Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/Byrfbgv8SLjw5Hn7dL4GG5WlRh8.roa
File:                     Byrfbgv8SLjw5Hn7dL4GG5WlRh8.roa (raw, json)
Hash identifier:          KE30M0TIsJt789wjHF1HjCoAcWxFoKO6YX2zS8EsoKg=
Subject key identifier:   07:2A:DF:6E:0B:FC:48:B8:F0:E4:79:FB:74:BE:06:1B:95:A5:46:1F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0105
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Byrfbgv8SLjw5Hn7dL4GG5WlRh8.roa
Signing time:             Tue 31 Mar 2026 08:30:08 +0000
ROA not before:           Tue 31 Mar 2026 08:30:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        122.249.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=072ADF6E0BFC48B8F0E479FB74BE061B95A5461F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:e4:2e:88:42:ce:b2:e4:0e:81:81:7c:ef:
                    32:41:51:7f:bf:b0:32:62:a0:45:2e:84:fd:20:c9:
                    5f:ea:6c:c8:0b:1a:b8:25:4d:a6:13:d8:83:f1:ab:
                    fb:e7:aa:cb:9b:8b:f4:c9:d4:ef:a5:ac:e5:18:dc:
                    54:c0:86:1e:57:e8:d9:a1:be:09:49:88:81:1c:d6:
                    98:24:6f:a4:af:03:aa:eb:f6:33:4b:23:a7:d5:5f:
                    ae:13:c8:7b:94:5a:7e:45:52:7d:f9:eb:cf:5c:49:
                    12:c5:2c:fd:0d:c0:21:2c:f4:ae:cb:a7:7c:bd:2c:
                    8f:15:b1:1a:da:10:24:c8:11:73:f6:a9:2e:ea:ad:
                    27:38:8b:42:08:7a:83:b3:ee:5e:95:42:c5:6f:43:
                    0d:c9:d7:fc:7f:e3:11:b6:d7:18:76:18:64:41:62:
                    40:aa:e0:d5:b1:35:95:58:32:4a:bd:cd:03:69:7d:
                    80:8a:7e:48:95:dd:91:35:8a:9a:01:f0:5e:94:60:
                    96:b3:c9:e9:ac:5e:00:13:a2:7d:d8:0a:64:7b:bd:
                    65:f7:aa:ce:e1:9a:b0:c6:4b:4a:8b:5a:20:05:55:
                    ea:e7:ab:60:df:e8:80:bf:a4:c1:89:d3:84:ba:b8:
                    d9:dd:83:f2:b2:4e:07:9a:24:8b:69:58:8c:f0:4d:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:DF:6E:0B:FC:48:B8:F0:E4:79:FB:74:BE:06:1B:95:A5:46:1F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Byrfbgv8SLjw5Hn7dL4GG5WlRh8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:6b:81:f1:c8:02:31:13:8d:d8:11:ea:14:a6:46:aa:a7:50:
         e1:78:dc:00:b0:c6:2f:95:ed:57:32:48:70:10:90:0c:de:97:
         93:ac:df:ac:72:28:39:0d:24:1d:de:b2:50:e9:59:ef:5b:6c:
         01:42:b8:e3:ac:1d:e8:8e:dd:d9:69:4f:94:5d:a8:e1:a5:b7:
         69:30:b3:06:7f:2f:9c:8d:19:4e:d0:8f:98:9a:f5:af:d0:90:
         3a:25:e1:b9:b7:73:20:fe:3d:2d:8e:e5:7e:23:1b:cf:9e:4c:
         3e:d0:d0:ed:1a:b7:91:12:76:5b:0e:7f:94:be:88:b6:55:73:
         ae:e9:15:c1:05:fa:35:27:9b:ad:ee:9c:e6:e4:40:da:9a:5d:
         65:f1:8b:14:1c:db:27:cc:03:3b:08:a9:10:ce:a9:11:64:b6:
         45:b4:81:9e:09:19:fd:4e:30:a4:3b:19:43:69:12:07:32:a7:
         ff:69:c8:c2:2c:51:1a:bd:07:47:8a:8a:ca:2d:57:2c:5e:69:
         23:21:7b:98:a7:6f:c0:93:40:b5:a9:e3:0a:af:f4:8d:0f:7b:
         78:41:7f:c8:25:14:14:13:cd:ee:70:e4:71:b3:e3:55:05:10:
         ba:2f:9d:9c:91:6a:26:7e:36:c6:c3:88:4b:23:fc:26:ea:3c:
         93:9d:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:09 2026 by rpki-client