Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mOHZWf-FxtCz9sQRjPgfssCxG3w.roa
File:                     mOHZWf-FxtCz9sQRjPgfssCxG3w.roa (raw, json)
Hash identifier:          PpA3S/KJmKCunsNWNhuJ23cSRPX0P99EqpQxyUrCluU=
Subject key identifier:   98:E1:D9:59:FF:85:C6:D0:B3:F6:C4:11:8C:F8:1F:B2:C0:B1:1B:7C
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0148
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mOHZWf-FxtCz9sQRjPgfssCxG3w.roa
Signing time:             Tue 31 Mar 2026 07:53:04 +0000
ROA not before:           Tue 31 Mar 2026 07:53:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        203.145.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=98E1D959FF85C6D0B3F6C4118CF81FB2C0B11B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:28:67:38:f5:c4:d9:67:a9:6c:32:a4:ca:
                    81:ee:57:7f:07:f0:63:c8:85:47:02:69:45:1c:25:
                    81:9b:a4:3a:0d:05:7d:13:a3:0f:75:39:45:0b:8d:
                    49:4b:67:95:09:9c:38:27:a7:08:19:52:f9:25:7f:
                    b5:75:6f:fb:a4:4f:0a:0a:1f:42:71:54:e7:97:9d:
                    5e:2e:4e:a6:b5:fd:f4:91:89:f4:16:56:3a:ef:e5:
                    5f:77:a6:5d:1a:69:57:14:0b:e3:1d:7e:13:4c:2f:
                    f6:ec:e0:40:a2:70:fb:69:c7:d3:e4:6c:6e:72:c0:
                    93:99:6f:61:e7:fa:a1:0c:b7:43:e9:58:e2:ea:30:
                    4c:34:11:c4:ee:d5:45:8d:51:e8:fb:4b:58:5f:8d:
                    65:75:2b:34:5d:78:21:de:14:c5:ac:f6:46:cf:84:
                    f2:52:c2:f7:0f:51:f3:be:51:c7:08:1f:c6:d0:e8:
                    9b:a1:cd:40:16:5e:5a:16:60:8c:b3:a0:93:97:0a:
                    93:60:16:21:ee:75:0b:4e:51:cc:c2:1e:ce:50:7e:
                    cc:4c:5f:85:cb:0d:e4:6b:c9:6c:c3:67:f6:09:80:
                    b0:c4:ab:99:70:78:58:5d:40:6e:75:d6:66:61:a8:
                    66:7a:7a:fa:82:1a:46:cb:05:77:8c:1c:5c:fc:59:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E1:D9:59:FF:85:C6:D0:B3:F6:C4:11:8C:F8:1F:B2:C0:B1:1B:7C
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mOHZWf-FxtCz9sQRjPgfssCxG3w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:64:00:ec:3e:10:ce:a2:8f:13:18:6e:bc:78:ee:aa:cb:e4:
         c5:01:6a:f7:91:b0:f8:14:db:54:77:7b:5f:b6:f9:10:25:ad:
         c6:84:d4:32:06:7e:3f:21:bb:b2:4c:de:35:3c:db:52:7c:fd:
         27:0d:ee:10:69:40:20:4d:01:f9:9d:47:92:cd:da:04:66:e3:
         fe:4c:b2:9a:6f:27:15:9f:8b:70:67:b2:19:b6:9c:d2:d0:26:
         77:6c:e8:fa:10:8f:f5:e4:14:e7:0e:d1:d6:39:a5:86:34:36:
         2a:39:50:5a:a5:51:15:ed:59:7b:db:44:95:c4:49:e7:ed:70:
         71:4e:86:ce:f3:a7:41:71:6d:da:3e:74:9f:ae:6c:96:13:2f:
         52:4c:40:b3:ee:ff:de:4d:70:e0:62:67:17:c6:8a:b2:4d:f7:
         5e:62:e2:94:8a:21:d2:bc:e2:25:b1:c1:d0:38:4d:ea:41:1a:
         ed:46:dd:df:41:ba:6b:be:aa:a2:d1:42:11:00:95:f6:c4:47:
         35:41:00:dd:13:45:7e:3d:e0:f8:70:f3:72:04:ea:98:92:da:
         04:da:30:c7:f1:00:f3:cd:4a:3a:ff:a0:56:d4:9c:3b:02:11:
         89:66:45:6e:b6:12:9f:82:f8:ad:07:e3:13:ec:47:cd:40:74:
         bd:92:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:39 2026 by rpki-client