Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UUE0Ia9Yd7U0nCTCVTW5k2tV-xI.roa
File:                     UUE0Ia9Yd7U0nCTCVTW5k2tV-xI.roa (raw, json)
Hash identifier:          E7hfB/+VESdhx4qOg7Ou5TS+Ofeu0pF6MhgNOeyqSv8=
Subject key identifier:   51:41:34:21:AF:58:77:B5:34:9C:24:C2:55:35:B9:93:6B:55:FB:12
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0185
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UUE0Ia9Yd7U0nCTCVTW5k2tV-xI.roa
Signing time:             Tue 31 Mar 2026 07:53:37 +0000
ROA not before:           Tue 31 Mar 2026 07:53:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.152.184.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=51413421AF5877B5349C24C25535B9936B55FB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:c2:bd:24:0d:58:1e:bf:0c:74:62:cb:31:
                    5e:cf:60:ad:fe:73:ec:c3:ab:95:b2:22:7c:fc:15:
                    e4:89:6b:32:4b:2a:c8:27:2a:59:87:b9:89:2a:aa:
                    bd:2a:de:fb:cf:32:9c:65:eb:20:3c:83:d0:0e:b6:
                    cb:af:ba:6a:33:65:01:1c:b0:8b:70:f4:ac:14:fd:
                    b9:1b:8b:af:59:4e:3e:80:22:d5:8d:11:5c:66:2d:
                    9d:b7:12:79:16:15:77:5f:b3:0e:a0:6c:ab:15:fc:
                    63:ec:8d:c8:02:77:d1:37:7b:4f:bd:02:9c:61:28:
                    33:6a:fe:4f:c8:ed:a2:f6:0e:16:88:be:e0:41:83:
                    89:98:bc:22:b0:89:ba:ad:2f:d0:c9:61:da:00:39:
                    bc:a2:f1:2d:d1:0f:22:c2:91:61:f0:b6:76:53:49:
                    3c:d2:72:1d:5b:85:e0:38:d7:67:23:3f:b0:ee:d3:
                    67:72:de:55:4d:af:c6:fa:6b:64:b6:31:16:c7:cc:
                    8a:c5:2c:e2:b5:b3:c9:9e:9d:99:6c:57:56:38:d1:
                    9d:a6:8a:65:e4:c2:ee:c9:c0:88:56:39:1d:ee:78:
                    e3:30:68:8c:94:e4:ea:43:44:4a:47:6b:4a:bb:24:
                    e8:f9:a5:0e:ba:65:bb:79:62:39:05:2f:0d:13:5a:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:34:21:AF:58:77:B5:34:9C:24:C2:55:35:B9:93:6B:55:FB:12
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UUE0Ia9Yd7U0nCTCVTW5k2tV-xI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:36:ca:8f:a6:8d:f5:ed:ad:1c:7b:ae:e1:b7:5d:5a:03:40:
         a5:45:0b:69:25:2f:b7:e6:00:4c:7f:c8:00:b3:fd:fc:fc:c0:
         0e:e7:fa:c5:c0:eb:82:69:6a:e6:b0:20:01:dc:45:78:0a:6c:
         a2:a9:98:da:bc:c5:58:d6:28:b4:d5:bb:6f:44:ba:06:b4:c7:
         5c:84:79:05:70:25:1f:81:38:a0:33:cf:ab:42:3d:68:4c:e7:
         e1:99:43:fe:e9:b1:72:97:07:1a:fc:c9:3f:22:ac:66:75:cb:
         87:04:ba:ce:70:73:af:13:ad:fb:6a:04:b7:e4:e1:40:6c:ef:
         ad:6c:2b:87:7b:be:33:d4:48:13:3f:f7:2e:dc:0e:9f:4e:c4:
         fe:15:b2:cb:0e:c5:32:d3:a1:45:e1:b2:a9:c3:06:57:a9:10:
         83:a2:5e:f0:66:13:ad:bc:d3:61:a5:91:06:a5:37:4d:38:e8:
         06:81:9f:10:d4:7d:26:c2:f2:71:f7:63:8e:e9:fd:8c:3f:f7:
         d2:2e:4b:20:54:23:13:ed:f1:f1:38:90:ca:d1:dc:19:99:58:
         4a:5e:91:f8:09:e1:62:ce:b7:8b:25:5b:bf:14:c0:93:6f:da:
         2a:70:c6:9e:78:e7:14:5e:8f:68:21:64:ff:c0:5f:17:e6:3b:
         29:82:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:44 2026 by rpki-client