Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/JZZSZwgRK-75JW6SqTM_bG8OJRo.roa
File:                     JZZSZwgRK-75JW6SqTM_bG8OJRo.roa (raw, json)
Hash identifier:          PgzY4MQuQ+1O1SuwntFq151I43lg2/rmI1v1VyoX3tw=
Subject key identifier:   25:96:52:67:08:11:2B:EE:F9:25:6E:92:A9:33:3F:6C:6F:0E:25:1A
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       39
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/JZZSZwgRK-75JW6SqTM_bG8OJRo.roa
Signing time:             Tue 31 Mar 2026 08:42:33 +0000
ROA not before:           Tue 31 Mar 2026 08:42:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        180.200.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Mar 31 08:42:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2596526708112BEEF9256E92A9333F6C6F0E251A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:83:4d:d4:ca:7b:66:92:bf:48:3b:80:8e:
                    82:a0:94:01:d9:cf:2e:f4:3e:1d:ae:0e:c1:23:f7:
                    c6:08:b6:60:2f:00:62:89:2a:26:cd:20:38:08:c0:
                    ba:4b:11:06:2a:45:f9:8f:14:0a:51:0a:ca:01:e1:
                    b2:7e:db:00:b7:60:bf:6c:19:87:08:42:f1:eb:2f:
                    0d:e2:f6:77:2c:ca:5a:f1:65:99:10:9b:ed:d4:07:
                    f1:23:0a:97:53:86:10:e1:37:89:8d:fa:b9:d3:0a:
                    24:22:69:9f:68:59:b2:57:e5:a6:bb:a6:97:4a:ad:
                    12:84:69:9f:f7:aa:ac:ff:50:04:31:9a:e5:6a:b8:
                    84:c1:e9:ef:cd:f2:14:f4:3f:4f:1b:80:4f:69:2e:
                    c0:7d:5e:8b:b7:57:38:6f:c8:dc:3c:8a:2b:ed:1b:
                    2e:e4:c5:f4:e8:fa:9d:e9:0b:fc:4a:5d:a5:b4:2c:
                    75:61:38:93:9b:ba:dd:a4:1a:18:47:35:c6:0b:36:
                    f0:8f:85:b3:f0:af:2d:69:7a:94:73:f3:b0:ab:cc:
                    76:00:b0:db:55:e1:d7:e0:ce:16:ca:55:b8:4b:f1:
                    73:c8:cc:d1:00:fd:a5:ba:3b:77:b3:0a:99:d0:73:
                    72:3c:37:c8:fc:69:48:37:2e:73:da:e3:48:40:07:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:96:52:67:08:11:2B:EE:F9:25:6E:92:A9:33:3F:6C:6F:0E:25:1A
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/JZZSZwgRK-75JW6SqTM_bG8OJRo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.200.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:5e:bf:6b:42:c9:9a:da:f8:c3:c5:3f:ee:78:a4:74:de:
         8a:14:14:7c:c0:1b:39:fc:74:9c:9a:f5:35:62:06:90:15:16:
         16:03:55:28:10:b2:ba:05:18:9b:b8:07:33:8a:24:cd:cc:22:
         60:c1:30:74:b0:13:f4:64:dc:ce:e9:7e:56:91:5d:d0:81:5a:
         bf:e9:e0:de:49:a2:8c:28:f1:30:8d:94:22:6f:ef:aa:d6:8b:
         82:5a:65:29:37:fd:16:b7:22:f1:b1:f1:fe:33:8a:b2:15:01:
         4d:02:4d:db:14:30:14:2b:21:de:b2:35:d7:20:c0:f8:6c:9e:
         59:e3:88:4b:e8:35:7d:ae:f5:3f:0a:25:b4:62:9a:fb:2c:56:
         a0:cf:01:25:3c:30:82:58:35:2f:7a:7b:5c:6a:e4:cf:a2:94:
         e6:63:64:79:73:b4:74:b0:84:5a:6d:53:f6:9c:5b:c8:0c:85:
         a1:44:44:46:3d:69:dc:24:44:bf:50:95:2d:65:dd:31:ad:57:
         f1:7d:c6:ab:01:63:cf:16:53:30:c5:17:e9:39:76:e3:76:19:
         1c:30:1a:80:ba:b9:72:3e:cf:f4:3e:f2:a3:cf:d6:06:67:c5:
         fb:a4:b6:c4:d9:56:a7:f2:a1:43:a2:3f:5e:b6:c9:f1:86:9d:
         52:09:03:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:10 2026 by rpki-client