Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hAqhLGLAcqLl_lDZLudEIkB_MIo.roa
File:                     hAqhLGLAcqLl_lDZLudEIkB_MIo.roa (raw, json)
Hash identifier:          4WQSyREi3HZmyFH0hmW1MJH7N9Rkyz7YX6HvWJ5qDdQ=
Subject key identifier:   84:0A:A1:2C:62:C0:72:A2:E5:FE:50:D9:2E:E7:44:22:40:7F:30:8A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01E7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hAqhLGLAcqLl_lDZLudEIkB_MIo.roa
Signing time:             Tue 31 Mar 2026 07:54:21 +0000
ROA not before:           Tue 31 Mar 2026 07:54:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.184.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=840AA12C62C072A2E5FE50D92EE74422407F308A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:7f:8e:d5:dc:98:e4:47:5d:1c:2f:ee:c2:
                    b9:98:04:e5:aa:aa:6c:6f:d4:e8:46:c1:ec:fb:12:
                    18:d3:7d:40:ec:4e:b1:7c:84:47:88:d4:94:f7:38:
                    3b:d6:30:7b:c4:af:ef:dc:9b:68:46:e3:82:4f:b0:
                    df:17:61:04:8b:fd:98:29:36:ce:c1:72:e4:5b:bd:
                    f2:71:da:bd:5f:6a:a5:3d:6d:13:f0:4a:5f:5e:75:
                    15:d4:86:d3:c7:f5:8c:c1:c4:9f:f6:9f:02:32:65:
                    2f:6e:fb:28:67:f8:22:68:29:61:74:fc:9e:70:69:
                    d1:9a:88:b4:b4:82:6f:d7:2b:b7:38:3d:08:45:5f:
                    b1:56:c5:92:b7:67:1e:74:59:91:87:8a:fa:46:86:
                    82:e9:b4:4b:26:6f:e7:94:14:4f:4f:96:75:f5:fd:
                    99:ef:bf:45:34:33:1c:e2:2d:e6:33:67:75:5b:5d:
                    f1:4d:99:49:aa:c8:59:63:4a:59:cb:d6:3d:92:b7:
                    8d:7d:e9:8e:cc:20:6a:14:37:df:c7:6d:fa:0a:be:
                    fe:af:a8:8e:bc:57:ef:fb:19:f2:b4:69:e9:1e:71:
                    64:93:3a:ae:bf:cc:8f:a1:23:fd:23:e6:00:a1:b9:
                    ce:01:dd:0b:e3:52:1d:1f:70:c8:71:df:76:98:bb:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:A1:2C:62:C0:72:A2:E5:FE:50:D9:2E:E7:44:22:40:7F:30:8A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hAqhLGLAcqLl_lDZLudEIkB_MIo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:37:c5:75:66:ce:24:28:89:c5:64:fe:07:12:86:3e:ae:
         77:d2:6c:f6:2f:47:08:55:90:b6:a4:5d:2d:ac:61:af:08:8d:
         55:5e:71:39:12:07:75:6d:a5:33:7c:dd:d0:cc:e7:c7:f4:d0:
         6d:b0:12:8d:94:54:0e:79:5e:78:e7:a2:14:a9:54:2c:4d:ef:
         86:48:5a:14:d9:27:da:c3:f5:eb:60:a1:80:ec:ea:b9:fa:cf:
         29:55:d7:45:0b:8f:44:8f:f3:6c:60:8e:7a:34:97:ed:91:28:
         7e:4f:2a:b8:dd:1f:9e:ad:54:1f:5d:3a:96:5c:56:e6:b0:89:
         6a:ee:a6:68:91:4e:46:07:38:43:cf:2d:54:e5:01:b6:a7:2c:
         b7:bd:05:b7:ac:9c:1d:3e:14:b3:83:6c:84:32:45:93:cf:bb:
         55:50:0f:5b:fd:b6:16:44:2e:00:5f:96:35:bb:24:35:81:f5:
         87:30:15:45:99:10:0e:63:8f:8c:81:60:d3:5f:60:99:00:a9:
         c5:0f:03:ca:4d:63:eb:80:75:b8:51:70:6e:a5:e1:fd:ad:00:
         c2:c7:dd:06:89:6f:32:30:62:2b:21:2e:1f:67:54:83:bd:9f:
         39:4a:bb:1d:e6:28:aa:cc:ed:59:40:3c:d6:5f:cc:7d:ad:3a:
         01:2b:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:26 2026 by rpki-client