Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/tlX4nvmHxaM91TMe6OfDjKe2BM8.roa
File:                     tlX4nvmHxaM91TMe6OfDjKe2BM8.roa (raw, json)
Hash identifier:          WVQIJgxIWhDPn1AJkAtEHtmMn/Nof+WMMrZ2hMfvguk=
Subject key identifier:   B6:55:F8:9E:F9:87:C5:A3:3D:D5:33:1E:E8:E7:C3:8C:A7:B6:04:CF
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       37
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/tlX4nvmHxaM91TMe6OfDjKe2BM8.roa
Signing time:             Tue 31 Mar 2026 08:42:32 +0000
ROA not before:           Tue 31 Mar 2026 08:42:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        124.241.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Mar 31 08:42:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B655F89EF987C5A33DD5331EE8E7C38CA7B604CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:89:28:b0:48:27:94:d8:04:c4:8a:cd:57:
                    76:9b:7d:58:64:39:42:89:57:b8:14:ba:30:ca:49:
                    8a:a4:b7:ee:f7:32:5b:c2:d7:90:46:78:c9:b6:e8:
                    c1:b8:28:61:86:a1:92:c5:c6:52:b8:37:87:9b:ed:
                    f3:f0:bc:e9:e2:56:90:3d:40:19:66:e3:98:96:af:
                    ba:9a:68:16:36:3f:81:ff:e7:5b:a8:ba:b2:e6:e9:
                    c1:78:ce:10:84:02:e6:b4:f2:a5:08:81:ce:7b:b4:
                    53:78:f3:c5:14:a3:2e:65:c4:a3:34:fd:03:9b:00:
                    ef:da:60:bd:47:77:d7:6a:e8:7c:fe:be:82:e7:77:
                    a8:74:2c:3c:35:11:d1:f0:fc:33:92:0e:02:b9:a8:
                    90:b6:0f:f1:21:ae:43:1a:a4:22:02:dd:d5:2a:d0:
                    b7:93:09:b2:93:ab:cf:6d:fa:73:35:57:1d:30:c2:
                    43:08:d2:ce:95:05:ce:a8:80:80:c5:95:59:45:e6:
                    8e:8b:e0:d6:36:d3:4b:55:45:93:96:b0:a3:4a:ff:
                    65:cb:e7:35:45:fb:8c:1d:6d:7b:30:93:90:78:39:
                    35:4d:bc:1d:8c:89:87:8a:fd:bd:86:2b:e1:14:6f:
                    cc:f8:b9:5a:f6:96:84:95:4f:17:ee:96:7b:70:31:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:55:F8:9E:F9:87:C5:A3:3D:D5:33:1E:E8:E7:C3:8C:A7:B6:04:CF
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/tlX4nvmHxaM91TMe6OfDjKe2BM8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.241.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a9:27:35:13:ea:9f:b1:3a:19:cb:01:69:5e:b7:18:69:8a:60:
         83:68:68:6c:67:95:09:f1:21:d9:51:0e:ae:93:30:ad:f3:73:
         63:73:41:da:19:88:f4:e3:93:5c:32:01:ae:58:4d:19:db:d2:
         77:49:36:85:d6:e6:e6:54:98:a5:f6:06:65:1d:fd:8c:5d:84:
         8c:a3:a3:60:03:1f:d8:4d:5f:81:c4:82:61:eb:99:bd:3e:80:
         28:2b:c9:02:71:ad:71:b1:18:a4:fd:d6:8c:57:bf:cb:cc:2c:
         b9:ac:e4:97:27:1b:db:d2:1c:ee:63:75:64:15:4d:5a:b1:94:
         8b:02:b2:c7:33:0f:98:57:e9:48:ba:18:b9:e0:d2:f4:bd:4a:
         2c:e5:31:f4:3c:dc:af:0c:bf:83:50:de:37:22:30:a2:0e:0e:
         21:9a:7c:fd:f1:45:2c:31:04:33:36:bc:36:ac:e6:18:4a:a0:
         01:17:7d:4f:23:28:db:58:c3:2e:13:c7:53:8c:cf:8b:20:d5:
         4b:4d:6f:4c:94:14:ea:fa:a1:38:42:71:65:0e:d9:c3:77:ad:
         aa:5a:bb:8e:ea:5e:be:37:37:09:6d:36:c9:53:b2:df:e6:6e:
         8f:aa:61:47:6e:4e:f8:bc:7f:93:0f:18:6a:af:82:82:80:15:
         a9:d5:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:46 2026 by rpki-client