Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c1zjFUMMabdUiAk5jdeLTMaeArs.roa
File:                     c1zjFUMMabdUiAk5jdeLTMaeArs.roa (raw, json)
Hash identifier:          V2XIPt3Q6GDegmjaLNNaZPJdor0q1qrbqaMHCVFoXN8=
Subject key identifier:   73:5C:E3:15:43:0C:69:B7:54:88:09:39:8D:D7:8B:4C:C6:9E:02:BB
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       018D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c1zjFUMMabdUiAk5jdeLTMaeArs.roa
Signing time:             Tue 31 Mar 2026 07:53:39 +0000
ROA not before:           Tue 31 Mar 2026 07:53:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.158.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=735CE315430C69B7548809398DD78B4CC69E02BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:e2:48:37:ef:19:b4:35:f6:02:75:b0:9d:
                    9d:67:3d:4a:58:ec:4c:15:37:68:68:a5:ab:1d:51:
                    ee:44:7d:5f:c1:fc:46:e0:e5:6e:c7:69:5d:01:51:
                    00:88:bf:dc:8c:b4:cc:37:ae:26:c1:85:26:ab:1c:
                    cc:37:d1:10:94:a8:e6:b4:a8:5f:78:ff:ad:16:b2:
                    37:2c:d2:7b:bc:6b:4b:5f:f3:f1:36:d7:18:75:79:
                    ea:38:88:c1:08:13:de:8b:c9:38:2e:8b:c0:80:39:
                    a9:17:55:41:6e:1a:ab:0c:10:5a:e3:e1:86:ba:4b:
                    7b:79:8e:5e:f7:b3:64:10:1f:32:e7:06:84:cf:92:
                    92:13:31:db:a0:df:55:21:f8:00:37:d7:a3:43:a9:
                    ad:91:59:78:38:23:86:aa:9e:4d:5d:ae:1e:91:5f:
                    60:26:cb:d2:6e:5c:93:c9:83:06:3a:58:58:57:e3:
                    5f:89:26:c2:e1:14:39:9d:1b:87:e7:11:36:3e:30:
                    b2:ea:47:08:b4:ad:38:ff:6b:0a:9c:53:2a:59:7a:
                    c1:f5:63:b0:c4:f0:83:b9:a3:ae:de:73:11:1e:d2:
                    93:c5:48:a2:b3:c4:ff:24:76:9c:13:07:1f:cd:61:
                    7c:28:f7:ac:3e:fa:b2:b7:62:e0:c5:f1:d1:1c:35:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:E3:15:43:0C:69:B7:54:88:09:39:8D:D7:8B:4C:C6:9E:02:BB
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c1zjFUMMabdUiAk5jdeLTMaeArs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:93:fb:50:50:2f:98:d8:f0:3e:70:44:38:56:76:ce:da:08:
         6e:0c:a7:0b:be:a6:31:21:62:f5:53:54:33:cd:1d:a6:53:70:
         19:3d:b2:99:8b:98:48:11:ea:68:11:73:ef:26:2e:d2:17:00:
         06:a7:12:77:f6:f1:c7:5e:02:e4:67:c0:59:6c:16:5b:aa:3d:
         48:99:23:18:6c:ea:6d:97:99:d9:b6:2b:86:1b:aa:c1:a4:00:
         88:5c:68:42:31:69:1c:46:06:c3:e3:30:f4:12:b4:c2:44:58:
         48:d2:6a:a4:a5:73:f8:26:91:0b:be:7c:9a:d7:c6:73:b9:8f:
         2d:0e:0d:99:ac:75:cd:86:81:05:55:25:1e:52:86:5f:e8:5f:
         a7:01:11:6f:18:8f:42:b0:f8:6d:17:eb:84:7a:fe:ef:14:5f:
         85:eb:6e:9b:f7:09:b1:b3:0c:d3:c0:6c:d0:5d:4c:70:4d:db:
         9e:e8:2a:24:b3:d4:35:60:db:99:08:5f:a2:01:68:0b:e9:0a:
         f4:68:5f:2e:32:8a:82:94:14:cd:ff:f5:5c:ad:a5:1f:a5:8c:
         e0:37:67:fe:97:8d:c8:aa:d2:93:c3:27:a2:d1:2d:1b:8e:4e:
         eb:54:d9:9d:66:42:6e:f8:ce:0b:61:c4:96:83:d4:5f:b0:81:
         83:b3:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:59 2026 by rpki-client