Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aRj3BspEWXphyFHn0hRdWhPI5ns.roa
File:                     aRj3BspEWXphyFHn0hRdWhPI5ns.roa (raw, json)
Hash identifier:          hV788meGtm/USuOwo2x3h5OcuVG6DBSjK6E2s5m6KI0=
Subject key identifier:   69:18:F7:06:CA:44:59:7A:61:C8:51:E7:D2:14:5D:5A:13:C8:E6:7B
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01E0
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aRj3BspEWXphyFHn0hRdWhPI5ns.roa
Signing time:             Tue 31 Mar 2026 07:54:18 +0000
ROA not before:           Tue 31 Mar 2026 07:54:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.239.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6918F706CA44597A61C851E7D2145D5A13C8E67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:2e:48:8e:12:30:40:6a:0b:77:85:43:8c:
                    3a:18:53:35:c1:45:c1:45:94:fb:1d:cb:26:6c:64:
                    8c:76:1d:c2:b7:a3:56:75:7c:02:5d:09:2b:1b:ea:
                    e1:9d:a1:74:af:63:87:37:11:d1:6c:39:9f:42:6e:
                    b6:3d:1c:9f:ba:4a:04:8d:75:ea:dd:de:55:67:fe:
                    12:99:3c:c4:16:2b:68:83:41:08:79:fb:72:af:37:
                    bb:c8:f7:44:1c:3c:3b:7e:82:92:1c:6d:5b:96:76:
                    46:54:d7:b1:37:b4:c4:5a:ea:20:14:bb:16:bb:51:
                    3a:d9:bb:15:b7:04:ce:ab:ab:5f:02:be:84:92:d0:
                    0b:09:4b:71:69:70:16:7e:2a:39:39:0e:c2:e9:49:
                    2a:ea:88:c7:7b:4d:85:b3:5b:f5:08:de:05:86:eb:
                    be:e6:46:54:6e:35:b1:3b:a9:1e:a7:9a:4d:d6:54:
                    bd:c1:b8:ec:10:3c:f0:66:39:21:bb:b3:b6:d3:13:
                    a2:92:5b:e3:c3:e6:d3:b1:1c:26:ab:84:96:78:cc:
                    b0:76:7c:ea:b8:96:8d:8a:3c:53:4c:89:65:48:3a:
                    4b:33:b3:73:44:b2:6a:96:0f:12:09:0e:ed:f8:0a:
                    3b:41:43:c0:41:82:f7:54:26:aa:2a:9b:a1:1b:98:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:18:F7:06:CA:44:59:7A:61:C8:51:E7:D2:14:5D:5A:13:C8:E6:7B
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aRj3BspEWXphyFHn0hRdWhPI5ns.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:45:67:4b:fc:15:67:6d:c0:1f:b4:f0:71:3b:e6:a5:04:
         32:19:4c:0a:0a:a6:ce:0e:e7:af:2f:ed:5d:a7:84:48:2b:c4:
         84:be:40:bd:97:20:01:01:8e:c0:28:e9:ff:5e:c1:a5:57:42:
         64:74:96:76:66:c1:64:41:81:6e:a0:b9:88:84:c4:dd:19:84:
         e9:14:9d:d0:74:fb:f0:b6:68:6e:09:20:97:f6:d9:5f:e9:fa:
         9d:67:4e:e7:73:31:e6:0c:b3:5d:52:4d:17:7f:74:05:2b:7e:
         0c:f3:a9:2a:73:f2:14:79:97:5b:b6:81:49:fd:e9:78:c8:4d:
         9f:fb:2a:55:c7:20:fb:30:b2:34:c6:82:25:c4:2b:2e:f4:4b:
         b8:d5:ff:b9:0e:a1:ba:be:0b:2f:d2:20:33:27:70:91:0c:42:
         cc:4e:cf:f2:bd:50:ea:11:60:a9:f2:d4:61:af:95:4a:08:8f:
         bc:a8:db:d7:ec:6c:05:fd:7b:73:27:d4:84:ab:83:d9:f8:93:
         a8:39:e3:94:c3:d4:9b:92:15:ce:c5:c1:d7:61:98:fa:7d:e2:
         49:39:f1:ad:12:11:1e:a0:e8:39:c0:45:b0:6c:0f:51:91:cf:
         7b:54:f2:72:3e:89:b6:94:fd:bd:46:69:10:36:3e:82:06:0f:
         9b:b2:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:52 2026 by rpki-client