Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/WRQau4j9VDrvocKPnbVvp662Kdw.roa
File:                     WRQau4j9VDrvocKPnbVvp662Kdw.roa (raw, json)
Hash identifier:          WTet0bfJxzxJKEd++Hf3TkSqcg0bC6+d8Z+gLqW8ltw=
Subject key identifier:   59:14:1A:BB:88:FD:54:3A:EF:A1:C2:8F:9D:B5:6F:A7:AE:B6:29:DC
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       5C
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/WRQau4j9VDrvocKPnbVvp662Kdw.roa
Signing time:             Tue 31 Mar 2026 07:51:45 +0000
ROA not before:           Tue 31 Mar 2026 07:51:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     138384
IP address blocks:        119.31.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Mar 31 07:51:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=59141ABB88FD543AEFA1C28F9DB56FA7AEB629DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:55:98:83:fa:17:ee:e0:7e:ce:54:6a:35:40:
                    97:af:ad:6c:59:11:74:3a:63:31:df:dd:4e:73:88:
                    7a:be:92:b8:d9:48:21:c7:78:23:2c:d4:72:a4:e2:
                    eb:3a:af:c2:87:5b:bd:9f:78:bb:c9:64:6d:af:a5:
                    6d:27:a8:d2:8d:d5:16:45:47:ce:fa:fb:e1:49:9d:
                    c0:70:e0:a0:67:86:9a:f7:f3:e5:6b:90:58:c3:ed:
                    7d:90:03:10:20:31:e7:6c:dd:36:fd:ff:05:37:3e:
                    40:c5:60:93:60:17:bf:7c:3f:59:e3:3f:c9:42:c8:
                    7b:10:61:e0:63:1f:c1:9a:60:8c:85:47:dd:d8:2f:
                    89:0c:61:d1:99:b4:09:26:11:c3:cd:9d:2e:36:c7:
                    50:3c:e8:52:46:93:29:3b:1d:c4:01:fc:18:69:91:
                    87:f6:db:c7:93:91:54:c8:d4:27:06:00:ee:da:db:
                    e0:d0:b2:e9:3e:28:ac:b5:2c:f4:99:71:a6:b7:97:
                    56:ee:11:e8:75:c7:10:00:a0:f8:61:c8:d1:a2:8b:
                    87:46:ed:1b:30:b6:64:c5:e1:9b:0f:b4:f2:58:65:
                    e5:bb:c5:ae:c0:ea:9e:01:fa:5d:7e:4b:f7:99:8a:
                    3e:d0:10:1d:45:ad:ec:45:30:9f:28:f0:61:ed:4f:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:1A:BB:88:FD:54:3A:EF:A1:C2:8F:9D:B5:6F:A7:AE:B6:29:DC
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/WRQau4j9VDrvocKPnbVvp662Kdw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.31.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:91:cb:d8:43:df:42:2d:56:15:50:4d:bc:73:a8:67:1c:
         0f:9f:79:e4:39:ae:16:29:c7:6c:96:93:82:f7:dc:d4:d3:0d:
         0d:12:84:a2:d1:61:16:d0:1a:16:f6:90:ad:dc:d3:ff:0c:8c:
         9e:6d:a5:df:be:9f:f4:82:ea:2e:dd:ae:31:96:fe:4c:83:ff:
         fc:39:ef:e0:72:f4:8d:65:c9:c3:f2:16:db:56:8d:18:ff:e0:
         b7:55:fc:f7:eb:a6:61:0a:65:45:24:8e:d5:e0:7d:34:39:a3:
         b5:4d:b0:87:8f:02:c0:b9:3c:4a:f5:7f:6e:36:2f:d6:4a:62:
         5a:da:23:d8:48:77:f6:f4:9f:d1:4e:32:14:31:1b:b6:fb:51:
         0c:63:79:f5:8d:f0:cf:11:d7:0f:ee:80:34:2e:fe:26:73:84:
         1d:f4:a1:62:f4:9e:63:a4:a2:60:05:66:53:04:d1:95:be:3b:
         f2:1f:52:c8:bb:74:5f:19:db:af:3a:c8:d5:2e:10:f1:83:7d:
         dd:8d:ad:03:9a:45:99:0c:da:25:c5:91:2e:c8:cf:a7:23:05:
         47:53:37:ca:2c:a1:b7:5c:18:f9:74:f4:4a:f3:a9:91:37:ed:
         2d:5f:f7:5e:24:28:96:78:a9:3f:b6:97:09:65:13:5b:d5:0b:
         6c:99:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:48 2026 by rpki-client