Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/WOopuP15FTh9r1rDaVlUvxMZIIY.roa
File:                     WOopuP15FTh9r1rDaVlUvxMZIIY.roa (raw, json)
Hash identifier:          gKvquzzVzESdr8rYj5LtmUYma7krRlcFEVVjEjkRgNo=
Subject key identifier:   58:EA:29:B8:FD:79:15:38:7D:AF:5A:C3:69:59:54:BF:13:19:20:86
Certificate issuer:       /CN=989E82672C98A627120ABA72DEBEBE22015849A0
Certificate serial:       2E
Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/WOopuP15FTh9r1rDaVlUvxMZIIY.roa
Signing time:             Sun 01 Feb 2026 01:35:43 +0000
ROA not before:           Sun 01 Feb 2026 01:35:43 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        180.92.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0
        Validity
            Not Before: Feb  1 01:35:43 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=58EA29B8FD7915387DAF5AC3695954BF13192086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:ce:f5:54:4b:a2:88:f6:e5:80:4a:83:52:
                    b3:02:54:1a:1f:35:d4:e8:80:26:dc:b8:c3:73:0c:
                    8c:9c:a2:6a:04:57:a8:83:fb:1a:e0:05:f9:51:4a:
                    ef:51:0b:65:d9:cc:03:13:1d:38:9b:ff:a3:bd:f4:
                    e9:55:d6:61:ec:b3:f5:da:7e:ab:ad:27:92:ce:33:
                    33:c9:f5:89:b7:63:c6:de:71:1f:c4:5b:65:e1:5e:
                    29:9a:5a:98:a1:9e:60:1a:89:41:09:3e:1b:18:58:
                    6e:f9:72:2c:6a:38:73:ef:12:f1:1e:10:0f:ec:cd:
                    1b:54:1f:31:75:2e:70:99:86:28:fb:46:ab:70:b7:
                    a2:7b:de:9e:72:a4:b0:29:17:f5:17:2f:6c:22:7c:
                    95:f6:b6:1b:2f:1a:7e:1c:8e:26:4d:17:ec:23:71:
                    c2:07:4b:1f:b3:d3:ad:6f:92:b8:1e:26:36:c5:e0:
                    d6:0c:b4:f0:1b:34:43:42:5b:77:42:00:42:db:fc:
                    16:87:bc:47:6d:a6:06:c5:39:42:f3:c3:6a:5e:b6:
                    34:87:b3:4c:a6:8b:48:6f:37:1b:a1:59:ab:25:27:
                    87:c1:e4:55:cf:51:fa:85:d9:a0:35:67:7c:c9:56:
                    b5:56:f9:1b:d2:41:28:3c:c2:d9:36:61:2b:37:a2:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:29:B8:FD:79:15:38:7D:AF:5A:C3:69:59:54:BF:13:19:20:86
            X509v3 Authority Key Identifier:
                keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/WOopuP15FTh9r1rDaVlUvxMZIIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:76:a5:7d:04:1c:b8:68:90:ef:e6:a3:35:a6:47:a9:2c:
         0c:23:21:2d:3e:54:16:ca:c8:24:a9:56:6e:41:dd:42:ac:4c:
         1b:2b:f4:02:f8:46:99:7e:9e:a0:57:a1:d9:82:d6:d8:78:a0:
         7c:46:ce:d7:ec:d0:39:6a:c0:36:86:3e:f8:55:ab:f3:c4:11:
         98:39:f8:70:2d:19:da:a7:74:5c:18:45:ca:6c:c2:2c:50:3a:
         45:1d:dc:bb:fb:b6:7a:fa:9d:b8:28:a3:6b:f4:cd:0e:34:58:
         a1:8c:72:60:3b:79:c9:40:db:0e:f5:53:66:30:c2:3e:8b:e9:
         17:f6:01:a6:b2:d7:fe:91:73:a4:dc:a6:c6:50:e1:23:e5:af:
         5f:e4:86:e9:9f:df:43:f2:c8:35:eb:32:7d:db:60:23:5e:1a:
         f3:60:df:2a:5d:4a:31:d7:72:c6:00:fa:24:e3:8a:16:64:30:
         75:70:99:31:b3:e8:b3:c1:a2:98:8e:ec:9e:bf:ce:85:e2:a9:
         9f:f5:f1:56:ff:af:47:95:85:de:00:0e:fb:8b:4f:c2:9d:32:
         05:7a:ee:7c:58:03:9d:13:12:45:7c:57:4b:c6:9e:a0:66:14:
         bc:9b:77:23:d5:73:29:9e:85:92:8e:6b:c6:1a:14:d2:6e:df:
         80:a2:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:00 2026 by rpki-client