Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Yer-dCbVyI4FM75HnQYL921XbBM.roa
File:                     Yer-dCbVyI4FM75HnQYL921XbBM.roa (raw, json)
Hash identifier:          VH4Rd6L17xYm88GO2LR1QUVcNVrhd+KGVUf0P5gBc7U=
Subject key identifier:   61:EA:FE:74:26:D5:C8:8E:05:33:BE:47:9D:06:0B:F7:6D:57:6C:13
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0172
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Yer-dCbVyI4FM75HnQYL921XbBM.roa
Signing time:             Tue 31 Mar 2026 07:53:27 +0000
ROA not before:           Tue 31 Mar 2026 07:53:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=61EAFE7426D5C88E0533BE479D060BF76D576C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:28:43:b2:88:c6:09:2f:f2:60:4e:c7:eb:
                    a6:ea:eb:eb:03:de:08:bf:98:9a:36:85:a0:36:06:
                    29:f1:00:9b:98:dc:63:32:48:60:2e:5f:1c:20:d4:
                    01:51:1e:8c:10:d4:8c:04:5d:ea:e2:97:8e:87:2c:
                    04:ed:76:f4:ed:2e:df:dd:84:07:39:fe:4d:9d:3b:
                    3a:5a:10:95:a5:10:a3:ad:84:e0:40:6c:d2:d0:82:
                    52:81:87:01:82:ab:cd:19:2d:bb:d3:a4:e6:c9:29:
                    e0:88:dc:a8:31:d3:fd:56:50:1b:c7:51:10:04:01:
                    37:1c:59:49:d0:f8:63:3a:d6:20:a0:5f:46:89:7c:
                    49:0c:db:b7:1a:ae:ee:c0:03:e1:17:fc:f1:f0:78:
                    16:3b:95:a2:d0:5a:1a:e8:f4:19:54:4f:8c:f2:eb:
                    ff:45:bb:84:40:c7:a0:29:e8:1f:48:a9:c2:a6:7d:
                    d2:eb:cf:66:5b:56:f8:03:38:8c:71:c9:2b:82:52:
                    8d:dc:07:ee:4d:f6:a9:43:e9:4b:61:00:6b:4b:1a:
                    50:5d:cb:4a:c6:12:17:79:34:b3:7f:9b:c9:78:26:
                    47:8c:45:f1:53:b4:45:1e:a0:f1:11:3a:f5:96:8c:
                    a6:0b:d0:c5:be:50:2f:2e:c6:9a:4f:16:e0:10:40:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:FE:74:26:D5:C8:8E:05:33:BE:47:9D:06:0B:F7:6D:57:6C:13
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Yer-dCbVyI4FM75HnQYL921XbBM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:96:4c:72:23:b0:69:1d:cb:55:3f:cb:ff:0e:07:58:ce:
         83:65:a1:d7:76:d3:31:91:1f:c9:18:15:9c:ee:82:1a:3f:c1:
         c2:d8:04:e9:38:09:59:2a:59:7c:a9:a9:19:da:25:51:40:98:
         d3:93:b0:4c:29:78:5b:38:ba:c8:de:1d:80:06:49:05:22:3e:
         23:50:70:e3:ab:53:4e:7f:82:88:29:45:0e:ca:01:2b:52:f3:
         56:ff:cb:24:31:37:c3:e5:a7:a0:ec:0e:3a:96:c3:5c:a9:e2:
         1b:0d:f9:be:fc:62:e3:dc:14:a9:6d:48:e5:cd:39:88:c6:f2:
         47:15:99:b7:a2:7a:bf:25:6a:c3:13:5f:29:94:a1:77:d8:4f:
         27:53:f0:1b:17:43:d7:03:7a:85:27:5b:12:51:3c:76:1e:d7:
         6b:0c:ec:8e:a0:c4:df:cd:9f:bb:e1:7b:34:d6:bc:bc:45:72:
         b8:ec:b7:be:ff:1e:64:b9:69:10:40:99:6a:12:41:90:80:a3:
         06:4a:6c:4f:6e:e2:72:84:90:1d:0e:67:2d:d8:9c:4f:d1:60:
         25:a2:2d:7f:4b:4c:21:1f:a5:ce:16:fe:fb:59:a6:53:19:c1:
         d4:5a:8e:58:af:22:5d:2d:74:42:68:75:ed:fb:62:44:a5:62:
         62:da:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:41 2026 by rpki-client