Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/c1qxAOds0ZNJCcJDTdp0BHzOcK0.roa
File:                     c1qxAOds0ZNJCcJDTdp0BHzOcK0.roa (raw, json)
Hash identifier:          hPQMqFThOHoKOZ9jV0nUzu3s+GoqYT9q1vVEGcnm114=
Subject key identifier:   73:5A:B1:00:E7:6C:D1:93:49:09:C2:43:4D:DA:74:04:7C:CE:70:AD
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       3A
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/c1qxAOds0ZNJCcJDTdp0BHzOcK0.roa
Signing time:             Tue 31 Mar 2026 08:44:45 +0000
ROA not before:           Tue 31 Mar 2026 08:44:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59108
IP address blocks:        202.243.64.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Mar 31 08:44:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=735AB100E76CD1934909C2434DDA74047CCE70AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:db:83:4c:cb:65:6f:e1:96:39:19:17:29:
                    56:15:dc:46:ca:e4:ef:af:74:02:9a:8e:ef:07:67:
                    19:f4:5b:e4:31:7e:81:f1:45:65:7e:15:f9:ee:38:
                    85:f4:e8:40:03:bb:3e:b7:93:67:fa:27:1d:a7:e2:
                    79:18:05:cc:70:0e:62:6c:b6:10:e9:9e:da:d7:63:
                    17:ff:07:20:fd:96:72:ab:d9:88:7d:7d:33:15:22:
                    30:02:1e:f3:dc:f1:b0:3d:06:18:2c:7e:aa:51:3b:
                    7c:c0:91:e8:b6:38:f0:a0:9d:46:3b:89:fc:28:72:
                    17:bb:74:04:c9:33:8a:85:75:4c:d0:72:0e:f2:db:
                    61:a3:b3:62:74:cb:a5:d8:4b:f5:82:c9:7d:47:b3:
                    2a:5f:22:24:b0:e7:14:06:3b:c1:23:53:27:96:e1:
                    f6:72:ec:40:3d:ab:78:9d:fe:0b:19:71:81:d3:d3:
                    65:8e:b6:ea:2d:cb:2e:31:43:b4:ca:9b:17:39:d1:
                    2b:92:cb:c5:da:50:3a:f5:fe:ed:53:46:00:b1:e8:
                    99:4a:77:f3:57:11:f3:6e:e5:a9:0e:a1:04:28:de:
                    dd:f9:78:80:ee:35:a1:37:ff:68:da:f0:22:a5:88:
                    79:a6:51:e4:be:36:e9:b4:dd:47:4e:02:71:93:e9:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5A:B1:00:E7:6C:D1:93:49:09:C2:43:4D:DA:74:04:7C:CE:70:AD
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/c1qxAOds0ZNJCcJDTdp0BHzOcK0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.243.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:06:2e:50:2f:5d:cd:a2:3f:dd:d2:08:7c:7c:70:1c:c0:2a:
         aa:32:dc:ae:ed:0d:8c:1b:86:45:21:dd:78:04:a2:09:65:79:
         e9:23:db:8f:ff:c5:5f:fe:f8:c6:65:a9:fe:66:a1:e7:c1:fb:
         39:fb:14:f5:cd:e0:29:8b:3f:8e:66:20:53:d5:a0:4e:5d:e5:
         b6:7f:2b:a4:b5:c9:43:df:a8:52:5d:fc:14:ca:71:02:be:db:
         49:36:b8:3e:46:06:79:36:36:f1:25:ab:68:1b:21:14:4a:9f:
         42:fc:78:6b:0f:60:f9:08:e3:a4:6c:3e:f1:6d:4b:70:a5:07:
         a7:5c:2d:a3:5a:b5:99:7f:0a:33:7d:c8:93:56:46:62:49:b5:
         d0:43:82:a1:6d:a3:5c:c9:1a:c5:7b:67:db:a8:f4:b1:a9:7b:
         7b:cb:ef:36:c2:c8:1a:36:66:c4:cd:61:0e:56:47:52:3e:3b:
         9a:c2:8a:47:17:88:01:8e:39:9d:73:64:67:b6:8d:f5:37:9f:
         5e:ce:73:48:d5:26:de:94:ce:af:04:4d:4c:d6:b9:e2:f7:13:
         58:b3:ad:e8:90:f6:12:39:e4:02:3a:cf:4d:ba:9f:8b:d7:8b:
         72:f2:78:7d:d3:39:4a:31:39:8a:b8:cc:44:9b:7b:2a:40:36:
         32:4e:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:42 2026 by rpki-client