Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VaPDYve8n0L6TqS6yRKuyT6kl_Y.roa
File:                     VaPDYve8n0L6TqS6yRKuyT6kl_Y.roa (raw, json)
Hash identifier:          XL1dTpIkXwHNgTqiVJqS6jT8aWMxs/F9uyvRuCSZjLE=
Subject key identifier:   55:A3:C3:62:F7:BC:9F:42:FA:4E:A4:BA:C9:12:AE:C9:3E:A4:97:F6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0189
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VaPDYve8n0L6TqS6yRKuyT6kl_Y.roa
Signing time:             Tue 31 Mar 2026 07:53:38 +0000
ROA not before:           Tue 31 Mar 2026 07:53:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.158.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=55A3C362F7BC9F42FA4EA4BAC912AEC93EA497F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:b9:5d:49:79:78:9c:21:5f:d1:a0:54:81:
                    97:4a:a7:44:09:8a:1f:c8:33:72:29:95:ce:c5:60:
                    c1:b4:b1:9b:02:2c:6a:00:e2:1b:7c:fa:52:7f:a8:
                    04:9d:bd:39:a0:97:6c:27:71:5e:2e:a5:87:52:23:
                    fa:2f:ab:a4:d3:5d:89:b6:2c:33:03:54:1a:bd:58:
                    88:fa:0f:91:2c:a9:7f:d0:d3:41:2d:61:db:15:72:
                    0f:af:8c:cd:e0:56:56:30:de:05:9e:be:29:c1:d6:
                    ab:12:d1:e9:66:f4:f8:4c:f3:bb:99:bd:1d:9d:8d:
                    ae:6c:f8:bd:86:f9:48:4e:6b:2a:40:c3:aa:0b:23:
                    9d:4b:55:76:5f:b5:f2:e3:fd:6c:39:88:14:ab:3d:
                    08:8d:84:07:da:9f:d6:4a:89:cb:3f:b7:21:5f:41:
                    f1:31:10:fe:ba:63:2f:06:b3:03:d1:55:64:97:93:
                    34:b3:a9:57:8a:dd:9b:ba:45:73:2e:58:ad:cb:d6:
                    fd:d2:31:74:95:83:a3:b2:a2:83:fd:dd:c3:2b:bc:
                    ff:db:61:0d:98:f1:8b:2f:5b:c2:40:84:78:b4:98:
                    5d:fd:00:73:9a:1d:97:91:6d:ab:46:55:0b:82:09:
                    88:5b:b6:6e:b9:da:76:d4:7a:64:a6:37:d0:54:cc:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A3:C3:62:F7:BC:9F:42:FA:4E:A4:BA:C9:12:AE:C9:3E:A4:97:F6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VaPDYve8n0L6TqS6yRKuyT6kl_Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:10:ce:e0:a3:65:1e:9f:fe:97:06:5f:ff:00:b9:6c:fc:
         b5:c0:44:5a:5e:0a:2e:5a:f4:dd:10:40:01:76:15:a8:e2:9e:
         01:32:45:98:3b:a2:d9:4c:91:b5:8a:9f:d8:70:66:64:db:2f:
         50:39:0a:02:0e:4f:03:03:7f:e2:50:ed:cc:a8:38:26:44:90:
         c0:a9:35:55:45:3b:e3:7d:3b:57:a2:9c:21:28:20:6c:c8:64:
         b4:8d:a6:e9:48:6d:64:d8:bf:a2:20:8f:d7:fa:50:15:8f:71:
         56:71:37:ec:0a:02:d1:2b:6c:54:33:5a:e7:d5:03:06:bc:e4:
         5f:e3:0f:13:e3:3d:26:83:00:63:00:82:3d:d1:89:cf:88:8b:
         16:e3:94:91:4f:7a:c5:67:fb:cd:4a:dd:39:bf:1d:4f:de:7d:
         45:a8:86:75:a3:c1:89:a1:03:de:07:5a:05:c2:36:79:2b:85:
         e4:41:28:12:02:b3:5e:27:55:ac:8b:97:f3:87:2d:63:14:59:
         e5:d2:8c:73:43:c2:50:ce:7c:3a:31:42:21:de:2d:b1:1d:04:
         cb:fc:cf:d0:11:49:bf:36:50:91:78:b1:98:fa:d4:76:93:bc:
         72:06:d0:d7:00:77:d9:77:7c:f2:87:31:39:f2:23:80:7b:df:
         d7:14:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:01:48 2026 by rpki-client