Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gdrizazYO_ttmAepXIXbL8Pw0M8.roa
File:                     gdrizazYO_ttmAepXIXbL8Pw0M8.roa (raw, json)
Hash identifier:          y1JVgIj7i2PbOZ2j672cIdEBAydA06I7isdpXykbCMI=
Subject key identifier:   81:DA:E2:CD:AC:D8:3B:FB:6D:98:07:A9:5C:85:DB:2F:C3:F0:D0:CF
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       015C
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gdrizazYO_ttmAepXIXbL8Pw0M8.roa
Signing time:             Tue 31 Mar 2026 07:53:15 +0000
ROA not before:           Tue 31 Mar 2026 07:53:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.230.58.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=81DAE2CDACD83BFB6D9807A95C85DB2FC3F0D0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:ba:69:81:74:ac:38:b0:20:89:bb:05:68:
                    7c:ec:fc:5b:45:d4:8d:b4:e5:d5:a2:83:b3:a8:a3:
                    40:b3:25:ad:4f:fd:c8:26:e6:be:58:4d:69:00:fc:
                    20:cb:1d:b4:d2:40:60:ac:77:1a:85:48:18:c7:80:
                    ed:ce:d2:25:7e:29:bf:6b:f3:e3:ec:fb:f8:9a:0c:
                    a3:92:f4:a6:54:0c:d4:c8:fd:88:7f:d5:87:6f:83:
                    c2:d9:eb:c4:c6:73:fc:4d:51:41:5a:47:ec:9f:a3:
                    31:ce:ec:44:48:97:b5:3e:34:76:d1:10:d1:44:43:
                    d6:bb:71:25:1b:5c:f7:70:9f:53:43:e9:f8:01:0e:
                    dd:0a:fd:c4:1c:8b:7a:d7:81:fb:08:e6:16:e8:48:
                    69:ed:88:24:9c:2b:30:53:4c:3e:c9:3c:5a:fe:18:
                    d7:5a:32:61:10:5c:f0:db:12:22:08:dd:e4:7d:6e:
                    ce:d3:c1:19:c6:88:dc:29:16:1e:1a:d0:50:97:31:
                    bf:2d:7e:e0:f0:71:ad:f2:80:bc:55:33:8a:54:42:
                    d8:09:10:34:98:69:02:54:ff:5f:f1:7f:a8:ff:01:
                    66:26:fc:d8:ee:a5:70:51:d5:8c:de:8b:55:53:90:
                    36:5f:bb:dc:25:12:eb:63:f1:5b:28:63:2b:72:5e:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DA:E2:CD:AC:D8:3B:FB:6D:98:07:A9:5C:85:DB:2F:C3:F0:D0:CF
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gdrizazYO_ttmAepXIXbL8Pw0M8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:50:63:86:e9:22:af:66:52:44:33:da:88:0a:71:41:d2:
         41:eb:5d:ed:08:6a:5c:c8:3a:65:4f:51:67:3a:72:db:8c:14:
         d8:3b:0a:14:3f:ec:b8:5f:ef:fa:3d:7a:21:ad:9a:2c:99:8d:
         1f:29:97:b0:95:de:b0:4a:0e:fb:b4:7b:78:51:70:5c:ba:fd:
         82:35:f9:42:cb:ac:bc:f3:b7:93:f7:09:b2:7c:88:6b:bf:df:
         1c:51:d6:c0:2c:19:6f:f1:23:72:aa:45:91:8c:b3:de:ce:c3:
         26:db:3d:64:25:80:63:22:ed:9d:20:c8:ca:a0:6b:dc:bd:9e:
         ab:0b:4d:6a:72:ab:33:6d:72:a4:5a:c8:53:a4:92:f4:96:e2:
         8b:59:68:67:a0:8f:bf:fa:5f:1f:60:48:08:77:7b:e7:58:57:
         77:d0:55:45:b7:89:95:df:e0:d1:4b:aa:20:50:62:38:bf:73:
         22:42:78:23:4c:ed:40:2c:b6:3e:02:b9:1c:b1:e4:b9:6f:f0:
         50:a3:c7:d3:ec:b2:89:6b:78:fd:71:8c:e2:46:f2:57:9a:62:
         60:52:65:b8:d5:b1:64:d4:eb:9a:da:d9:2e:76:63:67:f3:b0:
         ef:68:9c:c8:77:39:f2:7b:81:94:3e:fc:ab:82:ff:36:31:17:
         94:7e:a1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:20 2026 by rpki-client