Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/VVAsNnP7Y8LBqxBbcB5b9oXcQjQ.roa
File:                     VVAsNnP7Y8LBqxBbcB5b9oXcQjQ.roa (raw, json)
Hash identifier:          t/rVFhVYSeff0eVcS8wYYx0QcuUIi+Xgqrzn2xPMOqg=
Subject key identifier:   55:50:2C:36:73:FB:63:C2:C1:AB:10:5B:70:1E:5B:F6:85:DC:42:34
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       57
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/VVAsNnP7Y8LBqxBbcB5b9oXcQjQ.roa
Signing time:             Tue 31 Mar 2026 07:51:00 +0000
ROA not before:           Tue 31 Mar 2026 07:51:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55396
IP address blocks:        192.50.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Mar 31 07:51:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=55502C3673FB63C2C1AB105B701E5BF685DC4234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:9d:23:4f:9b:a1:32:3f:95:25:4c:63:44:
                    ac:09:49:b6:c3:2d:cc:26:26:7c:30:a0:de:6c:b9:
                    c5:ae:e4:31:df:1e:1a:56:c0:8f:2f:2f:88:8e:ae:
                    5f:04:49:a5:94:88:a8:f3:52:0c:06:17:eb:f4:b1:
                    20:73:c6:b0:90:c0:a0:2b:d4:40:cc:07:e2:db:6b:
                    81:fb:26:cb:d2:de:05:81:9b:b7:79:16:58:8a:58:
                    3b:a0:31:a7:d0:1d:2a:24:eb:77:a7:b2:96:c7:e4:
                    d8:af:0a:6a:a2:9e:1c:66:ed:17:56:88:ee:a8:35:
                    19:38:70:11:5e:04:d8:eb:97:e4:b8:54:61:40:d8:
                    0f:b7:83:fb:92:5f:a6:68:cc:da:a3:eb:15:e9:d6:
                    60:37:33:f2:f1:55:c6:96:2a:ae:e4:1c:a5:0d:02:
                    b4:f2:2e:58:d1:00:bd:f3:0c:c6:c2:0b:0f:f3:d1:
                    83:53:00:95:ab:92:8f:3f:17:06:f1:92:ab:bf:a7:
                    31:e9:dd:41:22:00:2d:e8:18:36:e3:a8:cf:a6:bd:
                    dc:63:63:7c:22:d7:0a:75:8b:a5:dd:e8:93:dd:31:
                    27:ad:1b:ad:98:5d:72:62:e4:8f:22:93:ec:0a:3c:
                    7b:d7:e9:4d:ae:ba:f9:cf:12:02:ea:a1:62:0c:49:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:50:2C:36:73:FB:63:C2:C1:AB:10:5B:70:1E:5B:F6:85:DC:42:34
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/VVAsNnP7Y8LBqxBbcB5b9oXcQjQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:fd:bf:bc:53:88:c4:73:03:aa:78:76:92:4d:16:32:c8:00:
         e8:5f:bc:24:3b:94:3f:ce:49:b1:2a:bb:ee:48:28:c0:9a:c1:
         8a:c9:17:a0:57:f0:e5:8a:2c:ff:ed:f1:0e:16:86:ec:81:86:
         ec:e3:ef:00:ec:45:d5:11:e1:d6:90:8d:e5:4c:82:01:17:d5:
         9c:23:b1:2c:aa:7e:62:a3:82:07:fc:6b:c9:53:9e:79:7b:93:
         a1:1c:7c:04:ad:03:20:cb:22:88:ce:52:41:43:b5:73:5d:37:
         77:27:0f:3c:36:23:17:51:3c:3d:ae:bf:fa:37:cc:2f:94:b0:
         58:2d:a2:f5:47:3f:11:72:00:93:89:1a:67:be:d6:d9:e6:a6:
         63:e1:b4:3f:bf:4a:47:1f:8c:55:9b:12:4e:a5:8e:ea:43:5b:
         fa:43:46:3a:3c:68:0b:38:6d:4b:e8:85:9c:3e:93:c3:8b:ca:
         35:63:c7:b4:2d:31:f4:a1:95:98:fe:69:bb:56:29:72:60:c9:
         28:7e:67:dd:b5:66:0d:75:7b:57:21:7b:89:08:26:04:1f:dc:
         08:85:66:2b:8b:6e:cb:30:20:25:d8:6a:30:ca:06:96:21:d1:
         48:20:ab:19:37:df:b2:99:30:78:42:75:0c:48:63:66:7d:92:
         58:87:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:34 2026 by rpki-client