Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uXuHvn8lGTlTD7-J5_5pENff3Hw.roa
File:                     uXuHvn8lGTlTD7-J5_5pENff3Hw.roa (raw, json)
Hash identifier:          ubp4E6Vbz/h+YTlyHKwM2602wsWDM+Oc1rR/00k1Orw=
Subject key identifier:   B9:7B:87:BE:7F:25:19:39:53:0F:BF:89:E7:FE:69:10:D7:DF:DC:7C
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01D4
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uXuHvn8lGTlTD7-J5_5pENff3Hw.roa
Signing time:             Tue 31 Mar 2026 07:54:13 +0000
ROA not before:           Tue 31 Mar 2026 07:54:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.228.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B97B87BE7F251939530FBF89E7FE6910D7DFDC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:7e:94:36:0a:8f:63:c7:ee:1b:31:b1:59:
                    5b:0c:12:8b:12:48:f9:4b:ad:a2:86:ed:eb:ad:f5:
                    c4:8b:c4:10:44:63:1c:e1:6b:ec:d4:66:d6:a0:bb:
                    2a:5f:e9:8b:81:b2:7d:5e:11:f7:63:db:6b:f4:1c:
                    22:92:af:5c:c0:79:c3:68:18:a5:28:1c:cc:dd:ea:
                    96:14:81:35:75:05:1b:37:58:2c:70:81:be:a4:e3:
                    d1:af:ae:4b:0a:71:c1:e1:a0:fc:97:8f:d3:db:55:
                    b2:03:51:30:b4:f3:3a:86:4f:bc:18:db:c2:ba:3a:
                    7c:ab:7c:b2:97:4b:39:c2:65:47:71:36:5b:0e:8c:
                    41:56:00:1d:e8:1b:31:90:6d:00:c9:59:31:25:eb:
                    2f:ae:2b:a3:4b:ac:78:54:bb:ac:85:ce:56:a8:1b:
                    75:ea:6b:a1:8d:3f:a7:c2:50:0e:c6:7a:18:56:f7:
                    a8:09:2b:ad:18:8f:8f:c2:51:0a:34:6e:24:71:78:
                    94:75:53:0f:d6:cb:2c:f0:b0:fc:78:99:a9:3e:37:
                    3e:56:24:c8:76:80:82:e4:40:6d:e0:6b:e5:d9:8f:
                    83:fb:0e:66:a0:fb:e1:cf:3e:45:6d:49:81:92:16:
                    c5:06:1c:13:f2:85:2d:a6:ed:b6:0c:5a:e2:39:a4:
                    41:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7B:87:BE:7F:25:19:39:53:0F:BF:89:E7:FE:69:10:D7:DF:DC:7C
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uXuHvn8lGTlTD7-J5_5pENff3Hw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.228.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bf:98:80:45:9d:25:70:21:1a:b6:ff:ae:b0:30:3d:8e:3f:2b:
         33:91:26:5b:89:7e:b4:dc:b6:18:b9:0b:51:e7:9a:e9:1c:49:
         4c:6e:09:c8:a2:0b:88:1f:42:ae:fe:8f:99:dc:66:a5:75:91:
         b9:25:a1:0b:a9:cc:e4:28:3a:c8:30:ef:b9:b8:85:f8:5c:67:
         14:95:6c:eb:ec:6e:cc:d2:1f:23:59:b9:d3:a1:e6:7b:ab:d0:
         98:fb:e3:57:bc:cf:cf:70:2e:f1:7b:2b:73:56:06:b5:e9:7e:
         8f:fe:94:6b:8c:48:74:f4:d4:d0:3f:80:ea:3a:28:3c:6e:49:
         aa:7c:98:26:ae:da:40:45:67:f2:26:ae:ff:59:d0:4b:65:d1:
         a3:fc:dc:72:42:79:24:47:6b:b7:d1:94:5f:12:e1:7e:a7:95:
         a1:f6:8d:e8:fe:10:fd:e0:89:a2:43:fd:ea:78:cd:9a:a2:42:
         c5:d5:5c:6f:8a:68:50:6d:0c:0f:3f:c9:d6:6f:60:8b:d0:d9:
         7a:4a:b4:2d:6c:31:95:06:7e:95:26:46:1e:51:9a:b8:b9:87:
         66:cd:70:97:f4:93:17:c9:cb:6f:47:f9:78:3c:a3:2f:a5:8d:
         09:f7:b6:70:69:27:04:6b:df:aa:ab:67:13:ab:ab:67:8c:38:
         15:c1:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:03:37 2026 by rpki-client