Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gqsr0Y3SZRwgHFbuCC9O402ibvY.roa
File:                     gqsr0Y3SZRwgHFbuCC9O402ibvY.roa (raw, json)
Hash identifier:          KEQFv8yjOrGDAovfY4UoIsRlOC0ZIbTRL3C9Lxp+pVs=
Subject key identifier:   82:AB:2B:D1:8D:D2:65:1C:20:1C:56:EE:08:2F:4E:E3:4D:A2:6E:F6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01A3
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gqsr0Y3SZRwgHFbuCC9O402ibvY.roa
Signing time:             Tue 31 Mar 2026 07:53:48 +0000
ROA not before:           Tue 31 Mar 2026 07:53:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.236.232.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82AB2BD18DD2651C201C56EE082F4EE34DA26EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:f9:7e:a7:6a:10:86:5c:c0:46:4b:d8:2f:
                    72:ae:80:44:79:8d:2e:be:b5:11:2d:bd:25:12:ac:
                    c6:b2:98:4f:96:06:c0:33:31:f3:77:10:7d:69:a4:
                    5e:54:b5:56:98:4e:c7:96:06:ab:68:a1:d5:7a:2e:
                    42:57:d1:ba:a2:c2:dd:3a:b0:e1:bd:3b:49:35:b1:
                    f0:df:f9:75:f4:ef:2f:29:b3:11:bc:80:09:9e:e2:
                    81:61:b0:46:7f:05:fb:10:e7:9f:20:17:61:5b:c9:
                    12:c5:42:9f:01:83:03:0f:a4:33:2e:01:06:49:57:
                    3b:33:73:bf:bf:f1:55:d0:88:fd:38:ea:0f:ca:a9:
                    b0:42:7b:d1:f9:34:57:4d:2e:7b:3d:de:6f:af:07:
                    8b:f6:8b:d3:de:31:d0:a2:b8:5f:72:d6:bc:39:6b:
                    3e:4e:d4:ba:9f:88:4b:51:b9:75:7e:86:46:28:85:
                    38:c5:76:15:a8:2a:54:47:39:c0:30:b1:50:9e:1a:
                    75:65:62:da:b5:3f:db:91:de:6d:8b:fe:a4:04:19:
                    dc:c5:08:ed:59:91:21:c1:24:08:03:b4:0e:26:4f:
                    e1:64:f0:7b:39:f1:a3:b5:31:78:dc:59:79:52:14:
                    d3:1e:13:66:dc:d7:6c:49:04:88:38:84:c3:12:fe:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:2B:D1:8D:D2:65:1C:20:1C:56:EE:08:2F:4E:E3:4D:A2:6E:F6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/gqsr0Y3SZRwgHFbuCC9O402ibvY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:a6:0b:6d:be:00:18:c1:b0:8c:ae:39:40:38:d6:ee:94:c0:
         39:9f:5f:aa:7d:81:23:f9:86:ce:93:4b:db:02:cc:9e:a0:68:
         4d:dd:97:0b:6c:01:97:31:ef:d0:ab:68:4d:f7:2c:84:4e:1d:
         93:db:66:e6:a5:75:9a:f5:6a:ea:4c:f2:67:4d:f0:1e:5e:33:
         38:17:d8:5a:2a:7d:63:32:9a:da:d0:a3:38:db:06:4d:82:70:
         5b:c8:0f:76:d8:ab:5f:e0:12:bc:04:a4:2c:b4:3b:39:da:74:
         52:d1:98:9c:15:ed:a9:bb:a7:76:ed:a8:b6:e4:f1:de:94:cc:
         fe:54:b5:87:f3:c9:21:ab:d9:98:9f:ba:be:6e:34:f8:ab:fc:
         22:7f:fe:21:18:74:22:04:c7:09:a3:98:e4:53:cb:a1:1a:4e:
         6b:b1:c1:ca:8c:cc:c4:b9:c5:97:e6:6b:da:3c:6a:01:d3:c5:
         00:8d:a6:21:d1:7e:4c:3e:dd:d2:b1:97:fa:78:24:41:87:c9:
         eb:10:bb:f0:04:ef:34:9c:da:00:0f:66:46:52:26:18:15:0f:
         ff:ca:4c:61:56:c7:bf:6f:ef:c7:6e:b2:7e:e7:37:32:20:14:
         3d:06:df:34:1f:f3:d9:86:3b:37:08:c3:8e:57:28:24:4d:f3:
         8e:97:d9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:30 2026 by rpki-client