Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TlBDIt20dSs0HZP24eoo2ERzMHo.roa
File:                     TlBDIt20dSs0HZP24eoo2ERzMHo.roa (raw, json)
Hash identifier:          qltrqqLr55ZYAZyDgVveKQPgmk3k5Z6qH8BNskpCy2w=
Subject key identifier:   4E:50:43:22:DD:B4:75:2B:34:1D:93:F6:E1:EA:28:D8:44:73:30:7A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01C9
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TlBDIt20dSs0HZP24eoo2ERzMHo.roa
Signing time:             Tue 31 Mar 2026 07:54:07 +0000
ROA not before:           Tue 31 Mar 2026 07:54:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        61.215.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4E504322DDB4752B341D93F6E1EA28D84473307A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:4e:9d:1e:0c:6a:84:13:11:25:17:c9:3e:
                    b0:91:2d:34:6e:68:77:e8:d7:8e:61:36:e0:18:7f:
                    5e:ce:5a:8f:a8:b6:6b:aa:ec:75:1f:15:2c:05:9b:
                    66:30:74:1c:2b:f7:6a:cf:68:20:33:d2:7c:65:9e:
                    69:11:48:65:3b:59:88:92:86:9f:e1:81:e3:67:6c:
                    e3:93:79:2e:70:9e:06:0f:53:24:4e:bd:c8:8f:91:
                    3c:a9:78:01:ef:fd:1b:3e:c6:40:ee:f6:5f:99:58:
                    46:64:a6:26:27:3b:fd:97:84:4e:56:66:02:ab:c2:
                    25:01:b3:18:39:c4:a6:32:bb:28:0b:ce:bb:c7:3d:
                    1f:a9:46:9a:03:cf:11:73:a6:da:2c:8e:a2:f1:fc:
                    3f:43:6a:56:b2:37:72:32:23:46:ec:96:8a:91:85:
                    c6:a3:eb:a9:0a:50:7c:14:e7:93:fc:0b:95:5e:96:
                    03:24:81:1b:b6:34:58:f3:a7:de:04:7e:72:c2:47:
                    18:95:7a:4e:d7:d3:3a:ee:6e:ad:4d:92:24:13:aa:
                    01:f8:b8:03:d5:e6:5e:76:9d:f4:7d:d2:67:13:f0:
                    cf:b4:ca:f9:bc:8d:b5:59:3b:26:f2:13:83:df:df:
                    b4:11:cb:02:44:7f:08:d9:62:98:ef:b3:03:fd:72:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:50:43:22:DD:B4:75:2B:34:1D:93:F6:E1:EA:28:D8:44:73:30:7A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TlBDIt20dSs0HZP24eoo2ERzMHo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:4e:ef:bb:05:2f:3a:04:e0:ee:10:3d:a6:6c:8a:27:ee:
         a5:f0:23:73:72:08:28:f7:f4:0e:74:19:6e:98:e6:42:ea:e3:
         7f:40:33:8b:3c:f9:a1:52:ec:3a:3f:c6:14:65:c6:42:35:8d:
         2c:2c:72:b1:e5:10:99:c5:9d:d8:3b:63:ea:c3:1c:89:bd:dd:
         f5:ed:0a:03:75:97:07:e7:57:f3:33:6e:27:73:fa:28:ce:a1:
         12:f6:74:e1:dd:9b:5c:d9:10:ef:94:e7:4a:17:bd:55:49:56:
         51:9e:2b:91:1b:73:69:6b:bb:1e:48:d2:fb:97:09:fb:4b:5d:
         41:dd:17:42:78:31:75:c2:7b:6e:d1:94:73:ae:2e:15:ba:f1:
         d5:b7:e6:d6:c3:d8:2e:c0:87:89:d2:00:90:2f:98:b8:f5:c4:
         01:ad:f0:a8:b6:21:ee:69:10:e9:08:7c:05:04:13:47:07:c0:
         54:8e:8a:57:75:f3:6c:79:61:70:78:cf:c1:bb:d2:2b:af:5e:
         51:e5:3f:af:51:44:a4:53:fd:0f:82:bd:90:66:80:42:9a:d9:
         ad:8a:7a:19:0c:bc:96:93:23:ee:67:d5:0f:64:c2:73:41:7a:
         24:7c:3d:1b:16:0a:d4:06:f2:8f:4e:d6:e3:ac:6b:91:b7:e1:
         97:4d:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:49 2026 by rpki-client