Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/CBWS2siEZkjpaCwj62PTlSVN6mY.roa
File:                     CBWS2siEZkjpaCwj62PTlSVN6mY.roa (raw, json)
Hash identifier:          ClxxFkITBeDwF+CZdfO5MTQIqbcIPpb8e07AcFJlOj0=
Subject key identifier:   08:15:92:DA:C8:84:66:48:E9:68:2C:23:EB:63:D3:95:25:4D:EA:66
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       81
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/CBWS2siEZkjpaCwj62PTlSVN6mY.roa
Signing time:             Thu 01 Jan 2026 01:29:55 +0000
ROA not before:           Thu 01 Jan 2026 01:29:55 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     59105
IP address blocks:        202.226.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Jan  1 01:29:55 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=081592DAC8846648E9682C23EB63D395254DEA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:cc:bd:65:a3:1f:f8:84:bc:5c:47:52:01:
                    75:66:a4:ee:2a:38:ca:6a:28:89:8f:67:84:01:09:
                    91:60:b5:5e:71:67:2e:d2:fa:1b:40:38:89:11:60:
                    16:af:3d:02:96:13:65:ea:51:72:90:bb:81:d6:9d:
                    12:aa:18:d7:73:6f:ea:b1:7f:b0:d1:f0:6d:72:63:
                    31:90:f6:9e:e1:0d:54:a0:20:ba:25:0a:0c:c6:ad:
                    d9:9b:a2:ae:ba:44:d9:46:b7:9a:27:dd:9f:8e:c8:
                    04:c3:44:0f:8c:de:5c:3f:4e:21:ae:fb:1b:0d:ee:
                    7f:1e:94:f2:03:bc:4c:90:52:ef:a3:b9:c6:d2:ea:
                    29:48:d6:8a:be:99:bd:ef:8e:e4:8d:7b:1b:cc:fa:
                    41:ea:96:d0:35:6a:36:16:a5:a3:f3:9f:b0:8b:61:
                    77:dd:76:f4:4c:da:de:34:db:66:22:3e:1b:30:13:
                    a2:92:20:b4:d2:28:7a:06:ec:52:d4:a9:08:b0:10:
                    50:90:d3:ab:11:66:ba:c0:74:54:18:8d:ba:49:e7:
                    78:e9:49:9f:4c:da:d1:d5:05:33:46:32:71:aa:e6:
                    bf:20:12:59:b7:c7:43:19:55:00:52:62:8a:36:cb:
                    b3:50:64:2c:29:00:7b:77:f7:8d:08:7e:c9:7f:60:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:15:92:DA:C8:84:66:48:E9:68:2C:23:EB:63:D3:95:25:4D:EA:66
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/CBWS2siEZkjpaCwj62PTlSVN6mY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:91:65:50:b6:db:81:3f:79:a5:5c:43:4c:62:80:33:14:
         2f:0d:9f:bf:8b:60:f8:85:8a:86:ac:4d:11:35:b1:2b:12:f3:
         55:18:dd:f6:c1:09:94:ad:9c:c6:3e:91:3a:05:18:b8:2f:4a:
         88:57:ea:b4:ed:d2:9f:3d:29:c0:6f:bc:8f:ae:79:69:b5:dc:
         92:c0:54:8c:f3:27:eb:49:05:54:b0:99:0b:65:1d:e3:7d:80:
         ab:f8:fc:de:58:50:c0:ca:06:f5:60:ef:80:7c:e0:86:9c:3a:
         7f:e5:f8:be:fb:f4:89:09:99:79:bb:1a:4a:f9:c4:a0:76:02:
         7f:4a:c1:f4:f0:18:c3:eb:d4:11:a3:75:0a:e5:4d:1a:a5:a8:
         30:4d:1a:77:68:d6:83:ad:aa:05:90:04:94:d6:d8:3b:aa:da:
         29:3a:14:3e:df:1b:53:a4:87:61:b6:89:74:d6:07:65:de:8c:
         5f:77:5f:bc:60:cc:85:da:2f:58:4d:70:dd:c3:d8:c4:27:58:
         bb:ae:f8:f9:3f:2f:8b:c9:f9:6e:18:fd:0a:8e:66:35:85:9e:
         c3:0f:2b:46:ec:21:92:89:61:06:e5:27:02:c4:9b:47:c3:9c:
         37:93:9c:69:b2:7f:93:c8:7a:8c:2a:3b:f9:0a:6c:67:a7:34:
         96:19:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:25:23 2026 by rpki-client