Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/b5RQfA_z97VU0zP39B23oGyt1JI.roa
File:                     b5RQfA_z97VU0zP39B23oGyt1JI.roa (raw, json)
Hash identifier:          O6NQBhKFkia5ujXnwHWiBLwVtMJ6rX1y7hRxEFLyQp0=
Subject key identifier:   6F:94:50:7C:0F:F3:F7:B5:54:D3:33:F7:F4:1D:B7:A0:6C:AD:D4:92
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       018B
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/b5RQfA_z97VU0zP39B23oGyt1JI.roa
Signing time:             Tue 31 Mar 2026 07:53:39 +0000
ROA not before:           Tue 31 Mar 2026 07:53:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.158.206.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6F94507C0FF3F7B554D333F7F41DB7A06CADD492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:08:54:d9:cb:4a:b4:7f:46:52:f4:0f:8e:
                    47:94:dd:23:4c:f3:8f:3c:66:9b:7c:ba:ec:76:9e:
                    5e:46:b9:bd:64:01:49:7d:36:ec:d3:4f:ad:99:10:
                    00:dc:54:2f:ce:2d:f1:24:f4:9e:69:bd:07:3d:1b:
                    cc:f2:93:1e:91:78:b8:5f:f8:c1:9f:1d:c7:7e:8a:
                    12:41:7b:5c:4e:f6:09:57:8c:9e:37:47:e5:2b:ea:
                    64:6f:5e:62:1b:10:ae:e9:db:5a:24:15:88:f0:b4:
                    aa:f9:f8:0e:2a:ec:d9:0f:09:4c:7c:3a:97:35:f4:
                    59:05:f2:a9:92:94:91:4d:a2:44:59:88:e4:b0:67:
                    43:94:92:78:d0:85:c9:7e:52:e7:65:54:71:17:59:
                    78:8e:02:76:2b:36:03:3c:c1:fb:7e:29:4c:f4:0a:
                    84:35:30:fc:7f:9f:42:e2:a5:bd:ee:a6:80:1e:4a:
                    d7:23:14:89:c1:2f:4e:e5:9a:6b:8a:0a:c4:2a:25:
                    1e:6a:c1:e3:6b:12:1c:14:3b:bd:46:63:c9:28:6d:
                    59:11:49:15:d5:cd:0d:9d:1e:07:99:88:77:e9:67:
                    3d:82:76:83:01:87:3e:6a:00:84:93:3e:b8:37:79:
                    b9:db:ac:95:c6:f0:b5:92:61:fd:5c:ab:68:8a:eb:
                    9a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:50:7C:0F:F3:F7:B5:54:D3:33:F7:F4:1D:B7:A0:6C:AD:D4:92
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/b5RQfA_z97VU0zP39B23oGyt1JI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:05:68:a3:24:51:19:08:a4:dc:e9:8b:69:57:08:11:fc:48:
         ac:98:7d:24:83:ba:49:73:9a:e8:6e:81:df:9b:25:c4:61:13:
         dd:fe:55:24:aa:e4:2e:e2:44:8f:1a:36:41:4b:7a:a9:d0:42:
         d8:b3:2f:af:68:ee:9d:e3:05:5c:b8:e4:63:8b:4e:81:9e:64:
         b7:ae:8f:be:40:4e:a2:dc:72:a5:4d:9e:44:44:3a:1b:88:a5:
         f0:db:7e:a7:d0:93:c4:fe:9e:e9:b8:c0:60:67:b0:f0:4e:86:
         89:5a:18:06:8a:7b:bb:3a:b9:90:f9:0c:57:04:c4:2a:3e:fb:
         1e:08:6b:ba:3c:2b:0e:6a:6b:0d:57:96:ac:c5:ed:70:f0:92:
         33:34:1b:2e:24:66:f1:8f:4a:55:d5:ab:27:99:af:76:ba:f6:
         c2:6e:c2:6d:cb:4a:40:a5:0a:df:1d:e3:1d:39:7b:81:61:6b:
         06:c4:a7:9a:e7:40:8f:3f:0e:90:8a:e2:c3:6b:4b:a2:3b:34:
         51:b8:20:aa:5e:3f:9e:86:1f:81:7c:59:4f:6b:29:12:1a:95:
         74:fe:21:71:c9:44:b8:1d:6b:2c:32:0a:18:70:02:d8:b5:97:
         fa:68:74:06:6c:84:6e:9b:82:2a:22:50:03:80:55:2c:c1:75:
         7e:95:63:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:30 2026 by rpki-client