Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hluPnhQvrqRjppVOMMKBNUwhU8E.roa
File:                     hluPnhQvrqRjppVOMMKBNUwhU8E.roa (raw, json)
Hash identifier:          wsG0x2a3B5SofjgGkAuX6BxBD4Bsu0kJKofjkyUQRUY=
Subject key identifier:   86:5B:8F:9E:14:2F:AE:A4:63:A6:95:4E:30:C2:81:35:4C:21:53:C1
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01AD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hluPnhQvrqRjppVOMMKBNUwhU8E.roa
Signing time:             Tue 31 Mar 2026 07:53:53 +0000
ROA not before:           Tue 31 Mar 2026 07:53:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.252.100.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=865B8F9E142FAEA463A6954E30C281354C2153C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:ae:48:29:dc:89:69:1c:e5:b1:45:ae:b6:
                    ee:cc:d8:f9:bc:55:79:a7:0a:fb:1a:51:63:c0:5e:
                    8e:1e:ba:e9:91:e9:dd:b4:e1:d7:05:e5:a6:2a:36:
                    0f:65:0c:44:36:db:33:ad:cb:c9:7d:a3:9a:00:98:
                    73:c5:fc:30:97:0f:32:73:ce:e1:f1:cb:7d:07:72:
                    ca:34:bd:8e:9f:e4:a4:5d:f3:d6:8b:aa:8e:83:15:
                    ab:19:4a:38:1c:f4:91:63:25:f4:d4:bb:e0:a0:2f:
                    b3:1a:a4:4b:db:44:17:d3:52:ca:ff:00:98:64:dc:
                    4b:03:c4:6f:51:b8:e5:f9:cc:00:a7:1e:08:44:a4:
                    64:82:0f:f6:52:fc:99:00:70:e3:0a:3f:7e:7c:c7:
                    88:9f:d0:7d:fd:c0:58:e4:19:75:c4:a7:8c:4a:6f:
                    f1:27:18:0d:81:3f:ea:33:46:a2:23:e2:8e:04:e9:
                    c4:25:3d:2d:70:c9:f8:de:83:9e:36:7b:1d:3d:d9:
                    c3:dc:a3:1d:1b:9c:72:36:85:54:d2:6b:7d:9e:22:
                    56:c3:cc:b2:95:39:3d:9c:2f:1a:3a:df:05:2e:4c:
                    82:58:fe:62:90:2b:32:56:9e:77:8d:93:6f:98:6d:
                    a8:c8:83:25:c4:06:18:41:1f:9f:2d:aa:c4:d3:34:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5B:8F:9E:14:2F:AE:A4:63:A6:95:4E:30:C2:81:35:4C:21:53:C1
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hluPnhQvrqRjppVOMMKBNUwhU8E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:23:45:8c:85:ce:eb:0e:71:b0:79:8f:2d:d2:ec:15:a6:2a:
         7d:2c:82:a4:0f:84:79:aa:41:bf:30:a1:ef:96:42:05:57:b9:
         df:7c:8a:91:f3:31:cf:39:fe:a7:76:5d:cf:6b:9b:5f:39:54:
         21:a4:e5:26:55:34:d5:01:2e:7c:3f:7e:ef:82:69:19:89:b3:
         03:88:d5:ea:f0:de:cc:14:a0:05:75:8d:58:e0:46:79:35:fb:
         b3:a8:2f:90:ce:f7:b8:04:23:0f:80:9f:a3:89:bf:53:9c:8e:
         3b:44:ad:be:df:5f:d3:ad:2e:94:84:f0:33:6f:fe:79:45:d6:
         b2:73:eb:56:f4:f7:34:3b:4f:85:ca:4e:60:cd:7e:bf:46:b0:
         21:dc:42:c7:01:47:71:eb:46:f5:1c:99:a1:d6:88:02:96:50:
         f6:ba:4d:ce:2a:75:dd:bf:29:5e:8c:61:0c:2b:fb:d1:ad:8d:
         cb:60:9e:56:38:d3:a1:cc:4b:4c:1e:bc:d2:1b:22:2c:13:02:
         a4:50:7f:92:03:7f:17:a7:8d:ff:71:fb:1e:45:e9:22:b1:5c:
         fe:aa:df:96:d8:19:5a:bc:8b:64:89:b5:12:02:41:b3:52:bb:
         1f:0e:43:9d:d4:65:ad:46:0c:8b:81:9d:e9:a8:86:80:3b:a9:
         ec:01:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:29 2026 by rpki-client