Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Vggu61IsDDa6ogGSuaC9xyaMNPA.roa
File:                     Vggu61IsDDa6ogGSuaC9xyaMNPA.roa (raw, json)
Hash identifier:          c7iM27xKvZZmbtwgd5lt+KfLDa3KHHnSLbv38fgeWK4=
Subject key identifier:   56:08:2E:EB:52:2C:0C:36:BA:A2:01:92:B9:A0:BD:C7:26:8C:34:F0
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01AE
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Vggu61IsDDa6ogGSuaC9xyaMNPA.roa
Signing time:             Tue 31 Mar 2026 07:53:53 +0000
ROA not before:           Tue 31 Mar 2026 07:53:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.252.102.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=56082EEB522C0C36BAA20192B9A0BDC7268C34F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:29:0e:bc:52:ef:0b:0b:9b:2e:f0:97:09:
                    d6:14:ef:dc:26:30:0f:ef:32:3b:a1:d7:4c:13:d3:
                    61:41:cd:e8:dc:23:d6:e8:84:2a:c7:6c:23:b5:44:
                    6a:6a:8f:d6:f6:25:08:c9:ae:70:4f:0f:cb:70:cd:
                    18:23:b2:d8:ae:09:eb:c9:41:21:b8:6c:a6:27:1c:
                    48:ec:7f:eb:5d:5d:59:7a:d5:b4:81:40:58:b1:8f:
                    e6:f1:02:6d:8f:1e:4a:ca:45:08:5b:41:a4:08:88:
                    18:7a:18:29:71:63:b0:b6:07:6b:07:65:b4:13:6a:
                    56:ba:e6:ea:69:83:d0:90:fa:0b:7a:1f:9c:3e:d2:
                    5f:a4:69:9c:69:39:2d:a7:eb:b7:33:2c:b1:4a:ef:
                    19:e4:e5:8e:50:5a:08:0a:32:16:d8:da:63:38:b1:
                    b5:db:c9:21:8f:30:fe:05:2a:b5:99:30:6c:fc:22:
                    2b:3d:81:ac:d9:3e:4e:23:82:2b:64:22:8e:d0:17:
                    6a:a7:92:7a:52:16:12:4b:ca:79:cc:a2:6c:6c:b9:
                    66:b0:9a:ff:60:af:7e:36:c2:3a:07:2e:06:1a:b6:
                    6d:4d:9b:9c:57:85:65:b8:19:38:aa:3f:0e:04:65:
                    d4:06:45:4a:89:93:74:5e:9b:8e:e2:90:9c:09:e4:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:08:2E:EB:52:2C:0C:36:BA:A2:01:92:B9:A0:BD:C7:26:8C:34:F0
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Vggu61IsDDa6ogGSuaC9xyaMNPA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e1:5e:35:9e:7f:da:6c:f9:c8:44:80:92:e3:60:55:45:d7:
         9c:e4:27:20:f2:78:de:f3:42:03:12:1b:1e:c5:a5:ce:99:7b:
         7f:e2:1f:bb:a7:51:a6:0d:bf:b2:43:a8:e0:9c:4f:f5:73:4f:
         60:3c:ad:9b:e5:06:78:2d:09:44:4c:99:24:e7:63:9f:af:29:
         0d:13:fa:1f:af:3f:b3:11:d9:a1:f1:6d:eb:45:c8:3f:6d:ff:
         79:70:62:2d:cb:cb:5b:c5:67:51:ae:f9:d2:a3:dc:82:ec:7d:
         b4:c0:ff:29:0e:2f:e2:33:37:53:b4:93:29:58:09:8b:68:b1:
         5b:81:3b:a3:8b:2a:bc:d7:7f:57:dc:b7:07:a5:21:b6:5a:75:
         b3:27:ec:63:3e:44:34:e2:8a:aa:01:27:5e:8c:59:0b:f0:cf:
         a2:38:bf:05:94:87:9a:de:26:05:fc:5d:ac:96:0b:8b:95:c7:
         a8:20:8a:5f:a0:e5:ee:0f:28:71:55:d6:fa:47:00:b3:6d:4a:
         13:39:3c:6c:af:d0:2e:89:ec:a9:ef:19:59:05:b5:61:80:f2:
         ca:10:54:a9:d4:12:53:fd:71:c1:a5:6a:7c:e0:e5:fd:12:6b:
         78:91:f0:98:57:98:9a:be:f1:68:0b:26:d8:e4:ca:f8:68:47:
         40:e3:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:35 2026 by rpki-client