Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/9rwjKt1UjYrrUQocNg3e5EBJAeE.roa
File:                     9rwjKt1UjYrrUQocNg3e5EBJAeE.roa (raw, json)
Hash identifier:          aMrmSSWa5gTQVxgJQqat0Ez/ysISREXaob5F/dQyBbc=
Subject key identifier:   F6:BC:23:2A:DD:54:8D:8A:EB:51:0A:1C:36:0D:DE:E4:40:49:01:E1
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       ED
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/9rwjKt1UjYrrUQocNg3e5EBJAeE.roa
Signing time:             Tue 31 Mar 2026 08:29:54 +0000
ROA not before:           Tue 31 Mar 2026 08:29:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        122.223.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F6BC232ADD548D8AEB510A1C360DDEE4404901E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:31:db:bd:59:26:3c:8e:03:d4:53:e8:26:
                    ec:a3:56:0f:7f:38:b4:53:b2:16:7d:55:43:cf:21:
                    4a:77:29:ea:ef:c2:cb:18:f1:64:69:1f:eb:ca:6c:
                    36:8e:35:e3:a7:15:04:97:2a:03:55:78:40:f7:22:
                    0e:24:b4:4c:1a:64:e7:ab:55:59:dc:72:4b:43:d5:
                    e3:00:aa:9e:6a:21:e6:b3:5e:28:40:73:59:c6:38:
                    42:a7:8f:8b:ef:d8:93:61:f5:b5:47:51:2c:3a:3a:
                    f9:b2:1f:84:5b:03:12:e4:9e:df:5f:c8:8c:33:d4:
                    7a:38:e8:4b:21:62:8d:3c:65:ce:7c:b1:ec:a6:c2:
                    1c:f5:6c:32:66:ad:7a:1a:9b:2f:cd:d4:43:46:79:
                    08:df:e5:a2:5b:28:89:11:c1:bf:e6:82:74:77:eb:
                    c9:30:42:40:aa:8b:28:03:99:11:91:9c:7f:ab:0a:
                    a2:7c:bf:7a:0d:4d:13:c5:68:21:e1:08:f5:81:e3:
                    84:27:fe:3f:1f:36:73:80:47:7a:71:d1:9b:6a:9c:
                    52:e5:19:cc:b9:6c:f8:f0:3f:b4:57:c1:81:50:d3:
                    26:a6:a9:30:bc:83:8f:2d:38:2e:94:78:13:e8:12:
                    f9:7c:83:23:c6:f9:1f:d7:6d:ef:64:3f:66:90:2d:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BC:23:2A:DD:54:8D:8A:EB:51:0A:1C:36:0D:DE:E4:40:49:01:E1
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/9rwjKt1UjYrrUQocNg3e5EBJAeE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:62:da:7d:94:2e:3f:19:d4:ba:fb:55:c7:a1:1a:3f:5c:
         f9:6d:60:04:30:ee:5b:d6:18:e3:4d:fc:6c:d3:cc:49:69:45:
         f7:7d:ad:88:76:63:9a:17:ea:fa:ad:6a:70:1e:13:a4:b7:f0:
         ff:6d:e1:86:8d:c6:d2:13:04:0f:31:1e:24:4f:8e:de:2c:07:
         60:9a:5f:8b:ff:57:0a:c8:89:98:39:66:54:a7:ed:2f:cc:92:
         14:0a:8e:e5:63:af:95:da:cd:75:7f:12:a7:e2:de:12:1c:33:
         6d:59:00:b6:98:a0:e5:63:7e:26:ce:c3:e1:5f:a3:81:6a:93:
         2d:58:e8:f3:20:af:d4:f4:44:b3:c1:1b:db:aa:cb:d3:f4:ae:
         d8:7d:7a:3d:a7:ae:86:a7:bc:ab:a2:99:b5:e5:79:e0:da:d0:
         14:b4:d3:e6:56:92:ad:92:ef:ae:39:ac:2e:21:cc:60:93:06:
         71:22:40:ca:7b:09:3e:80:17:32:5c:0c:11:f7:58:69:00:3d:
         02:69:c1:89:75:65:33:02:6c:a3:6c:71:60:46:b6:a7:11:a3:
         f9:de:7b:b1:5d:61:12:e0:66:ec:b2:52:a3:33:ad:a3:65:d3:
         6b:db:bf:6c:46:c3:cc:00:ef:4e:2a:3c:15:10:eb:e4:d7:62:
         4f:94:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:51 2026 by rpki-client