Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/wDEJKNw8mJssoVP0qre7bkCTKh0.roa
File:                     wDEJKNw8mJssoVP0qre7bkCTKh0.roa (raw, json)
Hash identifier:          asJue0aiz0gcZmWWbf9u+g5ybaEHLHfpK3KxlYDIZUk=
Subject key identifier:   C0:31:09:28:DC:3C:98:9B:2C:A1:53:F4:AA:B7:BB:6E:40:93:2A:1D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       014D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/wDEJKNw8mJssoVP0qre7bkCTKh0.roa
Signing time:             Tue 31 Mar 2026 07:53:07 +0000
ROA not before:           Tue 31 Mar 2026 07:53:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.218.0.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C0310928DC3C989B2CA153F4AAB7BB6E40932A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:80:77:66:83:dc:fc:9b:1e:f9:cf:a4:51:
                    44:f6:3a:d2:8d:e8:ef:32:2c:44:42:43:80:c7:de:
                    85:3d:f6:4c:a3:e6:26:b0:62:cd:22:d5:16:a5:56:
                    fa:90:06:75:d9:6f:3c:60:1f:e0:8f:c4:b4:92:d6:
                    5a:b9:a9:ff:89:75:f3:4e:10:41:89:53:97:40:11:
                    49:19:ba:95:c8:13:e7:9b:d3:82:3a:cc:47:0e:77:
                    33:d1:1f:d1:3a:1a:ab:7f:1a:c3:ff:aa:9c:6b:d7:
                    fe:e8:64:65:4b:a4:1b:00:18:e9:d7:c3:c3:6e:95:
                    76:ca:f4:67:99:fc:eb:db:80:19:68:be:fe:8b:5b:
                    bc:e6:88:8b:81:13:3b:69:f9:1e:41:f1:7e:e8:2f:
                    bb:59:2e:1a:69:f7:c7:9a:cc:d6:5d:d0:a9:45:1b:
                    93:fc:80:7a:dc:f9:f6:43:94:0c:e8:be:a7:de:89:
                    b7:92:5a:62:a3:00:47:53:a7:e3:e5:08:ef:3e:7c:
                    56:1d:9e:8b:57:56:64:33:ff:1b:96:d6:93:ee:f4:
                    00:e8:de:7d:0e:6c:89:92:b2:05:7e:e7:c1:d7:a3:
                    00:19:38:51:99:b8:25:2f:85:05:14:dc:3c:c6:fe:
                    12:e6:b0:d1:e6:f5:b8:73:30:5b:7c:8f:41:12:6e:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:31:09:28:DC:3C:98:9B:2C:A1:53:F4:AA:B7:BB:6E:40:93:2A:1D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/wDEJKNw8mJssoVP0qre7bkCTKh0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.218.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:91:9a:ea:3a:da:e3:f7:76:72:13:43:b4:de:07:40:61:9d:
         30:31:a7:a0:1b:a5:f6:55:b0:83:c7:39:03:59:1c:f0:84:14:
         87:0c:17:77:59:f2:04:25:7f:da:de:14:a7:88:00:69:45:c9:
         05:99:d0:9d:20:a9:c4:b1:0b:18:79:91:64:b3:c8:8f:d6:21:
         da:d4:88:45:5a:13:08:e0:b4:22:79:a5:5f:5c:0e:ae:15:2b:
         2b:6b:8e:f7:57:8a:40:f5:5c:66:41:a3:db:4d:e8:cf:4f:7a:
         b0:ae:21:fd:52:4f:3f:48:6c:c7:d8:7e:c9:ca:b4:f6:c6:80:
         c4:26:50:b9:25:3c:e9:07:be:3d:c4:d9:c3:53:25:84:e1:43:
         82:1d:31:19:29:8a:65:79:ac:3f:3d:fe:81:8e:dc:d9:90:c2:
         4e:ea:fe:9e:53:33:aa:00:2b:4e:35:bd:9b:30:05:58:0b:31:
         ed:fa:1f:f4:82:e6:1b:35:d6:04:73:6c:88:8a:83:4b:02:aa:
         bb:d1:62:36:85:26:7f:e7:3a:8d:81:4b:b7:ec:d5:3e:4f:cd:
         15:38:ef:9d:5e:ee:bf:87:d5:d8:6a:06:8a:b6:de:78:c6:b8:
         0a:75:75:ef:c5:2e:b0:98:07:10:99:01:35:f1:f1:f1:26:93:
         c6:e0:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:27 2026 by rpki-client