Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/WTVZJREPiyWi6s8oBWPpi3shA4w.roa
File:                     WTVZJREPiyWi6s8oBWPpi3shA4w.roa (raw, json)
Hash identifier:          DPlviYSc8Db6KeGdG6RlVzmZa3YuvKXvlHjFgeBwVF4=
Subject key identifier:   59:35:59:25:11:0F:8B:25:A2:EA:CF:28:05:63:E9:8B:7B:21:03:8C
Certificate issuer:       /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial:       2B
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/WTVZJREPiyWi6s8oBWPpi3shA4w.roa
Signing time:             Sun 01 Mar 2026 01:35:29 +0000
ROA not before:           Sun 01 Mar 2026 01:35:29 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     23827
IP address blocks:        202.84.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
        Validity
            Not Before: Mar  1 01:35:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=59355925110F8B25A2EACF280563E98B7B21038C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:1f:3d:fc:63:ce:06:ab:dd:ed:f6:58:8e:
                    a9:23:b2:9e:a6:bd:b8:47:fa:bc:e4:bd:2e:a3:8a:
                    ec:ef:d4:4e:0b:b9:f4:c1:5b:bd:b5:46:4a:dc:e5:
                    7a:6d:85:9f:42:6a:2a:67:c7:7b:18:c8:01:25:8e:
                    76:d7:5c:87:a7:ea:ae:8d:40:8a:01:6c:22:3e:72:
                    6d:e7:90:92:5e:01:6d:b5:d9:4e:d5:a1:e0:7e:a1:
                    0f:34:8c:c2:9b:1d:94:8f:06:b8:c2:5a:8e:36:91:
                    17:75:87:33:64:bc:44:5a:e0:e0:b0:5e:59:4a:72:
                    bf:be:87:9d:54:f5:5b:0d:13:b1:53:05:97:34:57:
                    ac:50:d3:35:e3:62:58:6f:33:40:dd:65:35:f7:97:
                    7c:5b:5a:1d:08:4b:b8:f3:81:0b:2a:6d:a4:58:98:
                    55:8e:2e:b3:42:00:78:5f:24:ff:da:75:a7:ce:0f:
                    82:70:83:0b:2c:e6:fe:a4:f4:59:a8:2a:2b:84:f5:
                    97:31:5d:ac:d5:71:d3:a0:2d:ab:f1:8d:3a:c3:f1:
                    87:54:65:18:e7:84:fd:2e:3f:df:a8:99:b3:08:d0:
                    1d:1f:e6:a6:72:7a:3e:82:22:d3:41:a0:4b:11:2d:
                    b3:b8:a4:c8:6f:68:a8:c5:ca:c5:94:02:dc:d0:87:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:35:59:25:11:0F:8B:25:A2:EA:CF:28:05:63:E9:8B:7B:21:03:8C
            X509v3 Authority Key Identifier:
                keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/WTVZJREPiyWi6s8oBWPpi3shA4w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.84.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:78:e6:40:03:e5:8e:20:b6:54:33:d8:ad:0f:83:7e:b6:38:
         5e:f0:b4:43:63:32:6c:24:d7:2c:44:30:92:71:63:50:6b:12:
         f0:e0:e4:90:ed:55:5d:f6:cb:51:da:69:6b:c1:4f:c2:6e:90:
         65:1d:9a:3d:fb:57:74:10:c6:00:40:1e:51:f1:1b:b1:a6:91:
         31:39:e5:bc:96:7c:ce:fd:e9:93:24:d4:df:70:49:79:9f:eb:
         1d:10:d1:9c:1b:2c:a1:48:f5:a7:7e:e3:e5:3b:22:5a:43:ae:
         64:c7:28:f6:e2:42:8a:5a:6b:da:c9:04:1a:36:57:4c:02:4f:
         af:19:c4:a1:7b:bc:83:0d:ae:d6:fa:8b:64:31:f5:b0:9d:d7:
         87:0b:bf:70:09:55:6a:64:fd:b6:49:63:81:de:6f:7c:8e:33:
         06:40:52:d0:91:0c:c6:1e:9f:2d:1b:f3:1d:f2:ab:24:df:98:
         98:20:b8:30:56:ea:0e:6e:6d:50:eb:b7:bc:c0:1a:e1:7f:da:
         42:f8:51:41:82:6f:22:8e:d9:68:eb:a6:ce:1e:9c:ea:55:62:
         b3:e0:2e:74:8e:d7:fb:3f:68:eb:a6:b6:30:f7:ca:94:78:b9:
         d0:03:7b:2e:6e:13:dd:a5:bc:f4:67:8c:b2:22:b5:1f:98:06:
         16:e8:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:35 2026 by rpki-client