Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/3uiacYlxv5gmdG-DVmZ9WtwCsOM.roa
File:                     3uiacYlxv5gmdG-DVmZ9WtwCsOM.roa (raw, json)
Hash identifier:          MH/RW3pKChL/HG9QSH6Jq8W+54HQJpe73ACkLUYBzxQ=
Subject key identifier:   DE:E8:9A:71:89:71:BF:98:26:74:6F:83:56:66:7D:5A:DC:02:B0:E3
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       FB
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3uiacYlxv5gmdG-DVmZ9WtwCsOM.roa
Signing time:             Tue 31 Mar 2026 08:30:02 +0000
ROA not before:           Tue 31 Mar 2026 08:30:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        61.87.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DEE89A718971BF9826746F8356667D5ADC02B0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:f7:ce:13:a5:a2:84:1b:7c:95:4c:52:9e:
                    1e:2b:2a:5a:72:e9:e1:ce:28:0c:11:94:61:bb:58:
                    2d:f1:67:4f:0f:d1:76:29:84:56:37:47:a3:c2:f9:
                    70:e4:cf:f6:36:e5:58:d4:91:75:b7:e1:19:82:b7:
                    31:5d:e0:97:bc:7a:3e:b1:9b:e4:fd:09:24:a6:f2:
                    76:52:17:f9:c7:cf:47:45:91:10:5d:23:c3:09:f4:
                    0e:13:15:a0:11:d0:d7:28:13:a2:b4:4a:48:1a:d3:
                    f9:8f:20:da:3c:13:ee:7f:17:d3:2c:5a:e7:11:95:
                    75:89:ce:db:b7:e0:76:43:f6:fc:3a:94:32:73:64:
                    fb:91:04:3d:41:16:a2:a5:c4:79:75:b9:69:ef:18:
                    36:ac:74:c4:8b:8a:84:46:d0:51:c5:0d:6e:a7:d9:
                    c9:0b:69:de:f5:dc:be:5c:e4:85:7d:28:bb:db:38:
                    70:05:2c:94:02:74:49:dd:1c:8b:c3:e0:dc:4a:ec:
                    1d:e1:2d:a3:97:df:4f:e4:dc:4f:e9:35:2b:78:03:
                    c8:9a:33:2a:36:23:de:00:3c:ff:6e:6b:69:72:14:
                    1f:3e:4f:93:ae:87:86:d1:dd:4a:00:ea:2e:8e:9e:
                    19:e2:d7:d0:8e:a3:e4:09:2b:97:f5:ad:af:9a:5a:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:9A:71:89:71:BF:98:26:74:6F:83:56:66:7D:5A:DC:02:B0:E3
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3uiacYlxv5gmdG-DVmZ9WtwCsOM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:19:42:7b:fd:c1:02:c8:55:45:55:f7:c9:22:40:7f:31:8d:
         39:e4:a1:fd:98:59:42:85:22:e5:7a:1d:c8:ea:72:33:0c:5c:
         0e:ba:ac:14:be:65:ff:e5:3d:62:4e:0a:95:77:22:6e:ae:a6:
         5d:f0:32:76:cd:b1:9a:b4:72:31:50:26:08:e9:b9:d3:e6:df:
         05:77:61:c3:6c:c5:dd:b6:16:1f:ba:a8:fa:a4:88:33:04:39:
         33:7d:98:08:36:1d:8e:17:cb:7b:75:5a:ac:64:a9:48:d6:b1:
         58:6e:cb:71:a0:09:4c:6d:da:78:23:cf:08:91:78:e3:1c:73:
         d3:8a:60:19:3c:37:34:f7:d7:19:0f:18:6d:11:26:8c:df:be:
         09:2a:d7:10:28:ab:d6:c3:94:7b:af:ca:5c:04:cb:35:25:50:
         41:28:86:db:bf:33:33:a7:f6:d8:fb:ba:53:09:8d:b6:72:d7:
         de:68:57:2f:35:f9:23:2f:f1:ab:4e:4b:cc:78:5e:b3:1d:05:
         02:09:d4:95:c3:51:ea:ab:58:88:d7:17:89:39:d2:7d:ae:18:
         b5:a4:ef:0f:9b:7b:55:82:ea:67:67:e7:59:5f:11:b4:06:72:
         ec:d8:4e:bf:d0:91:20:42:f7:24:00:f9:5b:61:be:89:90:ed:
         d0:06:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:03 2026 by rpki-client