Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/4LyPolT4nGp49KawMTrWfr-PGYA.roa
File:                     4LyPolT4nGp49KawMTrWfr-PGYA.roa (raw, json)
Hash identifier:          TeypRZ+zC9yHAq5WqQksiwyU3mu/Z3LQMyqPea4InIo=
Subject key identifier:   E0:BC:8F:A2:54:F8:9C:6A:78:F4:A6:B0:31:3A:D6:7E:BF:8F:19:80
Certificate issuer:       /CN=511E1CE89B3A407E5ACCEED8A55B2EF374FDF29C
Certificate serial:       1B
Authority key identifier: 51:1E:1C:E8:9B:3A:40:7E:5A:CC:EE:D8:A5:5B:2E:F3:74:FD:F2:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4LyPolT4nGp49KawMTrWfr-PGYA.roa
Signing time:             Tue 31 Mar 2026 08:43:30 +0000
ROA not before:           Tue 31 Mar 2026 08:43:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        157.5.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511E1CE89B3A407E5ACCEED8A55B2EF374FDF29C
        Validity
            Not Before: Mar 31 08:43:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E0BC8FA254F89C6A78F4A6B0313AD67EBF8F1980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:c4:5b:df:45:84:a0:96:04:5a:30:2c:5c:
                    ae:b3:87:f6:db:15:0c:62:3c:04:ae:93:ce:e1:dd:
                    b9:dc:ec:e6:b7:eb:74:6d:97:1c:96:2f:44:77:39:
                    dc:ce:93:a3:28:d3:8d:57:a7:a2:ba:d7:a6:d8:b3:
                    26:d8:34:37:ba:ce:d9:f1:0d:19:92:b6:04:9a:ac:
                    87:27:70:ca:0a:4e:b9:a8:e2:10:f0:b0:e4:15:24:
                    b4:1d:ee:af:cd:08:c6:56:fb:00:9f:58:b5:40:e0:
                    0e:de:ac:e9:e1:f7:58:49:a9:fb:1d:02:95:af:f8:
                    15:53:30:68:9f:f3:30:ed:fe:56:40:36:cd:49:af:
                    53:b4:41:f3:b3:d1:07:3f:91:5e:e5:d3:95:1c:9a:
                    d3:bf:32:77:8a:55:32:11:52:8e:78:85:e8:83:cd:
                    3e:84:8e:a1:e0:b8:5e:bf:58:3e:86:0c:61:ff:20:
                    6d:b7:56:42:59:86:57:8a:41:6b:18:d1:32:4b:97:
                    f7:84:82:07:95:67:4f:a8:87:25:e8:14:a4:6c:aa:
                    be:08:d5:7c:b4:b1:f2:17:98:2f:c5:58:c2:27:18:
                    a5:ee:f4:bf:d7:dd:58:a0:79:65:15:9d:1a:d4:d4:
                    94:31:ff:46:d9:7a:4a:ba:65:87:f0:e7:bd:17:7c:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:8F:A2:54:F8:9C:6A:78:F4:A6:B0:31:3A:D6:7E:BF:8F:19:80
            X509v3 Authority Key Identifier:
                keyid:51:1E:1C:E8:9B:3A:40:7E:5A:CC:EE:D8:A5:5B:2E:F3:74:FD:F2:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4LyPolT4nGp49KawMTrWfr-PGYA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:f3:90:8e:95:69:cd:e8:ea:35:41:3c:1a:13:39:9b:81:68:
         d2:ae:4b:7c:34:fe:6e:83:d6:b1:57:5e:a2:e1:d5:29:31:81:
         27:12:e3:cf:ad:69:90:56:f8:46:f3:47:96:9a:b0:2e:e4:4c:
         aa:52:08:2e:7f:de:a8:36:16:92:60:37:d3:f8:c5:48:e8:15:
         a3:54:3c:97:10:35:bd:5a:3f:f4:66:c0:a8:ea:d6:18:57:86:
         be:ad:7c:f8:c2:82:68:0a:49:08:46:af:1d:26:0a:38:d1:0c:
         a2:68:58:bf:b8:99:73:67:ef:cc:c4:79:33:cd:ed:c1:5a:25:
         c4:8e:a4:54:f0:10:8e:86:4a:4f:6a:d5:54:82:aa:1c:8c:48:
         52:9e:e1:d0:aa:cc:a5:c7:2c:7b:1c:0d:d7:6d:c7:ef:69:3c:
         71:f9:c0:20:28:1e:a5:b9:9d:9e:52:55:6b:90:e5:37:8d:82:
         49:19:4f:da:0b:a5:a0:00:6f:ac:cf:01:df:19:01:24:2b:c5:
         3c:20:17:53:62:de:ca:fe:09:2f:f0:32:ea:6d:7f:9f:fa:13:
         57:57:70:06:a7:38:a8:57:24:61:01:50:f1:c8:4d:47:1a:50:
         74:ba:61:ea:7b:1f:70:e7:87:33:27:9d:7d:65:69:a1:49:37:
         2f:c0:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:59 2026 by rpki-client