Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/RlywlC1mqrnoYCmhfpaPbVae09o.roa
File:                     RlywlC1mqrnoYCmhfpaPbVae09o.roa (raw, json)
Hash identifier:          jYYrsLv8xmgJMFoQpHXuhLKCDRQzfWmkTqo1DegR9aI=
Subject key identifier:   46:5C:B0:94:2D:66:AA:B9:E8:60:29:A1:7E:96:8F:6D:56:9E:D3:DA
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       62
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/RlywlC1mqrnoYCmhfpaPbVae09o.roa
Signing time:             Tue 31 Mar 2026 07:51:48 +0000
ROA not before:           Tue 31 Mar 2026 07:51:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     138384
IP address blocks:        119.30.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Mar 31 07:51:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=465CB0942D66AAB9E86029A17E968F6D569ED3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:0c:b5:79:41:ef:52:aa:6d:d3:40:cb:5f:
                    93:53:7b:f1:fd:9f:4f:c4:48:01:9e:3b:68:c2:f8:
                    ad:3c:3b:03:1c:b3:a9:30:f0:ae:84:06:90:b5:e6:
                    6d:96:df:2b:44:61:5d:c7:77:e4:51:7d:d9:0d:3f:
                    23:37:e8:9c:0b:7b:5f:8b:0d:f0:e5:be:94:5e:98:
                    c1:43:8a:a2:bd:4c:11:30:49:e1:01:cd:d7:31:7c:
                    df:03:26:15:57:eb:82:fb:53:c8:d8:99:ad:a3:80:
                    ed:b5:15:50:c5:11:c7:ad:41:ac:b8:5b:53:b1:82:
                    c0:ce:64:be:c5:8a:05:e4:3a:52:c5:07:fd:33:c5:
                    87:02:a3:c7:3d:fc:5c:be:ac:88:0c:86:06:17:b2:
                    10:9f:8f:93:dd:bd:ac:0b:8b:e5:cb:d0:29:86:df:
                    74:a2:a0:01:04:16:f8:34:18:4e:63:da:fe:0a:f8:
                    20:53:73:06:91:5d:fa:5b:31:d2:3c:5b:2a:99:a2:
                    20:b7:cc:60:28:d0:6f:d7:0d:5c:58:e2:7a:5f:f5:
                    01:44:f5:2b:37:e0:e9:0a:36:a6:21:1c:02:40:40:
                    81:72:0c:78:8b:0f:fe:da:49:3b:1d:2c:bf:93:ea:
                    2e:04:28:34:4d:fa:4e:c0:d4:d6:e7:c6:b6:1d:fa:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:B0:94:2D:66:AA:B9:E8:60:29:A1:7E:96:8F:6D:56:9E:D3:DA
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/RlywlC1mqrnoYCmhfpaPbVae09o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         89:48:75:d5:e4:6d:9d:a5:80:c9:a8:86:44:d8:83:c6:e0:29:
         3a:7b:75:f7:3f:1b:7b:94:32:92:e1:68:eb:c2:75:72:be:f2:
         ae:e0:52:09:47:76:1f:9c:d5:09:f5:36:80:e2:d9:9d:6f:c2:
         4c:fc:a3:a4:42:f0:13:7c:bc:f7:f4:c6:63:3a:fa:46:1a:05:
         1f:6f:75:e9:6e:63:bd:ac:75:16:fd:0e:f4:9a:1f:75:f4:3b:
         91:e2:54:35:b9:ac:a7:0c:92:b7:d0:03:75:3f:1b:7a:06:b8:
         82:8c:ee:c5:a6:7a:9d:a0:9d:58:3f:9b:c9:6c:4a:75:92:df:
         4b:e3:96:9c:62:ae:29:b8:49:de:c1:8c:3c:f6:8c:57:74:68:
         d4:c8:81:5e:45:90:12:2e:c8:4d:30:90:27:95:68:a6:b3:b5:
         ef:3c:cb:d5:1e:1f:14:0e:86:3d:2c:db:a6:2a:53:ac:cb:45:
         7b:5a:a8:64:be:57:30:8b:5e:eb:4d:58:48:36:05:93:88:a3:
         31:09:a4:7b:2a:05:95:ea:5a:53:fb:7e:2f:43:94:3a:d3:5f:
         0e:a7:ea:3f:78:c9:f2:6c:eb:c0:c3:e5:ce:61:a0:1e:8b:3c:
         11:06:65:a4:07:0b:83:5b:9e:f1:19:cc:ad:78:d4:a8:f9:08:
         76:e0:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:08 2026 by rpki-client