Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YV1lQQJ0_RZ0TPaCuSaZKcbLQGg.roa
File:                     YV1lQQJ0_RZ0TPaCuSaZKcbLQGg.roa (raw, json)
Hash identifier:          swNl7OMlt2vQgw0viPeSO/EW1zup4Xrn8uMSJcNFi0U=
Subject key identifier:   61:5D:65:41:02:74:FD:16:74:4C:F6:82:B9:26:99:29:C6:CB:40:68
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01E1
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YV1lQQJ0_RZ0TPaCuSaZKcbLQGg.roa
Signing time:             Tue 31 Mar 2026 07:54:19 +0000
ROA not before:           Tue 31 Mar 2026 07:54:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        211.10.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=615D65410274FD16744CF682B9269929C6CB4068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:3b:79:d6:98:3b:f2:42:4c:80:0d:8f:59:
                    40:eb:ac:c2:f0:7f:cc:29:6b:6b:be:03:82:93:77:
                    ad:72:f8:e9:6f:7c:3e:30:e5:40:be:cb:1e:ae:7f:
                    58:cf:d1:b4:fe:16:47:25:c9:67:f4:06:0d:9e:54:
                    5e:27:bf:ae:5b:4e:e2:b7:9e:6b:8b:0a:0e:53:48:
                    fa:ef:60:e5:4e:21:d9:dd:ac:f9:d4:ff:dd:32:69:
                    0f:09:5c:da:8f:87:b4:77:f6:23:b4:21:bd:78:69:
                    06:b2:51:19:2d:f5:b3:08:f9:32:22:a7:2b:48:56:
                    d6:d2:8a:57:af:c7:92:ed:a0:1d:98:51:ee:e9:07:
                    53:35:fe:37:e2:37:53:bc:ca:64:f8:c0:2e:5c:e9:
                    45:72:82:f6:88:82:00:fc:bc:b7:19:95:87:58:07:
                    52:f3:ff:6c:47:bb:2f:83:4e:37:1e:24:d0:7b:09:
                    e5:74:41:87:4f:c7:46:30:43:5d:f6:96:22:18:8f:
                    0b:1d:9d:f6:55:94:2f:ea:62:14:85:d4:59:f6:e4:
                    6f:b6:b9:7b:98:28:12:e7:b1:ce:3f:0d:18:09:3a:
                    de:a7:d6:e3:b7:dc:f9:e5:4c:4c:0f:bc:91:04:22:
                    87:67:8b:af:c5:d8:af:9b:aa:71:05:c1:ca:1a:20:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:65:41:02:74:FD:16:74:4C:F6:82:B9:26:99:29:C6:CB:40:68
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YV1lQQJ0_RZ0TPaCuSaZKcbLQGg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:47:05:6c:d9:ec:79:9b:0c:e4:5f:7d:12:fa:fe:e2:96:
         96:d4:de:8d:f1:69:e8:41:af:98:6b:70:4c:56:e5:48:fd:c2:
         7d:f1:22:be:ef:c0:60:84:4c:62:d6:bf:87:de:73:6a:4f:ee:
         cc:16:70:d7:35:47:0f:f0:bb:6a:12:41:59:57:ec:2c:60:e1:
         d8:71:88:dc:f8:2c:1e:42:93:3d:56:43:0a:ce:3f:50:3b:44:
         d0:fc:e8:48:ae:6c:8e:93:38:32:2d:5b:79:ed:bf:0d:a5:ed:
         57:38:a8:f8:7a:0c:e1:3f:0a:9d:b1:a7:ed:59:1c:02:27:80:
         bc:62:f0:b8:77:fd:91:33:6c:0d:69:1c:a0:b2:78:a9:5c:36:
         e7:84:9a:3a:2e:c4:61:9a:ec:70:c4:3a:bd:0d:41:07:4f:b2:
         b5:51:9a:bc:b9:ae:2f:56:a4:db:0b:cf:85:b9:bf:e7:8a:19:
         a2:c8:5c:04:3a:5b:86:91:16:84:da:6c:13:18:b5:fa:bb:45:
         c5:4f:e9:f0:85:28:5f:bb:f9:08:cf:96:f5:ab:e4:e6:39:1d:
         57:f5:48:36:ad:c8:01:58:df:88:70:68:11:30:4f:23:af:b7:
         c2:06:fb:c8:57:b8:74:d9:4d:17:a8:87:32:63:a1:83:22:b8:
         b0:27:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:00 2026 by rpki-client