Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mQ8v99bDC4fqCtPmS8RuN-GNKio.roa
File:                     mQ8v99bDC4fqCtPmS8RuN-GNKio.roa (raw, json)
Hash identifier:          7geBuyhnALEzU/g1esZL8SnKOyiE/2i+X7POydJGHHw=
Subject key identifier:   99:0F:2F:F7:D6:C3:0B:87:EA:0A:D3:E6:4B:C4:6E:37:E1:8D:2A:2A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01BD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mQ8v99bDC4fqCtPmS8RuN-GNKio.roa
Signing time:             Tue 31 Mar 2026 07:53:59 +0000
ROA not before:           Tue 31 Mar 2026 07:53:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        211.14.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=990F2FF7D6C30B87EA0AD3E64BC46E37E18D2A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:b0:6c:8f:cb:7f:75:98:48:d3:cd:1f:15:
                    3f:60:39:ab:0e:21:4f:dd:b0:6b:ae:14:3f:ea:a9:
                    f9:14:ee:12:8a:29:0f:b5:bd:c6:d6:9b:3c:44:56:
                    92:cb:e0:64:7a:83:10:d4:72:73:d5:f4:e4:6d:c8:
                    29:36:09:c8:a6:93:b6:1f:bf:c0:4c:cb:2b:67:34:
                    cb:4e:0e:c4:eb:a4:56:81:7a:d8:b6:6f:f7:7e:ad:
                    51:2b:70:11:a9:dc:81:e1:3a:a1:4e:9f:8f:09:f1:
                    25:0f:dc:65:c6:62:8e:f5:5b:ff:b8:53:16:77:81:
                    9f:76:7c:95:25:01:f0:f5:3a:2d:8b:cb:3f:75:11:
                    52:f3:13:a1:b2:03:da:ff:d9:3f:9c:43:6c:32:40:
                    27:1c:b8:ef:57:96:3a:e9:b6:9b:ab:a1:11:9c:c3:
                    6b:86:b6:dc:b5:3f:60:ae:04:e9:d7:f6:cb:f8:c4:
                    c5:84:7a:f3:db:25:4e:02:47:04:5b:41:26:ff:b6:
                    d7:28:8a:52:21:cd:c8:8e:ba:2d:20:7c:67:d3:df:
                    61:1a:f8:c0:70:db:02:98:64:68:e3:fe:fe:06:32:
                    a5:70:53:c5:eb:c4:ce:1f:df:8a:51:97:17:ae:6d:
                    1c:5b:8d:df:2a:85:08:7e:f1:0c:1e:d5:0d:32:e2:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0F:2F:F7:D6:C3:0B:87:EA:0A:D3:E6:4B:C4:6E:37:E1:8D:2A:2A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mQ8v99bDC4fqCtPmS8RuN-GNKio.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:14:08:59:c4:cb:f9:6c:a2:05:bd:db:70:83:3f:fe:e7:
         ce:de:31:1c:31:06:55:0f:c7:7a:30:3c:d4:98:78:e0:19:55:
         14:07:63:eb:5c:5c:44:cc:11:d9:f3:9d:ce:4a:74:ad:5c:7b:
         06:ab:47:a2:b9:ca:c3:aa:06:06:80:e9:68:f4:5d:0d:28:96:
         7c:ad:5e:26:cd:22:1f:da:85:88:43:90:9f:70:c9:3e:60:6a:
         e0:52:b1:4b:23:82:66:a5:8a:fe:ba:f5:17:14:31:ce:45:33:
         a6:0a:6c:5d:50:25:ca:a1:18:31:7d:79:44:05:10:63:6d:65:
         8f:6f:8b:ca:8d:bc:1c:ea:c6:2a:3c:ff:f4:7d:a5:ae:cc:5a:
         c1:ef:4d:e1:67:27:e4:55:7b:08:20:ac:31:39:ce:63:80:71:
         05:d9:a9:9a:2b:38:da:08:d7:ec:6c:02:63:7f:dc:14:22:47:
         39:43:01:24:6c:66:1a:55:92:5f:39:aa:e2:97:d2:1d:24:7c:
         86:2c:82:5c:96:b3:6a:d8:8a:35:20:c0:31:42:5e:a2:41:af:
         8a:fe:af:53:dd:29:f1:21:ae:51:c2:85:6a:de:19:c9:9f:f1:
         ce:c8:60:22:dd:71:3f:e5:ac:7a:06:3a:cb:4a:c6:2f:9f:d9:
         87:66:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:35 2026 by rpki-client