Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hSffjhRlfddmt34vbkEvV6LUP_w.roa
File:                     hSffjhRlfddmt34vbkEvV6LUP_w.roa (raw, json)
Hash identifier:          BPUILVb/XPaLYouRnV4n+tqD9W8DSC2xSxRji9Rtf34=
Subject key identifier:   85:27:DF:8E:14:65:7D:D7:66:B7:7E:2F:6E:41:2F:57:A2:D4:3F:FC
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0174
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hSffjhRlfddmt34vbkEvV6LUP_w.roa
Signing time:             Tue 31 Mar 2026 07:53:27 +0000
ROA not before:           Tue 31 Mar 2026 07:53:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.140.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8527DF8E14657DD766B77E2F6E412F57A2D43FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:be:09:39:c8:ab:f1:91:9e:1e:f2:d3:f5:
                    b5:0a:9d:6c:73:19:cd:70:67:d8:20:d5:ea:2f:7f:
                    ec:64:b9:07:57:14:4d:d0:01:83:b8:f7:69:67:64:
                    b3:02:17:fd:90:25:d0:de:60:d4:ee:13:fc:a2:0c:
                    76:c6:7b:9b:b9:5a:b3:c5:47:45:4e:91:51:57:c9:
                    9a:e3:a1:58:bf:6a:98:47:37:53:c0:22:c8:69:1e:
                    6d:94:04:25:fa:b0:f0:d9:31:e3:67:0f:fd:e3:1c:
                    31:74:5f:ec:57:2d:99:cf:e3:ee:ce:6e:12:5b:8a:
                    d7:e7:1c:92:a4:f9:73:5f:10:77:20:a1:68:b3:bc:
                    74:e5:9c:fe:b0:f9:0d:f5:18:78:e1:d2:83:4c:48:
                    0c:07:19:ab:7c:e2:9f:bd:b0:63:fc:8b:a6:b3:74:
                    d9:c0:7c:9b:43:10:a3:6b:57:ff:04:2c:71:7f:87:
                    b8:8d:02:60:1d:da:ea:2c:2e:6c:ac:91:5e:b0:7e:
                    a6:54:46:b4:7c:d0:f0:f1:a4:c1:8f:18:82:50:02:
                    18:26:cd:b1:04:be:d2:ea:ef:62:cf:e0:d1:3a:11:
                    16:26:24:af:b7:52:70:ad:3e:6e:08:b2:ea:28:42:
                    b1:52:9b:5b:8d:8d:91:e9:93:19:3a:de:3d:ee:46:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:DF:8E:14:65:7D:D7:66:B7:7E:2F:6E:41:2F:57:A2:D4:3F:FC
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hSffjhRlfddmt34vbkEvV6LUP_w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:48:1e:a5:e8:83:5e:d2:30:80:1c:8c:d7:51:0a:6a:60:
         cd:25:13:5c:df:2f:bd:77:a9:20:d1:33:0b:54:24:a0:cb:12:
         a9:81:79:b5:62:0f:43:be:93:ba:ad:62:a8:67:76:30:53:64:
         91:08:df:e3:e7:84:c8:77:23:f3:16:ad:fc:ab:b2:e2:17:c7:
         23:f6:ef:e7:13:a6:57:d7:7b:31:09:e2:b2:66:13:6c:bf:df:
         7f:f8:44:44:53:4c:dd:39:4d:c0:13:fb:a0:80:1b:94:eb:45:
         63:20:92:9b:6f:6d:1d:e2:90:96:b7:aa:81:2d:95:ca:f3:e0:
         b1:af:be:c0:b5:6f:37:84:09:46:b3:4e:29:3e:7c:d3:07:26:
         be:0e:c3:05:6d:3f:db:c6:51:1a:38:32:de:6d:79:ba:a1:09:
         e8:ac:1d:e6:6b:c3:14:1b:a4:f2:ab:50:09:a1:50:ea:a6:76:
         a0:b6:4d:7b:23:54:cb:64:f7:65:74:29:41:68:92:7b:c5:e1:
         24:9e:ff:15:d8:53:b2:37:8b:63:e5:71:36:f6:f9:c7:dc:9a:
         40:f9:30:de:99:a5:3f:92:bc:a8:06:eb:a1:40:aa:01:34:1f:
         f9:37:60:57:79:2b:92:68:b7:9c:b9:72:7d:10:3c:46:44:4c:
         cc:8d:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:20 2026 by rpki-client