Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/AzvbybmPI_uRIHKx8qWcR4pY84s.roa
File:                     AzvbybmPI_uRIHKx8qWcR4pY84s.roa (raw, json)
Hash identifier:          5WeNkppxV3OiUVAi5pn/tr+R0UcplaYtrUS6FYRZtrk=
Subject key identifier:   03:3B:DB:C9:B9:8F:23:FB:91:20:72:B1:F2:A5:9C:47:8A:58:F3:8B
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0119
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/AzvbybmPI_uRIHKx8qWcR4pY84s.roa
Signing time:             Tue 31 Mar 2026 08:30:19 +0000
ROA not before:           Tue 31 Mar 2026 08:30:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        124.155.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=033BDBC9B98F23FB912072B1F2A59C478A58F38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:dc:4a:0b:d0:ef:ab:4b:a0:82:1a:a9:06:
                    d1:77:fc:7a:f7:1b:9e:3d:82:93:af:85:9f:c2:4e:
                    82:e2:c9:0f:07:ac:c7:53:fb:80:14:7b:9f:3a:02:
                    f2:82:88:40:bb:e3:16:c0:44:e0:6d:10:94:47:7f:
                    f8:fa:78:3f:78:26:7f:13:fd:c9:4d:70:6d:9a:9f:
                    1c:f3:e4:f9:d3:bf:99:1e:b8:dc:e1:d9:1d:fd:13:
                    c3:88:af:9b:d5:7d:40:1a:b2:8a:25:c5:7a:ad:6c:
                    99:48:e6:b9:5e:4e:54:48:57:02:d8:23:05:ba:75:
                    15:cc:92:aa:2a:38:ac:4f:69:35:33:03:bf:50:83:
                    75:a7:c1:2e:69:78:54:32:0b:be:ae:89:7a:57:60:
                    57:a4:48:44:d1:8a:ea:39:29:93:22:18:d3:ca:75:
                    48:2a:40:b1:a4:c4:05:bd:9c:a4:67:58:d2:fd:df:
                    2a:64:5d:7e:39:c9:6a:ac:79:71:ea:13:88:97:f5:
                    87:06:ef:24:b4:85:84:12:a1:db:e4:08:1b:6b:c4:
                    d0:3d:5c:b1:b0:8b:ab:ef:56:46:78:b4:dd:2e:51:
                    eb:57:e0:c2:44:c8:42:97:d4:08:de:d7:1f:b4:d2:
                    13:4c:39:92:86:e0:fd:b1:84:98:52:10:ea:ae:b4:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3B:DB:C9:B9:8F:23:FB:91:20:72:B1:F2:A5:9C:47:8A:58:F3:8B
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/AzvbybmPI_uRIHKx8qWcR4pY84s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:2f:b9:e4:93:43:7d:71:fe:9c:c7:e7:8e:c3:f1:f3:86:
         37:05:23:bb:ee:92:b3:da:59:1f:9b:90:d7:0c:9a:83:0d:77:
         a9:ca:2e:aa:ab:3a:5f:7f:8a:57:ab:77:e7:a1:c4:64:c3:f1:
         cb:c4:df:00:08:39:af:6b:a4:e2:67:28:81:15:c2:69:25:d3:
         fc:56:f6:05:d4:0c:71:0a:a5:32:49:fb:ce:54:11:37:08:07:
         3a:b5:29:48:f1:6e:91:bb:35:b0:33:85:db:a2:78:41:9e:ff:
         0b:91:97:a4:3e:b0:af:99:7f:32:6f:2d:9b:5f:23:aa:eb:e0:
         a6:a4:82:e8:1c:2a:4b:e0:03:de:09:26:4f:32:9a:17:e1:c0:
         24:0b:68:08:ad:37:5e:48:0e:06:06:03:4a:b0:b5:21:c5:6f:
         90:31:3a:81:bf:84:a9:2c:51:ea:ba:0d:30:40:1e:99:a3:ec:
         68:e1:f6:2a:8a:25:82:97:82:e4:36:01:fa:6d:44:20:d9:91:
         ac:be:a0:8f:e6:f1:8a:23:98:51:1b:c6:94:a7:4c:7f:c1:8a:
         32:7f:ed:31:5d:f0:06:ad:84:65:70:64:1b:1a:f1:c2:89:09:
         57:81:95:31:cc:ae:3f:5c:80:19:b0:5c:23:66:1b:8b:9b:84:
         d8:5d:35:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:58 2026 by rpki-client