Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TAhicR0JifdOSgGGp6k2jCV_0hA.roa
File:                     TAhicR0JifdOSgGGp6k2jCV_0hA.roa (raw, json)
Hash identifier:          JlvMwhdQQB3JLSqyieWu6YEHFgkoXvcz3ncgntrFjq4=
Subject key identifier:   4C:08:62:71:1D:09:89:F7:4E:4A:01:86:A7:A9:36:8C:25:7F:D2:10
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01A9
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TAhicR0JifdOSgGGp6k2jCV_0hA.roa
Signing time:             Tue 31 Mar 2026 07:53:51 +0000
ROA not before:           Tue 31 Mar 2026 07:53:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.239.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4C0862711D0989F74E4A0186A7A9368C257FD210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:9f:90:18:18:7d:ed:9e:7e:02:b9:84:40:
                    1b:cf:26:cf:c3:c6:b1:5c:38:ec:72:79:85:d4:56:
                    b8:9b:98:dc:8e:f3:b0:17:07:4b:2a:34:9c:1c:55:
                    60:55:f4:7a:a1:1b:2f:89:70:5f:a9:07:fb:7d:8a:
                    c9:4f:8f:a3:bf:73:f5:c5:a9:45:8d:8f:e6:d8:a7:
                    28:0b:9e:f4:5d:e9:32:da:6a:eb:8e:48:91:07:5d:
                    33:37:b3:9a:68:ea:80:bc:4e:12:18:cd:c5:92:7f:
                    dd:6c:23:23:48:b0:96:a6:4d:d7:c6:18:ad:57:ce:
                    7d:c8:56:cb:31:70:e1:b8:0f:1a:10:e7:38:62:9d:
                    ad:e8:8b:0b:9c:1a:2e:cc:e8:a8:f5:e7:f5:25:49:
                    5e:17:80:c4:bc:98:3f:57:a0:c1:1d:36:75:95:5b:
                    da:5f:4d:a5:19:d7:17:82:09:a7:13:8a:b5:75:e4:
                    f7:b7:11:54:65:1d:c3:43:6e:c2:00:58:5d:0a:8c:
                    9b:ee:f2:7c:ef:fc:a4:94:31:64:5e:60:fd:77:c9:
                    93:bb:fc:b0:78:cf:2e:1c:93:dc:a1:2f:1e:ab:f7:
                    5d:f2:6a:e3:10:c5:c4:d8:63:ac:73:92:15:78:bb:
                    ae:b2:47:59:d3:8a:e5:0a:2b:73:20:d1:75:1d:b5:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:08:62:71:1D:09:89:F7:4E:4A:01:86:A7:A9:36:8C:25:7F:D2:10
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TAhicR0JifdOSgGGp6k2jCV_0hA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:b1:c7:4f:56:62:00:d7:e9:0b:34:85:3c:76:4c:de:ec:76:
         6d:84:96:53:e0:1e:04:6f:84:6b:ed:b5:b0:b9:f6:f2:9e:fc:
         eb:3a:aa:3a:4d:35:a6:0d:bb:01:ec:1e:b2:5d:ec:7d:85:eb:
         8b:cc:18:fc:45:2a:45:46:54:ad:0a:d1:fe:9f:04:84:0a:c1:
         77:7a:a7:ae:cb:88:03:09:13:86:52:28:6d:3d:13:d5:aa:9f:
         9e:43:90:6b:29:ad:50:2d:1c:6e:a1:f5:b1:7f:73:87:16:5f:
         51:14:9b:50:86:17:73:35:30:57:18:e1:44:b4:75:da:65:b3:
         ed:a4:63:82:0e:12:50:28:f2:77:a1:e8:85:8f:9e:ac:76:bb:
         46:54:9c:7b:df:78:6e:63:cc:4a:be:7b:44:fb:2e:7e:50:77:
         3f:68:84:75:5d:49:f2:89:e5:da:6c:9f:d7:f2:aa:67:d4:8e:
         b9:7f:2f:41:d5:1e:c0:b2:16:df:9e:0f:d8:c4:94:7c:c5:07:
         5f:00:3b:97:5e:a2:51:ee:67:b6:dc:87:69:6f:12:1a:bd:53:
         9c:c3:6a:b7:17:9e:fe:dc:41:3b:98:a2:31:b2:97:5a:3c:a9:
         55:cb:1f:ce:b3:06:07:2c:f8:35:a7:19:23:8c:19:6f:e6:89:
         e0:44:b3:aa
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzNTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDMDg2MjcxMUQwOTg5
Rjc0RTRBMDE4NkE3QTkzNjhDMjU3RkQyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPMp+QGBh97Z5+ArmEQBvPJs/DxrFcOOxyeYXUVribmNyO87AX
B0sqNJwcVWBV9HqhGy+JcF+pB/t9islPj6O/c/XFqUWNj+bYpygLnvRd6TLaauuO
SJEHXTM3s5po6oC8ThIYzcWSf91sIyNIsJamTdfGGK1Xzn3IVssxcOG4DxoQ5zhi
na3oiwucGi7M6Kj15/UlSV4XgMS8mD9XoMEdNnWVW9pfTaUZ1xeCCacTirV15Pe3
EVRlHcNDbsIAWF0KjJvu8nzv/KSUMWReYP13yZO7/LB4zy4ck9yhLx6r913yauMQ
xcTYY6xzkhV4u66yR1nTiuUKK3Mg0XUdte4VAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUTAhicR0JifdOSgGGp6k2jCV/0hAwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9UQWhpY1IwSmlmZE9TZ0dHcDZrMmpDVl8waEEucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0u9YMA0GCSqGSIb3DQEBCwUA
A4IBAQBUscdPVmIA1+kLNIU8dkze7HZthJZT4B4Eb4Rr7bWwufbynvzrOqo6TTWm
DbsB7B6yXex9heuLzBj8RSpFRlStCtH+nwSECsF3eqeuy4gDCROGUihtPRPVqp+e
Q5BrKa1QLRxuofWxf3OHFl9RFJtQhhdzNTBXGOFEtHXaZbPtpGOCDhJQKPJ3oeiF
j56sdrtGVJx733huY8xKvntE+y5+UHc/aIR1XUnyieXabJ/X8qpn1I65fy9B1R7A
shbfng/YxJR8xQdfADuXXqJR7me23IdpbxIavVOcw2q3F57+3EE7mKIxspdaPKlV
yx/OswYHLPg1pxkjjBlv5ongRLOq
-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:35 2026 by rpki-client