Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/qaTLgooen1NDeJei8YGekrBIrUA.roa
File:                     qaTLgooen1NDeJei8YGekrBIrUA.roa (raw, json)
Hash identifier:          q5yFTyj+P8iFiUGNXOoxBvzjv01T/Mual23KV6RTaFw=
Subject key identifier:   A9:A4:CB:82:8A:1E:9F:53:43:78:97:A2:F1:81:9E:92:B0:48:AD:40
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       35
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/qaTLgooen1NDeJei8YGekrBIrUA.roa
Signing time:             Tue 31 Mar 2026 08:44:44 +0000
ROA not before:           Tue 31 Mar 2026 08:44:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59108
IP address blocks:        61.215.176.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Mar 31 08:44:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A9A4CB828A1E9F53437897A2F1819E92B048AD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:41:3c:c8:fd:0a:9d:af:33:94:13:5e:88:
                    89:74:a1:16:30:8b:a2:55:8e:ea:08:4d:04:6e:be:
                    35:41:2e:37:9d:cd:e5:78:14:d1:aa:30:1e:bf:0c:
                    e2:78:d9:91:fd:a8:6c:6f:9a:34:9c:9e:3c:51:2f:
                    e2:0e:e5:d1:de:2f:e8:8a:61:84:9e:26:f3:44:8a:
                    e4:83:b6:11:ff:7c:c3:d3:fe:84:9c:46:08:55:a4:
                    2d:22:75:20:54:a5:a1:52:78:be:36:87:c5:d0:62:
                    d9:7b:bb:59:93:66:df:72:33:ee:80:95:92:33:e6:
                    83:71:e1:ec:68:2f:9e:55:2c:20:d4:3d:86:60:87:
                    c8:b1:d1:4e:6d:5b:6a:f2:74:1d:dd:98:b8:a0:62:
                    05:ee:ab:75:46:a6:bd:e6:95:e6:60:af:a1:7f:d1:
                    26:3d:a5:ed:8d:2e:2e:ec:82:ad:16:e1:6e:9c:59:
                    97:4c:cb:44:25:ed:00:54:c3:a5:97:26:56:83:22:
                    90:69:36:89:af:5d:b6:7e:e6:cc:ba:36:bc:f4:50:
                    3c:3d:55:c4:d4:a7:18:bf:3b:02:db:9a:d7:69:34:
                    db:16:bd:db:bf:6f:8d:d5:0e:f6:7c:4d:c3:0b:1b:
                    96:cb:3b:73:cb:9b:f0:97:49:4e:f4:04:2d:2e:f0:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A4:CB:82:8A:1E:9F:53:43:78:97:A2:F1:81:9E:92:B0:48:AD:40
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/qaTLgooen1NDeJei8YGekrBIrUA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:3f:a7:39:67:40:97:c8:57:e3:8f:6d:5c:cb:05:b9:13:
         74:7a:2e:de:d7:fb:60:d5:92:05:60:47:3f:82:2e:93:6e:8e:
         60:a1:6d:e0:a4:4f:4b:96:8d:39:be:76:63:54:10:b2:6e:b2:
         7b:1a:6e:f6:ae:9f:d1:61:bd:d9:d6:f8:8d:2d:bd:42:d9:87:
         5f:7a:9f:a1:6e:b3:0f:56:63:48:b6:25:9c:27:91:44:ce:97:
         bd:bd:81:df:0e:81:6a:64:b8:c4:1d:94:fb:86:7a:07:12:c1:
         dc:29:d7:b6:f3:c0:fb:46:99:d0:72:cd:a1:65:58:50:4b:c7:
         c0:30:95:b6:a0:4d:83:e8:f1:86:38:20:66:5b:bf:6c:70:79:
         76:d2:5e:0d:4a:20:98:f7:2f:35:dc:07:1a:d2:84:48:80:9c:
         6a:9a:fb:43:c7:9f:4e:92:3b:c2:a6:3e:e8:1f:56:ee:70:74:
         40:34:80:86:df:8a:ca:37:7a:fe:67:5c:3d:0b:c1:9e:3f:d0:
         c0:39:d1:ad:70:96:65:2e:8b:fe:66:f4:b5:af:e2:54:8e:a5:
         32:04:af:2a:38:81:d1:d9:d6:fb:cd:92:99:df:6d:4b:23:11:
         d7:42:1d:fd:52:7f:d9:a0:aa:90:03:97:d5:99:a3:39:98:27:
         86:1f:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:35 2026 by rpki-client