Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/w__ZjWdF94zTaAuW7vqa0JTV9n8.roa
File:                     w__ZjWdF94zTaAuW7vqa0JTV9n8.roa (raw, json)
Hash identifier:          8/idK/W85aKT23H0YCxgzhcQjSF4/UeFUMpWjsmqczk=
Subject key identifier:   C3:FF:D9:8D:67:45:F7:8C:D3:68:0B:96:EE:FA:9A:D0:94:D5:F6:7F
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01E2
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/w__ZjWdF94zTaAuW7vqa0JTV9n8.roa
Signing time:             Tue 31 Mar 2026 07:54:19 +0000
ROA not before:           Tue 31 Mar 2026 07:54:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.168.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C3FFD98D6745F78CD3680B96EEFA9AD094D5F67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:5e:8d:65:71:b8:a9:02:91:8d:ed:87:e7:
                    8d:66:82:f1:76:bf:42:6c:f1:28:09:17:07:41:ce:
                    09:f9:b8:c9:ca:f6:a6:d8:aa:1b:25:14:66:75:89:
                    42:96:ee:b9:4c:be:ba:4d:31:8e:c2:4b:e6:bb:94:
                    32:38:71:ea:05:46:ea:51:b6:cf:61:12:47:1e:ba:
                    94:8e:7f:d3:44:9d:1e:0d:ce:6f:f4:d5:eb:92:1f:
                    90:17:59:d3:b8:d6:eb:f5:b7:56:0b:ba:d1:6e:33:
                    26:86:a7:f4:6a:1d:d1:f8:20:ba:a7:5f:32:a7:ee:
                    50:fb:1c:93:30:76:97:74:55:56:c0:31:87:94:6e:
                    1d:40:53:2f:d8:15:22:59:fc:c7:7e:a4:a3:e2:7f:
                    e6:b7:be:f2:ba:f2:ab:33:06:ac:db:6a:6c:76:9d:
                    b6:9c:0f:c8:7e:2b:7c:e5:e4:a4:75:b1:ff:8f:21:
                    35:b4:38:c1:84:93:8b:25:31:b0:e2:bd:bd:fc:a6:
                    85:7f:0a:b3:54:d3:b7:85:a4:e8:ee:e1:f3:94:86:
                    a0:e7:45:f2:0f:5c:36:f6:fc:db:68:c5:bc:b7:8c:
                    62:8c:8d:0a:48:b2:a3:97:8e:c2:05:22:32:42:0a:
                    0d:aa:2c:9e:ff:1e:3c:45:98:2c:05:6b:e0:c9:3b:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:D9:8D:67:45:F7:8C:D3:68:0B:96:EE:FA:9A:D0:94:D5:F6:7F
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/w__ZjWdF94zTaAuW7vqa0JTV9n8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.168.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:d1:28:50:ea:c9:28:00:dc:17:98:c7:a5:41:ea:e9:d3:
         f6:e7:6d:e3:52:cf:87:1d:85:16:f0:50:6b:5d:6d:8e:26:cb:
         22:f6:86:86:1e:74:94:7c:f0:c9:da:d8:91:82:db:c9:27:6e:
         e7:53:0b:5e:da:65:82:58:fd:c9:3e:9d:16:fd:4b:b9:dd:05:
         b3:94:c8:12:a8:e1:aa:45:82:79:7d:e4:5c:30:6b:42:6c:85:
         3c:27:f4:8e:50:f0:c3:fa:cf:8f:a2:c0:74:5e:5f:91:8f:34:
         c0:bd:eb:00:d5:fb:a4:aa:06:66:6b:95:fa:76:68:ab:a7:25:
         46:8c:ac:c7:2f:c7:d5:68:64:33:c9:7f:ee:43:eb:19:ed:c0:
         34:34:a6:77:ec:9c:47:92:ad:3a:b0:e7:5a:58:2f:a5:53:23:
         04:c7:94:0a:13:76:a3:8c:14:e8:ec:7e:d3:4b:c8:0d:88:b9:
         0d:31:d4:bc:6c:cf:e5:65:ef:3e:58:c6:5d:93:0a:22:19:90:
         0d:5e:6f:d4:b1:31:22:c1:70:90:7f:71:7a:ef:04:32:df:9e:
         8d:e2:a6:82:9d:34:ea:21:d7:ae:16:15:ae:4d:6f:81:e0:65:
         8b:99:03:29:d2:e8:1d:79:01:fc:52:b3:62:a7:4d:e6:aa:52:
         26:94:6c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:01:48 2026 by rpki-client