Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/_WKeU3T9RA6TO5N2zpubg6wX91o.roa
File:                     _WKeU3T9RA6TO5N2zpubg6wX91o.roa (raw, json)
Hash identifier:          y790ns1zhk8r8C3coFvfLQMNKIYqsRLBaBQk3zqZSzY=
Subject key identifier:   FD:62:9E:53:74:FD:44:0E:93:3B:93:76:CE:9B:9B:83:AC:17:F7:5A
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       1F
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/_WKeU3T9RA6TO5N2zpubg6wX91o.roa
Signing time:             Wed 25 Mar 2026 05:59:36 +0000
ROA not before:           Wed 25 Mar 2026 05:59:36 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        210.199.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:59:36 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=FD629E5374FD440E933B9376CE9B9B83AC17F75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:be:f2:1b:be:3b:be:ba:af:18:0b:c2:94:
                    89:da:0f:5f:e0:06:72:96:38:4f:ca:29:e3:49:16:
                    07:e9:58:05:76:de:d9:85:31:4a:03:f8:5d:d3:de:
                    e7:12:20:35:1f:67:46:78:0e:0f:1a:61:6b:cc:77:
                    d3:90:34:0c:6b:83:fb:ac:ca:42:95:a5:ce:c7:08:
                    31:22:f2:67:b6:b4:eb:1a:15:0b:b9:14:63:81:82:
                    98:d0:1e:53:a6:10:a7:6b:fe:cb:32:63:6a:e0:a7:
                    5e:d6:fb:d0:40:89:da:90:0e:74:2b:75:ff:c8:33:
                    d5:d0:ac:a6:61:c4:88:0a:b0:aa:81:24:b7:13:4c:
                    e0:ac:6a:31:07:79:97:de:8d:3a:9e:05:33:8a:21:
                    e8:28:22:37:12:91:c6:6a:2f:e2:7f:70:cf:e9:5c:
                    f6:89:d3:84:32:09:96:0b:f9:5d:96:9e:67:a4:7e:
                    30:c0:fb:93:68:87:5e:a9:2d:7a:55:07:40:b5:03:
                    91:5c:3f:50:fc:4c:73:b5:32:6d:b6:83:6d:a6:b1:
                    fc:83:29:b0:b0:e9:98:0f:f7:1e:e8:83:d4:ad:b7:
                    de:f7:04:c0:57:85:23:ed:7f:9c:0e:59:7b:4d:09:
                    e6:73:ee:cd:2e:0a:6e:19:8c:3c:a0:31:11:aa:0e:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:62:9E:53:74:FD:44:0E:93:3B:93:76:CE:9B:9B:83:AC:17:F7:5A
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/_WKeU3T9RA6TO5N2zpubg6wX91o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:52:59:f2:a3:4b:b0:07:0c:2b:01:29:f1:ad:4c:bf:a6:27:
         b3:f8:6c:91:0e:9f:2c:c7:79:6e:10:4b:36:2d:ca:4f:3e:7e:
         90:89:86:4b:86:a7:f9:41:a0:ce:b2:00:87:b4:98:7a:d6:f5:
         33:b3:42:fd:6e:2e:55:a4:ab:d0:79:29:b9:62:52:29:ea:77:
         4a:ed:fe:46:b9:69:12:98:4d:79:3b:23:2c:62:c2:55:3a:60:
         2e:bf:3c:04:11:c0:84:41:f1:bf:9c:33:20:b2:9c:21:75:5d:
         be:08:46:52:80:3d:5d:51:02:4a:de:0a:4f:54:2f:4d:27:24:
         05:6b:7e:1b:be:f3:3d:43:10:55:c4:b3:3e:cf:6a:00:16:5f:
         9b:ef:48:5b:fa:62:51:37:20:61:a9:40:61:e7:c0:91:64:75:
         34:13:aa:10:20:61:8a:94:11:a7:03:29:13:d2:9e:fe:65:6d:
         47:25:90:3e:a0:ba:9d:9d:41:18:4d:eb:27:ff:4c:4b:c1:73:
         2f:12:f4:0e:b1:1a:db:59:d8:c3:ad:59:5e:a5:c4:8d:dd:4b:
         a0:4d:4b:c2:7e:26:d8:d5:69:38:0e:00:c5:53:04:01:4d:cc:
         db:a5:d5:fb:11:a4:f2:75:13:0f:7c:04:4d:59:78:22:f5:ab:
         e6:0a:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:25 2026 by rpki-client