Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/t0gebm51dBKyxDwtejy_gMhfYuQ.roa
File:                     t0gebm51dBKyxDwtejy_gMhfYuQ.roa (raw, json)
Hash identifier:          D7c/P8McmiidoVPb+wz9N96b3E2K6IJJPQ2//nnMZI4=
Subject key identifier:   B7:48:1E:6E:6E:75:74:12:B2:C4:3C:2D:7A:3C:BF:80:C8:5F:62:E4
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       016D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/t0gebm51dBKyxDwtejy_gMhfYuQ.roa
Signing time:             Tue 31 Mar 2026 07:53:24 +0000
ROA not before:           Tue 31 Mar 2026 07:53:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B7481E6E6E757412B2C43C2D7A3CBF80C85F62E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:84:06:e3:5c:6c:ec:d8:4b:ad:7d:00:94:7c:
                    66:28:f4:d1:13:55:6a:e1:a2:79:bf:7e:d4:b1:6b:
                    8e:a9:44:17:65:fd:e6:5d:c5:a9:bd:e4:f7:9f:21:
                    9a:4a:39:7a:cf:8e:65:cf:a4:17:4f:5d:f8:17:94:
                    0b:7e:13:c3:ba:e5:98:93:ec:83:fb:4a:75:78:9d:
                    b0:b6:86:e4:eb:7f:ff:01:e0:30:91:48:de:84:54:
                    9b:d6:d3:77:43:0a:f6:79:66:db:0b:95:0a:8e:0e:
                    dc:56:5b:c1:ca:e1:02:26:f5:3d:62:69:30:ab:ee:
                    ca:7a:bd:5d:c7:28:83:6a:da:cf:38:33:2b:0e:01:
                    64:bf:91:22:e7:51:ac:11:7b:36:ee:a0:6c:9a:83:
                    64:ce:47:64:a1:e1:58:c8:d7:3f:d6:a7:14:01:41:
                    cc:1a:38:a0:f9:36:02:8a:4d:89:ef:77:14:a1:3e:
                    22:59:aa:d4:a6:38:9b:06:13:82:79:40:63:97:d7:
                    1c:6f:02:51:a0:b8:ea:bd:6f:55:31:ca:73:5f:5d:
                    3f:31:f1:26:16:f8:bb:de:06:fb:c9:33:1f:77:0f:
                    51:9d:b9:48:05:08:d8:0a:17:46:d0:d0:44:5f:9b:
                    f8:3f:1f:ff:6d:40:a8:43:cf:f4:1c:55:34:1c:0b:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:1E:6E:6E:75:74:12:B2:C4:3C:2D:7A:3C:BF:80:C8:5F:62:E4
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/t0gebm51dBKyxDwtejy_gMhfYuQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:05:35:4c:4d:3b:b9:c1:a4:d1:60:e1:55:9c:12:2c:74:
         3f:82:66:86:8c:7d:18:a0:71:17:5e:2c:db:f9:58:4b:5b:ef:
         1a:c6:41:ab:c6:1e:f0:a9:7f:4c:d1:8f:f4:fe:1a:49:86:f3:
         57:c2:f8:be:06:30:5f:26:d6:fe:0a:dd:78:e0:ad:17:88:e7:
         f8:71:8b:61:19:ca:7a:87:a8:ec:bf:1c:9c:87:80:87:22:ec:
         03:4d:f3:f1:c4:d0:86:4a:28:db:b5:d0:f1:1f:a3:66:99:78:
         1b:4a:d3:3d:14:8f:45:26:29:fa:b5:5a:e0:86:e9:44:4e:20:
         4e:a5:62:0c:65:b5:00:72:14:71:1a:b8:56:2f:9f:cf:0f:ed:
         51:8f:94:88:79:27:92:a0:96:19:44:29:0f:89:c0:75:b5:a2:
         53:b1:4f:39:b8:65:30:05:9b:2f:ef:0d:35:60:23:cc:bd:47:
         de:e0:5f:3b:43:9a:c9:a1:8f:12:65:c3:bf:40:e3:84:ec:24:
         c8:50:90:10:70:c3:17:85:99:ff:f5:87:79:04:aa:a8:78:d7:
         ef:5f:eb:25:16:c4:a1:13:70:47:c3:13:ed:ed:d7:8f:2d:dd:
         03:e0:cd:7a:18:46:10:31:b1:cc:2f:6f:1f:93:ff:ec:29:a2:
         18:09:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:50 2026 by rpki-client