Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WJgEI0suAWn5XbViKjflPVBW_PM.roa
File:                     WJgEI0suAWn5XbViKjflPVBW_PM.roa (raw, json)
Hash identifier:          9/YaM4Y9/AqWQqKzn6yi0Xhr9O/neraW0wMo6hGAZBc=
Subject key identifier:   58:98:04:23:4B:2E:01:69:F9:5D:B5:62:2A:37:E5:3D:50:56:FC:F3
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01A1
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WJgEI0suAWn5XbViKjflPVBW_PM.roa
Signing time:             Tue 31 Mar 2026 07:53:48 +0000
ROA not before:           Tue 31 Mar 2026 07:53:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.235.28.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=589804234B2E0169F95DB5622A37E53D5056FCF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:b3:ad:a6:75:34:d6:61:3e:98:43:55:db:
                    79:f9:8d:1a:22:7c:ce:22:a4:ea:bd:31:23:fd:93:
                    46:1a:43:3a:89:e1:cc:e0:52:49:b0:3e:2c:5a:0b:
                    8c:d3:68:79:56:06:25:7f:2f:d4:64:5c:58:e2:ef:
                    a2:db:93:df:02:6e:b4:da:82:2f:fa:ae:67:f5:48:
                    0c:03:01:e4:33:b9:66:54:46:e1:21:1c:b4:f8:22:
                    c5:89:0b:cc:b9:ba:7f:9c:32:e8:05:b6:ec:5f:3f:
                    0c:ef:54:f3:fb:a0:bb:60:0e:1b:a3:37:69:47:5f:
                    18:b4:5e:65:09:32:aa:41:8e:b6:53:f7:cd:b6:24:
                    26:0c:f9:58:da:67:96:83:61:79:c0:91:7c:56:ec:
                    37:9b:f8:3c:a4:25:ef:13:43:d0:45:92:0a:85:a3:
                    83:16:33:a9:e3:9d:4f:99:e1:91:01:4e:5d:06:bc:
                    c5:8a:fb:fb:03:32:f2:cf:6e:b7:1d:30:62:85:33:
                    52:df:61:7c:8c:fa:ee:bc:a3:b6:c9:3a:24:0e:d6:
                    75:df:9f:77:38:f7:9c:ac:bc:c0:89:19:56:5c:f1:
                    d0:59:0f:67:6c:1d:d9:7e:c3:33:73:fd:e3:d8:f7:
                    2c:f7:53:c1:ea:15:2d:3f:ee:6c:c4:fc:4f:50:c8:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:98:04:23:4B:2E:01:69:F9:5D:B5:62:2A:37:E5:3D:50:56:FC:F3
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WJgEI0suAWn5XbViKjflPVBW_PM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:6c:4b:7b:02:26:21:ed:45:6a:52:ec:f9:4a:5b:68:c7:0d:
         2d:84:31:48:33:c2:48:22:08:8d:a6:ce:2d:34:ac:51:79:22:
         a4:9d:95:3b:68:aa:f6:2a:b1:94:bf:6b:56:44:a1:9c:51:93:
         a3:83:0d:0e:9c:39:6f:d2:b3:2b:48:8d:e5:78:b5:12:84:ca:
         45:95:0c:62:a9:23:3d:fc:a4:cf:64:83:4b:c1:13:62:7a:9b:
         d7:88:7e:0b:b2:fa:53:73:b4:f7:46:d6:35:72:82:73:a0:f3:
         7c:ee:d6:b4:fc:b4:d0:43:43:76:d3:2f:d1:28:00:4f:cb:33:
         70:bf:20:69:b6:53:c8:fd:34:62:d0:1d:37:4f:68:cc:40:9a:
         79:3c:49:a9:57:47:10:56:33:2d:a2:b8:1f:c5:e5:a3:1c:27:
         50:e1:9a:bc:81:d7:37:cc:d3:06:c6:d1:6a:c0:63:08:f8:49:
         f2:6d:7c:f5:9c:5e:e1:66:fd:bf:35:2f:dd:66:00:b7:d3:ec:
         ec:a6:09:21:6d:99:89:4b:95:d0:5d:84:3e:6c:37:c6:6f:fb:
         02:1a:97:80:e1:55:52:ec:26:79:87:fa:b5:a1:86:d6:e5:0d:
         a5:f3:d4:aa:a0:b0:87:c3:89:a9:b4:1f:49:2e:f1:91:bb:d3:
         66:26:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:52 2026 by rpki-client