Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vhQEx9Coo1vWVzZyaVhtwpykPEY.roa
File:                     vhQEx9Coo1vWVzZyaVhtwpykPEY.roa (raw, json)
Hash identifier:          2mVnjnPAT9FxVw72BPQxriIdpHaJc9bHhOsgGnd+bEQ=
Subject key identifier:   BE:14:04:C7:D0:A8:A3:5B:D6:57:36:72:69:58:6D:C2:9C:A4:3C:46
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01C2
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vhQEx9Coo1vWVzZyaVhtwpykPEY.roa
Signing time:             Tue 31 Mar 2026 07:54:04 +0000
ROA not before:           Tue 31 Mar 2026 07:54:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        211.120.40.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE1404C7D0A8A35BD657367269586DC29CA43C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a3:a7:09:f3:cb:36:a9:a7:13:c1:cb:87:43:
                    48:ad:7f:5b:a4:4e:a6:20:94:0e:d4:f3:51:ac:01:
                    a5:fc:7f:27:2d:87:04:67:be:55:d7:ee:a5:91:80:
                    bf:ac:2b:44:1d:ef:58:3a:88:c2:ed:a0:82:18:73:
                    34:49:a8:0d:d6:17:6e:59:76:7a:57:81:e4:f8:66:
                    5d:d9:fc:d0:04:86:b7:19:f2:c7:f0:ea:cb:8c:4f:
                    56:29:31:fa:e8:a6:c6:61:da:98:b6:0e:59:c7:9c:
                    13:8e:22:4a:8b:45:6e:1e:66:f1:15:18:96:97:17:
                    c2:c8:e5:f9:a0:25:69:2e:73:1c:1e:fe:be:44:90:
                    d7:a0:36:77:78:5c:11:48:91:33:58:86:5c:48:10:
                    a9:a8:d0:7c:e1:9f:42:67:02:79:95:49:67:79:64:
                    b1:4c:54:d0:c9:76:c2:3a:e5:0f:5e:26:98:ff:9e:
                    84:e3:84:db:d8:18:e0:81:cb:1f:d4:d9:80:ab:40:
                    a2:65:39:c5:5d:0b:69:d1:b3:35:c7:78:d4:c2:6d:
                    59:2e:c1:d4:09:15:e0:b8:6f:a8:ba:1f:05:ac:90:
                    a2:02:d2:d1:25:47:96:1d:09:67:d9:98:b7:67:a5:
                    96:95:f0:2e:a1:ef:c3:12:cb:7b:ed:df:b1:ac:62:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:14:04:C7:D0:A8:A3:5B:D6:57:36:72:69:58:6D:C2:9C:A4:3C:46
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vhQEx9Coo1vWVzZyaVhtwpykPEY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:4e:69:ec:53:72:4c:eb:8f:a1:c5:f5:f1:d9:7f:d2:8d:
         d1:59:d7:c6:be:6d:69:7d:5d:c6:07:48:04:93:a5:2f:34:80:
         c3:bc:a6:21:bc:ad:2d:47:ee:60:0b:a5:de:9b:e5:15:b1:cb:
         1b:5c:31:fc:58:7d:03:cd:57:9b:15:10:72:88:7b:75:f4:8c:
         ff:c1:7d:66:66:a4:16:90:4d:f2:79:5b:c7:25:11:7a:05:bf:
         a7:a0:1d:c0:ff:3c:1d:e2:26:46:a6:ca:4d:50:49:b7:b3:67:
         da:fa:82:46:5a:15:ff:05:4d:7e:ec:f4:2e:23:e4:82:0f:7b:
         0a:71:67:fe:b2:e3:6c:8c:6f:67:72:33:25:b2:2e:9c:2a:92:
         c7:16:84:7c:89:ab:6b:e5:13:e3:7f:5b:18:4a:bd:76:b5:2a:
         7b:3a:63:2a:45:97:ef:c6:a5:bb:d8:c3:7a:62:b0:e5:6b:1e:
         f4:3e:c8:fd:8e:04:f1:d3:90:65:52:e9:85:5d:e9:87:2d:dd:
         81:b3:6d:cb:fc:1e:41:bf:89:3d:87:9a:3a:02:91:05:14:ae:
         af:aa:c8:ba:e1:8b:73:11:d1:24:5b:4b:54:3a:97:9b:e8:47:
         1e:df:9d:34:07:43:87:de:f5:3d:18:4e:6b:fe:44:21:2a:ba:
         26:f3:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:44 2026 by rpki-client