Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OLVZNjclAUHWaKxSTbmgoQH85Fg.roa
File:                     OLVZNjclAUHWaKxSTbmgoQH85Fg.roa (raw, json)
Hash identifier:          BxXoBDkyVW5ypKv7RYQYsbYyZf65jLQvssJG20qozys=
Subject key identifier:   38:B5:59:36:37:25:01:41:D6:68:AC:52:4D:B9:A0:A1:01:FC:E4:58
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       015A
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OLVZNjclAUHWaKxSTbmgoQH85Fg.roa
Signing time:             Tue 31 Mar 2026 07:48:03 +0000
ROA not before:           Tue 31 Mar 2026 07:48:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     3949
IP address blocks:        61.200.81.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=38B5593637250141D668AC524DB9A0A101FCE458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:b1:5f:ec:e3:18:59:8a:c9:da:66:68:d2:
                    d4:eb:18:bf:e2:de:34:67:c7:50:59:5a:54:50:58:
                    52:3b:98:39:81:f1:c9:2e:9f:bf:08:0d:a0:65:21:
                    82:dd:4d:9a:22:c9:f4:ee:bf:4c:8c:ff:fc:9b:62:
                    81:cf:31:8e:fa:4b:50:28:1a:2e:af:19:3e:71:66:
                    23:5c:37:a1:c1:e5:61:97:9e:6c:36:92:23:31:02:
                    1a:26:70:34:23:64:a0:51:10:93:c4:4a:0c:b6:66:
                    31:e2:58:a0:86:ab:51:d0:85:30:80:2d:ec:1c:5a:
                    8c:c5:33:56:fd:45:18:48:40:08:56:24:dc:9b:8b:
                    1b:a9:69:0d:74:27:8f:c5:b9:5e:c6:3a:9f:9e:86:
                    96:32:5d:63:75:a5:47:30:83:08:c2:05:10:33:43:
                    64:25:35:f2:bf:8b:8e:de:d6:7b:6d:c5:fc:74:7d:
                    c1:d8:74:6a:c7:bb:86:46:05:88:df:7a:20:37:c6:
                    17:9f:f4:78:1c:91:cd:e6:57:54:3f:e9:3c:2e:84:
                    16:1f:88:ab:97:d5:29:8c:01:c5:8b:19:86:69:89:
                    fa:6c:bd:56:60:7b:91:2a:cf:7c:6e:fa:1c:9b:ab:
                    09:45:0b:c5:ee:e7:f0:5a:3f:3e:36:2d:a3:d0:e1:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B5:59:36:37:25:01:41:D6:68:AC:52:4D:B9:A0:A1:01:FC:E4:58
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OLVZNjclAUHWaKxSTbmgoQH85Fg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.81.64/28

    Signature Algorithm: sha256WithRSAEncryption
         b2:71:dd:c6:e2:98:3a:49:d9:7c:12:24:66:70:e1:aa:9f:16:
         c2:60:44:e9:c9:85:6c:92:45:18:f2:96:c0:af:eb:4b:7e:90:
         7f:8f:f4:12:aa:73:6b:6f:92:e4:f6:25:6b:7b:f7:9f:fc:a5:
         0f:41:e1:d9:d4:06:29:9b:e3:dd:12:f6:d7:e1:ce:bd:f6:92:
         3b:d1:1b:d2:68:97:8b:33:33:c2:db:7d:fe:69:22:cc:00:ee:
         ee:38:f2:92:ff:b4:12:03:cc:f3:ab:40:01:63:e6:7c:ad:7e:
         4d:0e:c3:e6:38:2c:7b:5c:c5:ad:ff:81:27:d2:72:28:fc:b0:
         02:69:cc:40:ef:b3:fa:e2:7e:33:32:77:1a:c5:e4:97:d2:b1:
         14:4b:a9:33:fb:1d:a8:17:6d:33:0d:b1:61:dc:13:b8:04:97:
         c2:28:8a:d5:7c:a8:95:63:bc:0d:5e:04:98:aa:37:3b:cd:69:
         fb:ce:c6:9a:f8:4c:c0:d0:7d:ba:33:f5:6e:f8:5d:8d:4a:03:
         30:c0:e9:50:6f:0a:78:51:e0:82:bc:fd:08:a2:c3:41:6d:87:
         9a:f8:39:4a:cd:1e:fa:0a:63:1d:59:5c:eb:e8:d1:39:6e:a8:
         30:dd:cf:8b:4b:f8:74:e3:b5:20:24:74:a4:35:29:90:8c:9c:
         57:2a:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:15 2026 by rpki-client