Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/-01sPCxY6aK8XIplctlPT2k0T1Y.roa
File:                     -01sPCxY6aK8XIplctlPT2k0T1Y.roa (raw, json)
Hash identifier:          yzwtatnZY2MiAbwgp0gKXgjjoksyJ4ZwJt+kA2AKc5I=
Subject key identifier:   FB:4D:6C:3C:2C:58:E9:A2:BC:5C:8A:65:72:D9:4F:4F:69:34:4F:56
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0156
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/-01sPCxY6aK8XIplctlPT2k0T1Y.roa
Signing time:             Tue 31 Mar 2026 07:48:00 +0000
ROA not before:           Tue 31 Mar 2026 07:48:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59130
IP address blocks:        61.120.149.89/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FB4D6C3C2C58E9A2BC5C8A6572D94F4F69344F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:e8:76:fd:b1:30:03:75:8b:19:77:9b:0d:
                    d6:c3:95:65:5b:45:d3:2b:cc:a4:26:b0:8e:02:c8:
                    7c:b2:0d:d1:b9:34:88:33:90:6e:8f:14:32:2c:09:
                    1a:9d:76:e3:23:47:df:e4:1f:7c:85:e9:34:9a:2c:
                    5b:96:0c:3a:ad:bd:9d:48:49:92:6a:1d:65:db:a9:
                    ae:5b:6d:81:74:0e:b6:09:2f:ac:b8:a4:b0:36:bf:
                    fc:cc:b8:9a:eb:22:99:69:a5:09:60:31:14:49:4a:
                    2b:82:56:e3:b2:b1:43:36:cc:00:51:c3:bb:55:95:
                    0b:4d:1b:f9:a7:5e:14:61:10:ed:aa:b2:aa:aa:6c:
                    73:2c:40:56:14:fd:2a:f5:7a:6b:37:d8:9d:17:6e:
                    7d:01:13:d0:86:16:da:07:96:da:25:4b:3a:5b:3b:
                    ee:24:ca:b2:41:86:50:88:76:1b:90:16:c3:77:70:
                    96:87:54:b0:4c:9d:f2:5b:83:02:19:15:f7:16:cc:
                    94:6e:bd:f7:d9:9b:9d:55:f6:50:2d:fa:75:07:fa:
                    fa:42:a9:f6:58:7d:89:44:52:8c:72:e4:15:b8:fd:
                    f2:d1:75:b9:8b:06:58:e9:8d:83:45:dc:bd:23:a5:
                    3b:3c:c9:1f:c1:7f:18:89:a9:12:5c:37:02:58:f0:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4D:6C:3C:2C:58:E9:A2:BC:5C:8A:65:72:D9:4F:4F:69:34:4F:56
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/-01sPCxY6aK8XIplctlPT2k0T1Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.149.89/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:63:35:24:a8:19:15:68:f0:ee:d9:4e:8f:15:f5:4f:bd:02:
         9e:97:cc:7c:01:fb:c8:b9:8c:87:2f:40:29:e5:8a:3e:bf:3e:
         b9:a5:03:94:0a:be:c3:a7:c9:68:97:fe:6e:bd:90:e6:ab:9e:
         24:a5:f4:ee:07:d5:08:df:cb:c9:74:1b:93:da:7a:e5:02:af:
         dd:a4:98:3b:ad:c3:60:72:27:1e:86:6f:0a:f8:f2:ae:08:02:
         84:4f:10:75:2f:9b:13:5f:11:9a:87:62:40:7a:c9:96:ed:8f:
         43:b6:f7:b9:8f:92:26:7b:f4:f4:96:c5:81:98:83:b6:c6:2d:
         47:41:10:65:1d:9b:dc:33:14:18:43:10:d6:91:51:3d:96:bb:
         38:38:a1:27:96:c6:29:93:c3:3e:31:ed:2f:c8:79:5e:0a:9a:
         91:14:30:9b:8a:f9:77:d7:1a:7a:eb:ca:99:8e:74:82:b5:22:
         59:a6:60:2c:c1:3c:e2:7e:37:e1:94:b3:cb:7e:4f:9c:86:20:
         bd:ad:79:73:f3:b4:2b:9e:7a:17:f4:5d:f9:fa:2b:7e:8a:01:
         94:5a:1b:81:e7:d1:22:41:9c:b2:40:33:e5:f7:5a:5b:8c:ce:
         da:e6:74:79:d1:db:5e:a6:c4:bd:ad:0f:9c:62:bc:d1:31:03:
         da:56:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:01:23 2026 by rpki-client