Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/QnBG8lpCkw8iPSaxELDdFMvQF84.roa
File:                     QnBG8lpCkw8iPSaxELDdFMvQF84.roa (raw, json)
Hash identifier:          GjDvC/0FzSePv1Ne1AXaYqtjGzB3tMLPKDlJ3LLALyA=
Subject key identifier:   42:70:46:F2:5A:42:93:0F:22:3D:26:B1:10:B0:DD:14:CB:D0:17:CE
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       36
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/QnBG8lpCkw8iPSaxELDdFMvQF84.roa
Signing time:             Tue 31 Mar 2026 08:42:32 +0000
ROA not before:           Tue 31 Mar 2026 08:42:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        120.138.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Mar 31 08:42:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=427046F25A42930F223D26B110B0DD14CBD017CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:df:e0:04:c4:93:fb:63:31:2d:4e:1a:a4:
                    a5:05:84:0f:bc:e5:f2:82:b1:f3:0b:13:36:cb:b1:
                    9f:c5:b8:2a:71:db:47:c9:5d:b2:d3:34:55:f1:e7:
                    99:bf:aa:b7:46:4b:f7:60:17:71:cd:fe:47:e2:bc:
                    f8:e1:c3:a7:b7:ef:c0:f8:eb:f2:af:17:de:5c:9d:
                    d3:f9:bd:e9:f4:c0:dc:24:7d:fa:17:5c:16:2a:26:
                    ed:66:24:98:0e:39:41:a5:30:36:61:e2:d7:7f:1a:
                    88:ef:64:52:02:d1:81:e2:2b:92:6b:6f:dd:04:9b:
                    5e:91:5f:85:bd:4b:43:91:fb:ef:cd:d7:c3:06:51:
                    32:06:ac:97:d0:0c:6f:72:75:e2:a7:42:c9:81:37:
                    a0:db:52:c6:c4:8a:d0:3b:12:e7:ab:7e:5b:c3:67:
                    2c:1d:a7:e9:16:fa:18:1d:00:bd:32:85:45:b5:8b:
                    ab:67:26:9b:14:b9:af:11:f9:de:a2:8e:e2:9b:f1:
                    9f:f1:f6:8b:b9:b9:7a:0e:3d:06:c5:a8:6d:81:bb:
                    89:88:17:3e:de:0c:f5:ef:94:79:13:0b:b2:48:15:
                    da:ca:19:eb:d7:45:42:0b:d3:d8:bf:51:04:d9:cd:
                    9d:40:16:f1:ba:e8:89:ee:a8:d9:27:cc:af:1e:31:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:70:46:F2:5A:42:93:0F:22:3D:26:B1:10:B0:DD:14:CB:D0:17:CE
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/QnBG8lpCkw8iPSaxELDdFMvQF84.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.138.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:0a:93:75:3f:06:62:e4:c9:ff:a1:7c:d5:d1:ba:75:28:e1:
         ee:a0:2b:9d:71:9b:d7:97:dd:d5:58:64:fc:24:f8:cf:54:78:
         48:7b:05:da:4b:44:56:57:ce:bb:a2:dd:ba:64:64:b3:41:7b:
         ce:a2:aa:3e:68:f1:ee:c4:4d:7d:19:ef:1e:2b:3f:e7:6a:aa:
         99:39:eb:34:ab:21:e3:65:70:a0:2f:21:cf:c8:c5:fe:5f:83:
         10:27:96:f0:a8:d4:43:33:a2:60:6a:9a:51:64:2a:f3:b2:8f:
         66:c5:4b:08:f4:db:93:63:60:78:d5:c5:32:29:45:ee:98:32:
         b3:e3:52:4c:ee:fe:06:90:c8:56:d0:60:ec:32:5a:3f:2d:da:
         4c:d9:b4:6d:ae:52:72:85:c6:03:c0:bb:c2:3e:f1:47:e3:2c:
         f0:a4:7f:2e:53:b0:10:11:d2:2f:87:c1:0a:9c:15:8a:af:79:
         b8:a1:ec:d4:1e:a0:8b:e0:55:92:bf:b6:17:3e:68:0d:72:2b:
         d7:f0:87:23:8d:73:3d:e4:94:ed:9e:54:06:55:3d:eb:7a:7b:
         af:2c:bd:6c:f1:74:2f:2c:df:bd:08:7d:c3:56:7a:9d:b9:bb:
         eb:cd:f3:94:4f:ed:c6:72:c4:92:cf:65:5a:a3:99:fe:03:01:
         d8:e9:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:20 2026 by rpki-client