Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/3uih_zjZkhfWkgSvcCRZa_JghqI.roa
File:                     3uih_zjZkhfWkgSvcCRZa_JghqI.roa (raw, json)
Hash identifier:          YEtDFqbCQYze6G+++LqhMUBTfEFdlCLvICcNa/ZP/6Q=
Subject key identifier:   DE:E8:A1:FF:38:D9:92:17:D6:92:04:AF:70:24:59:6B:F2:60:86:A2
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       E0
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3uih_zjZkhfWkgSvcCRZa_JghqI.roa
Signing time:             Sun 01 Feb 2026 01:35:17 +0000
ROA not before:           Sun 01 Feb 2026 01:35:17 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        122.223.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Feb  1 01:35:17 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=DEE8A1FF38D99217D69204AF7024596BF26086A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:f6:40:28:ec:9c:ba:6b:ee:c5:ec:22:13:
                    1a:6a:9c:cb:cd:8d:5d:42:19:5f:1a:42:6a:80:f6:
                    d2:00:b6:29:03:ca:0c:be:94:db:eb:31:13:99:36:
                    a4:a4:f8:d2:dc:51:f7:c8:de:c5:7a:ee:87:e7:34:
                    8f:5d:00:10:60:6e:6f:01:a8:58:2b:3b:14:ef:4c:
                    0e:4c:41:17:42:1d:39:98:81:c4:4b:37:d2:df:58:
                    0f:ac:44:ac:f1:fa:25:82:3c:16:8b:0d:3a:12:e8:
                    cf:d7:09:0f:6b:c5:23:39:06:c6:44:ce:b0:16:7d:
                    a3:c4:40:03:f7:36:43:98:f4:ae:9c:ff:63:3c:2c:
                    60:29:af:f1:53:5e:df:f4:0b:d5:ad:87:74:b1:99:
                    6a:29:09:66:be:ee:ca:db:4e:6b:e1:25:1a:d0:05:
                    27:24:4c:8e:ed:01:f4:9b:5e:bf:77:ae:dd:62:82:
                    0d:e7:31:01:24:4b:bf:bd:68:3d:6e:f5:13:14:be:
                    d5:e4:ce:68:08:c0:9b:73:cc:a5:c5:bd:d1:e2:3c:
                    62:9a:db:b8:85:c1:85:5d:56:c6:e0:63:43:43:fa:
                    f2:40:7c:91:da:70:c7:cc:1d:1b:06:99:49:91:84:
                    9b:14:2c:d7:a4:8c:06:0a:2d:bb:f6:dd:e4:ec:62:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:A1:FF:38:D9:92:17:D6:92:04:AF:70:24:59:6B:F2:60:86:A2
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3uih_zjZkhfWkgSvcCRZa_JghqI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:64:25:1b:75:cd:3e:14:29:8f:01:0f:54:41:ec:51:80:38:
         fb:39:c7:b0:ed:41:6a:06:4a:dc:8c:1d:5b:b1:9c:29:ab:35:
         95:d5:10:a7:0d:1d:ab:2e:a7:f7:cc:b6:90:c1:71:5b:25:0b:
         cd:1d:f4:98:7f:13:37:34:39:a6:41:51:c4:7e:87:4c:c5:a5:
         d5:e6:0f:9f:68:94:6b:33:2d:5a:d5:a3:75:9c:12:75:4b:f4:
         86:dc:30:41:3f:bc:56:79:83:8d:a2:39:84:4b:0a:36:9b:40:
         8b:29:43:ca:ce:aa:dd:ba:43:9a:c1:b3:5b:47:44:6e:ed:d1:
         f2:77:dc:12:7f:90:52:45:41:c3:11:84:0d:78:ba:f2:1c:7e:
         22:f7:44:4c:2c:a7:cd:8c:24:26:fd:a4:fb:ca:be:e4:c1:52:
         f8:fa:8b:6d:fe:bc:6c:c7:d8:98:a4:22:ae:4c:47:c3:1d:81:
         70:80:bb:55:e7:25:d1:6c:2e:f1:20:23:2b:42:8d:14:1c:4b:
         f4:0b:fb:2d:9c:26:9c:25:49:4e:75:70:15:f1:04:52:e8:26:
         09:ed:6a:29:15:6a:94:79:9a:cd:35:f5:8a:1a:a4:15:8e:8c:
         cd:9d:9a:1f:26:37:49:f1:fd:d9:12:e2:d1:53:3b:9e:44:1b:
         64:48:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:26:35 2026 by rpki-client