Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/5FNSXVyEepL0CPHYBsUSB_CN2tw.roa
File:                     5FNSXVyEepL0CPHYBsUSB_CN2tw.roa (raw, json)
Hash identifier:          bFPUr22+cDTcvCkqEgu4GExjqnehrmGq1y29EGhzni8=
Subject key identifier:   E4:53:52:5D:5C:84:7A:92:F4:08:F1:D8:06:C5:12:07:F0:8D:DA:DC
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       32
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/5FNSXVyEepL0CPHYBsUSB_CN2tw.roa
Signing time:             Tue 31 Mar 2026 08:42:29 +0000
ROA not before:           Tue 31 Mar 2026 08:42:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        58.146.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Mar 31 08:42:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E453525D5C847A92F408F1D806C51207F08DDADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:83:47:48:64:00:15:b5:c3:65:dd:e5:5b:6a:
                    7b:4d:0b:45:fa:8d:65:8e:cf:38:d8:34:3f:8e:b1:
                    67:a2:a7:4b:f8:f0:40:8c:7c:76:ca:bc:bd:e8:2d:
                    28:f1:04:90:1b:e3:f2:b1:e2:0a:5a:cf:f6:33:db:
                    81:14:2f:b4:05:26:22:1a:7d:a6:ac:ce:aa:7b:37:
                    a1:8d:4b:de:b7:e4:32:26:c3:04:33:f3:a5:df:cb:
                    27:72:07:74:34:9f:81:bc:7e:aa:2e:d3:fe:28:15:
                    b0:55:33:82:23:fd:10:6a:27:38:f3:04:90:ec:aa:
                    3c:47:44:d4:4c:a4:06:fc:d0:f2:17:ac:56:f6:76:
                    a4:cf:bc:5d:e8:a5:f2:c1:64:1e:3d:3e:0c:8b:ef:
                    35:9f:9e:aa:5d:72:2e:2d:cc:84:7c:c3:08:fb:da:
                    f3:69:89:26:0a:6f:ab:cd:dd:6d:b0:5a:60:2f:27:
                    01:38:9a:2b:09:1c:75:bb:0b:69:69:ae:de:51:b1:
                    b3:0b:f1:2e:fa:fe:a5:06:b9:82:63:f6:ec:5c:aa:
                    e1:28:c8:81:f3:e4:bd:fb:ae:1f:b6:06:51:51:ac:
                    69:e4:1a:f0:5c:c1:61:09:b9:74:7b:04:54:87:26:
                    59:15:6f:75:40:ef:b2:e0:ed:dc:fa:21:3d:8d:d0:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:53:52:5D:5C:84:7A:92:F4:08:F1:D8:06:C5:12:07:F0:8D:DA:DC
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/5FNSXVyEepL0CPHYBsUSB_CN2tw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.146.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:03:08:af:78:94:4c:33:f6:6c:4d:33:bb:48:73:d6:e4:
         c2:71:f6:2d:9c:8d:e7:42:db:fd:57:3b:f7:b6:d6:58:10:77:
         56:38:de:8e:41:93:e0:4d:34:3f:86:ff:51:77:3b:df:5c:06:
         d7:ed:1c:fd:5e:49:1e:9e:37:80:2e:e5:c0:68:97:65:01:b5:
         f2:8a:26:b5:dd:2f:73:15:13:3e:46:76:68:3b:bf:21:d8:3a:
         a6:13:56:1c:31:fb:c2:74:d8:05:fe:24:d6:1f:ec:33:fc:90:
         8a:b9:50:bf:aa:2d:d0:05:6b:8d:8f:5f:2d:91:41:41:e0:96:
         02:ee:e2:24:a6:19:f9:c1:45:f2:1d:c3:da:e0:c5:01:b3:78:
         5d:79:ba:c8:bf:40:b7:17:a3:a0:81:a4:e1:d6:ea:51:91:ea:
         78:b0:e1:ad:18:18:5a:2f:43:c0:60:11:10:b0:e2:58:b6:af:
         15:db:7d:fa:5a:09:f6:42:d0:72:76:ef:4a:b5:e5:df:7c:8c:
         b1:a4:e0:0f:12:07:4e:88:aa:e6:c8:51:12:4d:32:13:42:1c:
         e8:fb:3f:4b:8c:29:d7:9b:fb:16:9e:b4:3a:0b:b7:bd:dd:74:
         97:83:68:0a:76:ed:82:cb:cf:db:5b:82:c7:f8:63:a2:a8:5b:
         67:f3:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:20 2026 by rpki-client