbQdN3Nw98JA.roa
File:                     GoYKEIk29nNyeF_vbQdN3Nw98JA.roa (raw, json)
Hash identifier:          bvYtSGmcrfVZEDNS4IanE6SGfZF+5rxGAWPpYJZEn+0=
Subject key identifier:   1A:86:0A:10:89:36:F6:73:72:78:5F:EF:6D:07:4D:DC:DC:3D:F0:90
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0146
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GoYKEIk29nNyeF_vbQdN3Nw98JA.roa
Signing time:             Tue 31 Mar 2026 07:53:02 +0000
ROA not before:           Tue 31 Mar 2026 07:53:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.152.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1A860A108936F67372785FEF6D074DDCDC3DF090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:c7:31:6e:03:b8:af:4c:3a:5c:f6:b3:b8:
                    80:22:70:77:f9:c2:7c:b1:3b:e9:ed:61:78:7c:8e:
                    c9:75:27:13:87:a1:7a:2c:da:e9:d0:ee:22:96:14:
                    82:37:34:de:0f:6e:20:f7:91:d7:f2:55:40:ec:53:
                    1e:42:a5:33:dc:6e:f4:77:13:2c:9c:7a:f6:91:82:
                    7d:2f:90:02:5f:85:21:fc:b3:da:b6:bd:f8:66:c5:
                    2c:3a:f7:fe:7b:6d:f2:2f:c9:50:50:57:01:a2:0a:
                    5a:22:aa:65:c9:10:b9:d9:3b:56:3f:56:8e:03:c8:
                    16:ee:15:0a:f6:64:ce:4b:fe:3a:3c:9e:29:5b:96:
                    84:44:9c:78:f0:43:e8:1b:94:a3:47:49:17:c3:c0:
                    29:1d:e2:2a:5a:92:ba:e7:ee:1e:87:a4:85:00:c6:
                    07:94:72:85:7b:c6:c7:c0:f5:b5:f9:aa:f6:8a:6d:
                    df:99:65:22:4a:e1:64:44:53:33:7f:c0:f3:51:50:
                    0e:0a:2a:82:73:83:ed:0b:5a:82:54:32:b6:dc:4b:
                    3e:fc:65:ee:fc:59:9d:30:89:b8:15:6a:8d:f3:df:
                    8b:2a:1f:49:45:84:85:89:a8:2e:8a:66:db:7e:ff:
                    d4:f6:ee:e3:49:e6:3c:a9:2f:be:ce:0c:f9:fa:e0:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:0A:10:89:36:F6:73:72:78:5F:EF:6D:07:4D:DC:DC:3D:F0:90
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GoYKEIk29nNyeF_vbQdN3Nw98JA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:01:0b:b9:de:f5:b6:45:d0:01:c5:0d:d4:0e:0a:0f:a1:f3:
         d9:94:2c:00:33:74:85:71:0c:0e:42:04:18:01:b4:85:de:1f:
         fb:d5:74:90:5a:29:f1:dc:5c:ca:51:d5:4a:db:d2:d6:4a:cd:
         7c:6e:8f:52:c9:b5:e6:4f:df:e9:7c:59:b4:67:65:ff:b8:ac:
         0c:82:07:bc:9b:d1:0b:a6:3e:e6:6f:a1:6d:3f:de:4b:22:70:
         30:cf:ad:39:10:b3:d4:37:3d:c8:33:64:81:17:cf:98:ac:d1:
         1a:b5:dc:3b:06:ea:d6:bd:da:af:b3:df:3b:a8:fb:3d:56:c1:
         31:a2:f9:a9:cd:5a:89:64:dd:37:56:8a:88:11:28:d1:86:83:
         9c:37:84:5f:72:01:a8:9c:39:f4:96:5b:7a:bd:c7:90:3f:d4:
         dd:53:fc:80:1c:20:63:fe:69:82:b6:9d:62:3d:7d:c5:be:20:
         8b:50:ae:79:44:7f:8a:89:ca:94:03:f8:1d:c9:fe:5a:e4:18:
         74:15:25:90:72:45:bd:4c:58:8b:8f:b3:68:cd:b8:10:79:63:
         f7:f2:61:31:33:84:79:f1:23:d1:d7:32:e3:b0:ac:86:b6:96:
         4f:6d:05:5f:bc:34:49:29:9a:8c:67:4d:95:cd:44:e1:4f:b7:
         fe:10:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:34 2026 by rpki-client