Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/GwSZWgS0PYRKnOntNdaKPGUJBAU.roa
File:                     GwSZWgS0PYRKnOntNdaKPGUJBAU.roa (raw, json)
Hash identifier:          Lf0Ld7qglUCtNAXXEoJe/94tcCWgR8rtFHOf07Nh4JM=
Subject key identifier:   1B:04:99:5A:04:B4:3D:84:4A:9C:E9:ED:35:D6:8A:3C:65:09:04:05
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       011B
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/GwSZWgS0PYRKnOntNdaKPGUJBAU.roa
Signing time:             Tue 31 Mar 2026 08:30:20 +0000
ROA not before:           Tue 31 Mar 2026 08:30:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        221.113.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B04995A04B43D844A9CE9ED35D68A3C65090405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:80:87:62:88:de:a1:ca:f9:67:2e:04:ff:
                    b5:93:66:90:3c:37:c1:b0:a7:45:a6:c8:64:6e:7d:
                    8f:4c:07:b0:2b:7a:2a:af:ac:40:0b:3d:1c:96:42:
                    02:27:6b:4a:99:eb:0f:a1:d2:54:fd:9a:27:4b:16:
                    c2:b8:b8:9d:0d:ad:93:23:83:6f:57:d5:c2:28:a3:
                    e9:52:26:63:02:85:d7:b1:af:17:1d:27:2b:26:05:
                    4d:7d:84:b3:91:aa:d8:f5:27:98:21:21:d6:02:ff:
                    7c:19:41:ee:46:05:bc:7b:06:70:35:17:4d:74:ec:
                    80:0c:dd:e5:84:fd:88:ac:b8:45:1d:36:ea:e2:a6:
                    5a:9c:be:93:75:85:b2:b9:fa:cf:fd:d6:7d:0d:8a:
                    2b:3e:88:18:f2:ab:2f:e4:c4:a1:6f:4b:22:e9:8d:
                    52:b7:cf:1a:b8:af:fb:47:46:95:d0:23:05:9e:77:
                    3f:44:3f:ba:5f:f2:19:7e:8f:3b:60:51:c5:53:aa:
                    94:42:4d:a8:6f:d7:6c:91:6d:a4:6a:79:c8:aa:4f:
                    c7:60:bd:14:c6:8e:1e:be:b4:7f:85:63:9e:f3:64:
                    df:0d:a6:a0:d2:1b:53:6b:08:c9:c8:51:01:96:a2:
                    46:61:40:ba:cf:91:9a:7f:e8:6e:bb:47:b3:5e:7b:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:04:99:5A:04:B4:3D:84:4A:9C:E9:ED:35:D6:8A:3C:65:09:04:05
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/GwSZWgS0PYRKnOntNdaKPGUJBAU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c9:35:c2:6f:59:69:81:7c:5c:5f:cf:4d:c8:48:6a:4a:67:2c:
         7f:46:c2:d3:fc:33:95:a3:9e:96:f7:76:fb:22:ee:f0:d0:d0:
         d4:8d:74:47:0d:e0:5e:2e:4d:36:c6:9c:22:31:1a:48:67:e6:
         1a:e8:86:a2:94:78:40:00:da:9d:8c:a3:0f:f5:e3:ee:ed:58:
         2d:6d:f3:73:76:0b:c4:ad:24:47:3e:75:22:f3:0f:27:b4:f3:
         ad:ef:dd:d6:b6:eb:27:c3:4c:fd:6f:41:fb:13:0f:ea:13:fb:
         70:46:4d:22:08:47:75:ff:dc:3b:1d:69:cb:87:6c:76:b4:9b:
         b3:2c:03:f3:18:23:c8:ea:14:5d:89:62:23:9b:87:e3:c8:a9:
         ba:b3:59:1c:f0:16:dc:78:67:94:be:02:a0:8c:db:47:44:ad:
         5e:74:85:95:4d:c8:ec:a0:e1:2f:57:f7:e7:75:9c:f5:9a:ee:
         07:80:73:69:ff:5c:aa:b1:48:09:96:17:00:f7:86:58:ff:da:
         da:e7:c0:a2:0c:10:19:94:6c:76:17:b8:d6:a3:be:2d:c1:7f:
         fd:5c:32:58:34:3f:8f:83:99:4d:47:e0:d6:4f:a5:f0:5b:f6:
         2a:c0:2a:d5:35:1c:4d:9e:0b:22:ff:49:14:34:70:e0:a3:d7:
         8f:d4:23:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:51 2026 by rpki-client