Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/RWlsdp15JvOm9m0ihcLoLcLb05I.roa
File:                     RWlsdp15JvOm9m0ihcLoLcLb05I.roa (raw, json)
Hash identifier:          2A/niMbT25Z4epS25xxAKUi13ha3IMWWibgGftamU6A=
Subject key identifier:   45:69:6C:76:9D:79:26:F3:A6:F6:6D:22:85:C2:E8:2D:C2:DB:D3:92
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0103
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/RWlsdp15JvOm9m0ihcLoLcLb05I.roa
Signing time:             Tue 31 Mar 2026 08:30:07 +0000
ROA not before:           Tue 31 Mar 2026 08:30:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        121.1.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=45696C769D7926F3A6F66D2285C2E82DC2DBD392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:b4:46:48:0d:ac:19:66:dd:2e:39:dc:55:
                    58:26:dd:4e:05:08:87:4d:1f:6b:8a:57:c9:9e:d7:
                    71:98:d1:c9:2d:50:3c:fa:5e:94:f8:1c:e6:3d:15:
                    8e:c4:a1:ba:5d:99:9c:8d:17:c7:a8:f0:ef:8e:c7:
                    5b:74:af:5d:5d:4d:fa:ac:74:46:5f:d1:a9:cc:d1:
                    0f:8f:d1:bd:d5:42:69:78:ce:21:ec:31:e6:5e:7c:
                    23:70:fe:f0:b5:a2:f6:8a:fa:ab:8e:56:24:7c:a9:
                    42:ec:22:9b:ed:da:a0:9b:de:f0:76:04:8f:ef:e6:
                    47:8a:72:0d:2c:65:e0:cd:d0:4f:2d:3c:8d:f1:a0:
                    08:d7:14:ac:62:73:7a:6b:cd:38:5b:0f:fb:8c:4b:
                    b4:4b:e3:26:1c:6c:ee:69:8c:0b:8a:9d:cc:17:08:
                    67:a9:1e:9e:66:54:14:b1:7f:c5:31:22:bd:20:b2:
                    68:ab:fb:9d:3b:b7:f9:50:fd:93:85:74:cd:9e:0b:
                    70:18:83:e5:7e:5b:eb:c8:ac:66:cd:7f:9f:e9:1d:
                    0c:cf:22:4c:a7:bd:2c:86:a4:d0:c2:39:45:4d:97:
                    1e:7a:d7:dc:c0:6b:b7:5a:c2:dc:ad:93:a9:f3:08:
                    19:b2:5c:2d:f2:36:de:5f:85:92:ee:ba:82:0f:56:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:6C:76:9D:79:26:F3:A6:F6:6D:22:85:C2:E8:2D:C2:DB:D3:92
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/RWlsdp15JvOm9m0ihcLoLcLb05I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.1.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:65:42:95:56:f4:e7:31:8d:03:da:68:cf:6f:64:bc:97:
         92:a0:fa:a6:05:8a:f4:e7:0a:84:95:f2:fc:9c:ea:81:2c:72:
         77:c6:81:c9:97:a5:70:29:4c:18:53:d4:fd:b7:2a:4a:a2:b0:
         8c:87:1f:c5:9f:02:ab:47:32:fa:fb:63:44:9f:b2:8d:9a:44:
         85:1e:2f:5f:5a:d0:ff:02:c5:65:e1:71:0c:6b:60:6f:95:ce:
         5f:b6:77:c8:86:54:1f:45:4b:7d:08:cc:3c:63:db:12:b0:a5:
         20:c2:8d:ee:5f:ab:38:9b:02:1d:73:bf:f6:a2:1e:73:a8:83:
         95:5b:f1:4c:a4:e8:5f:29:33:52:09:09:74:a3:5b:76:cb:90:
         52:08:58:d6:8b:b3:ad:8c:05:58:14:0c:f8:ce:07:ca:7e:c0:
         8b:04:57:2f:ab:f6:24:5a:a7:bd:49:c2:1a:36:33:ca:8e:23:
         68:9e:a0:83:b8:16:97:2f:51:ff:fb:f7:a5:f6:93:c6:fc:6c:
         a5:fc:48:b2:d2:ce:a1:de:7e:6b:9b:99:1e:94:a4:4c:3b:87:
         fa:fc:d1:91:79:68:58:03:3a:79:2d:fd:f3:8a:97:c8:e1:eb:
         26:d2:c8:ff:f4:fd:77:23:66:de:f7:27:a3:d0:cd:32:ff:01:
         25:0a:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:19 2026 by rpki-client