Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/6shoBrXuOXBK0rUc0lmIjHQDKFI.roa
File:                     6shoBrXuOXBK0rUc0lmIjHQDKFI.roa (raw, json)
Hash identifier:          7WS+co/3wblZAzSIMp/iRdS/01RPp6uscVHoAvm8MWk=
Subject key identifier:   EA:C8:68:06:B5:EE:39:70:4A:D2:B5:1C:D2:59:88:8C:74:03:28:52
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       FC
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/6shoBrXuOXBK0rUc0lmIjHQDKFI.roa
Signing time:             Tue 31 Mar 2026 08:30:02 +0000
ROA not before:           Tue 31 Mar 2026 08:30:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        110.4.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EAC86806B5EE39704AD2B51CD259888C74032852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:90:b4:8f:0e:67:27:fe:b3:28:50:c3:1a:
                    7f:f6:fc:a8:14:2e:35:cd:5d:18:2e:62:a9:53:5a:
                    32:cc:72:bf:3a:50:dd:10:44:95:e7:9c:3a:62:c1:
                    e3:39:fe:3d:0e:28:72:a3:61:77:4e:4f:d3:bf:02:
                    6f:13:e8:67:5e:f9:df:50:d4:ab:9a:f2:d2:5c:49:
                    2d:50:d4:0c:cb:44:6f:56:51:43:79:58:ed:e0:e7:
                    0c:8e:6d:6f:7e:f1:57:7f:58:c9:1a:01:d5:34:51:
                    6d:8a:08:29:77:02:0a:23:fa:5a:99:40:65:d1:67:
                    06:86:d1:5b:16:02:60:6c:9e:9f:20:eb:19:c7:a2:
                    cd:81:f2:55:26:54:fe:8a:79:0e:2e:e0:f4:66:08:
                    86:2c:6c:5f:4a:c9:82:65:d6:cb:48:e9:ab:3a:8b:
                    bc:eb:ab:ef:a8:f3:3e:3d:69:a7:bb:77:af:b0:f1:
                    e2:16:e4:97:c0:e2:d9:36:cf:da:e1:45:34:c4:73:
                    c5:33:ad:8f:ba:43:d8:e2:24:9c:fd:b0:c0:71:83:
                    77:24:af:6f:44:bf:ac:b3:86:e0:b6:24:a0:45:68:
                    21:0f:7b:51:93:dd:f1:a6:10:2a:66:9f:46:97:3c:
                    b1:0b:f2:48:cf:fb:24:ad:53:3c:2c:20:c9:d4:38:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:68:06:B5:EE:39:70:4A:D2:B5:1C:D2:59:88:8C:74:03:28:52
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/6shoBrXuOXBK0rUc0lmIjHQDKFI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:10:87:80:44:51:ac:8d:aa:93:d0:5b:fe:3c:c6:80:fd:
         9b:98:8c:fb:01:08:39:0f:29:67:fb:26:d6:51:b9:bc:3e:37:
         cc:1b:92:8d:1d:0e:d5:4c:d5:1f:4e:c3:b0:ba:0d:35:80:c0:
         11:d6:ba:83:e9:1f:0a:af:84:30:8d:28:14:a7:4f:d2:8b:cc:
         a5:f9:64:ef:70:29:ad:39:81:e5:24:d5:eb:e5:c3:0e:8c:86:
         0c:68:9c:a9:bd:c1:f9:b1:90:99:a0:6d:cc:66:65:94:3c:d7:
         33:f6:7e:db:78:ea:c3:48:fd:a4:fb:3b:af:2a:a5:cb:ad:10:
         67:37:ea:ab:ca:29:ac:af:f2:15:47:51:51:dc:89:d0:8d:57:
         a0:da:01:c9:a3:ae:3f:17:e1:aa:37:94:97:79:6c:44:bf:85:
         d8:af:42:72:5e:d0:fb:41:b5:af:25:83:7b:bd:5b:4d:7f:e6:
         50:55:a6:52:7b:7d:c5:50:ed:e3:9b:25:63:1b:3e:d5:80:aa:
         53:1f:2f:40:3f:2a:34:a9:6c:bc:b0:66:55:b5:2e:3b:91:6e:
         b5:8e:7d:34:ad:f3:22:f2:1a:f7:4a:ee:98:b2:c7:28:18:29:
         e8:eb:fe:7c:f7:b5:b1:d1:77:4f:f3:f1:e7:40:43:2a:34:23:
         4d:8a:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:24 2026 by rpki-client