Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_CEeRaDvx2HA0K8IRATR-9Oy98w.roa
File:                     _CEeRaDvx2HA0K8IRATR-9Oy98w.roa (raw, json)
Hash identifier:          eVMq+m5QIMF2P28HNVaiED0MbnPL1Li9HBRp4RfANdI=
Subject key identifier:   FC:21:1E:45:A0:EF:C7:61:C0:D0:AF:08:44:04:D1:FB:D3:B2:F7:CC
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01BF
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_CEeRaDvx2HA0K8IRATR-9Oy98w.roa
Signing time:             Tue 31 Mar 2026 07:54:01 +0000
ROA not before:           Tue 31 Mar 2026 07:54:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        211.120.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC211E45A0EFC761C0D0AF084404D1FBD3B2F7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:d4:e5:12:a8:89:83:46:26:9a:e1:95:7f:
                    5f:6c:f8:4e:bb:e7:04:82:d0:f1:1a:16:6b:4d:af:
                    77:66:23:ab:75:12:4a:56:e4:f2:64:7d:88:52:24:
                    96:ed:6b:ce:30:9c:c4:39:dc:25:a1:31:3d:f0:f5:
                    36:98:15:12:06:3a:19:a5:8f:4c:e9:ee:73:dd:f9:
                    81:20:bc:4d:4e:2e:ed:29:0f:e6:4b:01:36:13:dd:
                    37:ff:90:90:ae:50:c0:71:a6:18:d3:32:1b:ca:68:
                    f6:6a:21:2d:2a:8a:56:b4:9b:01:12:b7:9e:87:1b:
                    99:d1:c1:5a:87:94:9d:0f:03:3d:85:62:0a:8b:55:
                    1b:56:23:15:3b:39:18:de:c3:d1:a3:14:99:4c:74:
                    15:ab:12:79:af:d2:f6:09:7e:da:87:90:96:7e:a5:
                    64:f4:ca:7e:d9:bb:cd:b1:0f:6b:3a:27:5a:02:08:
                    1c:ce:b2:d8:0e:60:9a:9b:21:99:22:00:64:6f:d7:
                    19:8f:c7:6e:c3:f5:69:f3:42:42:00:18:01:19:66:
                    e7:cf:1b:c9:67:42:23:9d:96:ca:28:1c:82:04:4d:
                    91:41:e5:e2:79:8f:94:1e:bb:27:e4:b6:6c:15:89:
                    46:28:d3:e9:52:c3:45:1b:a6:f9:d4:13:8b:f4:8f:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:21:1E:45:A0:EF:C7:61:C0:D0:AF:08:44:04:D1:FB:D3:B2:F7:CC
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_CEeRaDvx2HA0K8IRATR-9Oy98w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:4d:a4:1b:37:95:11:c9:0a:d0:4b:1f:fc:a9:79:cf:9c:e2:
         7f:ab:d1:5c:b1:c8:42:93:3a:80:ac:15:e8:89:57:92:59:5f:
         7e:26:7d:e5:5a:81:e9:9d:fe:f2:13:70:1e:c5:8b:7b:65:65:
         d5:d9:44:cd:ad:f4:a4:2f:ce:82:21:58:9a:e8:42:1f:b5:7e:
         6b:52:fd:d6:30:9c:bc:95:be:00:4c:c4:f6:36:d8:1a:12:62:
         1a:e7:ea:46:70:dc:11:21:70:13:28:06:0d:ce:e3:01:00:cf:
         43:15:ba:42:61:a0:67:bf:b9:4e:48:78:7a:b5:a1:f3:31:17:
         89:ad:ea:4f:90:d7:ff:50:b7:ff:64:16:ce:1f:8f:13:74:8e:
         83:b7:a0:99:71:1a:05:24:b9:34:ee:3c:bb:ca:d7:f4:80:74:
         f2:80:3d:71:de:1e:84:40:87:1e:a1:3f:1a:7a:82:eb:ce:0e:
         d9:25:b8:c4:c8:04:ea:59:fb:92:8b:57:34:13:93:74:98:48:
         76:0d:da:78:0e:ff:b7:c1:6c:56:bb:a4:a7:38:cf:5a:9e:c7:
         3c:00:9d:0a:1f:2d:0a:e1:77:61:80:c4:81:d4:69:f0:95:52:
         f1:f3:5f:35:4e:ca:f7:c2:9d:1e:02:53:fc:c0:e7:fe:21:04:
         49:7b:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:25 2026 by rpki-client