Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/la70a-ZaBISEVCJdBjvWL6-zd3Q.roa
File:                     la70a-ZaBISEVCJdBjvWL6-zd3Q.roa (raw, json)
Hash identifier:          HOeMneN5HlCZ3WH4qCMBJaXZf4lQ3CuGRtYB97B9BJY=
Subject key identifier:   95:AE:F4:6B:E6:5A:04:84:84:54:22:5D:06:3B:D6:2F:AF:B3:77:74
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       33
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/la70a-ZaBISEVCJdBjvWL6-zd3Q.roa
Signing time:             Tue 31 Mar 2026 08:42:30 +0000
ROA not before:           Tue 31 Mar 2026 08:42:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        61.211.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Mar 31 08:42:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=95AEF46BE65A04848454225D063BD62FAFB37774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:32:62:9b:9e:8c:79:15:29:a5:3a:3e:6d:
                    bd:34:a4:69:b4:32:a0:62:4e:20:5d:b4:89:b3:5d:
                    a3:20:27:64:db:50:39:d1:29:da:a6:1f:88:61:c0:
                    eb:83:c3:09:f7:56:c1:cc:dd:15:77:e3:19:65:f8:
                    04:27:17:f1:4f:37:9b:5e:db:56:c4:ba:15:00:fa:
                    20:1d:19:77:03:86:46:da:a8:41:a7:75:24:71:56:
                    46:51:86:85:e1:c2:07:06:2a:4c:10:f1:22:56:dc:
                    08:b0:4f:53:5f:fa:5f:c7:c8:8a:40:fd:70:35:14:
                    13:12:04:0d:b2:5e:21:ba:02:aa:54:e4:f8:65:62:
                    18:46:e6:9a:e1:27:d2:f4:45:81:a0:52:38:23:d5:
                    2a:c3:c4:c9:46:92:54:03:57:b4:d5:5d:bc:75:a2:
                    13:2c:3e:03:86:8c:e2:b5:09:cf:91:70:2b:11:c9:
                    c0:6a:8b:54:13:89:bd:80:0f:2e:d7:90:77:1e:e6:
                    00:10:e3:35:9a:37:10:82:9e:ad:b4:a8:05:7d:34:
                    2b:d6:1d:25:f7:0b:08:79:5f:1f:45:0f:83:e3:2b:
                    ee:7b:b1:5d:04:1d:89:8b:49:40:96:54:4a:fc:2e:
                    95:a7:b8:0b:cf:8d:86:eb:60:db:40:0e:64:51:36:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:F4:6B:E6:5A:04:84:84:54:22:5D:06:3B:D6:2F:AF:B3:77:74
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/la70a-ZaBISEVCJdBjvWL6-zd3Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:59:1e:16:3a:0b:ef:77:b7:8a:82:46:a0:f5:0d:4d:92:6e:
         d4:99:4b:5e:5f:27:17:ce:ac:a0:fc:26:bc:e7:c0:64:9c:9d:
         e9:12:20:34:55:27:a8:0e:7a:e9:20:1b:58:8a:ca:37:e2:ff:
         f0:af:a7:9e:44:3f:a5:95:0c:9a:dd:6a:b5:df:9e:00:23:bb:
         86:d5:26:92:41:2b:46:d0:a5:2f:44:20:aa:03:1f:29:84:ee:
         4a:76:f5:52:df:e7:f2:81:e1:a8:1f:3a:f1:c5:b3:7e:73:2e:
         9b:b8:f5:c9:35:4b:2f:69:86:ed:c7:9b:12:8a:9a:91:1d:27:
         07:8e:53:c0:ca:f9:35:51:b0:9c:1e:d9:fc:90:41:4c:fc:df:
         26:a6:f2:d0:bf:db:ff:1b:d9:94:9f:15:d3:cd:52:0b:d2:b3:
         5c:d4:ff:b8:e6:41:08:fe:a9:40:42:6b:7c:53:4d:06:39:d5:
         b9:93:db:a1:32:a4:5b:cc:13:95:80:00:ba:f5:a7:0e:3d:f1:
         0b:a8:9a:cf:f4:8e:82:ca:d4:3d:62:3c:a0:79:e3:12:1d:a1:
         ad:92:9e:f9:bd:ea:af:11:58:b8:3c:4d:2c:0d:05:49:11:2c:
         4a:57:ea:c6:64:f4:4d:0a:c6:24:00:c9:86:69:af:f4:8f:ac:
         1b:46:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:33 2026 by rpki-client