Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zpgVazmhgatY8k-uhpNKo-nqWP0.roa
File:                     zpgVazmhgatY8k-uhpNKo-nqWP0.roa (raw, json)
Hash identifier:          ifwwob+GzdLlXpzI712F6ImL2pEKQAHfHDfeW06q6QY=
Subject key identifier:   CE:98:15:6B:39:A1:81:AB:58:F2:4F:AE:86:93:4A:A3:E9:EA:58:FD
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0134
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zpgVazmhgatY8k-uhpNKo-nqWP0.roa
Signing time:             Tue 31 Mar 2026 07:52:54 +0000
ROA not before:           Tue 31 Mar 2026 07:52:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.230.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:52:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CE98156B39A181AB58F24FAE86934AA3E9EA58FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:29:2f:40:55:1f:9c:76:0c:85:50:0a:22:
                    af:95:2c:25:35:75:20:45:4a:d6:15:3e:dd:8c:65:
                    5c:c6:bb:82:d9:2e:e1:36:11:02:37:0f:4a:ea:e6:
                    47:00:e5:c1:65:e4:dd:83:04:73:06:74:8c:52:20:
                    b6:7b:f9:88:28:68:bb:f1:31:55:d9:88:80:3d:af:
                    9d:d3:06:37:45:ca:dd:74:bf:65:82:a2:18:ac:33:
                    71:e7:b0:f6:d5:fa:30:94:fd:9d:5c:11:15:e7:50:
                    3f:57:fc:64:ae:f7:1b:31:b9:0a:15:6f:93:36:58:
                    85:df:7f:f7:25:3d:a5:75:62:b9:13:18:d2:c7:cb:
                    08:fd:44:d1:2c:33:5c:7f:17:57:57:35:07:9e:40:
                    e3:5e:f1:ec:b8:ca:4d:29:5d:75:a0:8e:46:f3:2c:
                    01:db:b1:6c:d2:54:02:82:98:63:77:bb:6f:76:a3:
                    da:b2:7f:39:97:93:61:1e:d3:45:ae:01:f1:23:f7:
                    70:9b:1c:69:d1:2b:c1:a2:b5:21:d3:53:da:0b:7d:
                    7b:9e:24:3c:b5:06:7f:10:52:65:44:67:e5:3d:0f:
                    e8:d9:db:20:e7:9b:dc:dc:03:4f:f2:4c:4c:00:1f:
                    63:fd:71:74:7b:8c:89:f1:d1:ad:37:8f:06:07:5f:
                    ba:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:98:15:6B:39:A1:81:AB:58:F2:4F:AE:86:93:4A:A3:E9:EA:58:FD
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zpgVazmhgatY8k-uhpNKo-nqWP0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:47:dd:9e:15:e0:3a:b4:dc:49:6f:23:20:22:6d:18:d5:59:
         3f:5e:37:88:c2:87:42:64:bd:b6:f0:c0:c8:61:66:54:62:9d:
         a9:ff:be:3b:ca:5a:38:f3:95:73:10:53:52:aa:7d:74:8b:0d:
         7f:39:68:82:9d:dc:50:8e:a5:c7:c7:c8:dc:8f:73:31:cb:32:
         2f:33:12:80:06:2d:7c:db:cb:29:66:e9:9e:cd:80:8d:00:1d:
         d1:b0:25:37:87:37:2c:c1:4c:5c:43:bc:04:fb:0b:24:13:45:
         59:4e:85:0d:cf:8f:1b:60:be:96:22:8b:55:ef:13:a0:82:80:
         34:96:ce:3f:c0:3d:77:2d:f6:28:0f:c4:16:dc:fd:37:46:ac:
         f6:5b:15:55:88:a6:8f:bb:e8:be:7e:4a:60:a7:0f:8a:21:5f:
         6c:62:f6:28:c3:b6:08:b4:cf:5d:e8:64:15:60:db:54:56:31:
         5f:da:9a:73:05:5d:d4:d7:b9:e2:7d:33:cd:07:a9:02:2c:bd:
         26:e1:31:13:79:8c:cd:e2:f3:f4:69:54:6b:e1:3f:9a:19:05:
         53:8f:fa:fe:2b:d4:df:81:9e:55:73:ff:35:04:c0:f7:02:3a:
         16:a6:ed:a2:1f:6e:e4:6a:e2:a8:f6:c4:2d:fb:9b:47:ee:b5:
         97:1c:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:44 2026 by rpki-client