Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/TF-FuVhkjx-R8YkgQ71R8guqBYw.roa
File:                     TF-FuVhkjx-R8YkgQ71R8guqBYw.roa (raw, json)
Hash identifier:          IllLTfKeXPo2+H6Vs8lyOI2atdr8Ab0+huOWnoKfWtM=
Subject key identifier:   4C:5F:85:B9:58:64:8F:1F:91:F1:89:20:43:BD:51:F2:0B:AA:05:8C
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       011C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/TF-FuVhkjx-R8YkgQ71R8guqBYw.roa
Signing time:             Tue 31 Mar 2026 08:30:21 +0000
ROA not before:           Tue 31 Mar 2026 08:30:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        202.213.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4C5F85B958648F1F91F1892043BD51F20BAA058C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:96:91:54:b2:bd:d1:b0:d5:28:3d:b3:58:
                    42:76:d1:45:70:f2:b4:f0:6f:f9:32:7d:13:97:1d:
                    50:9f:7b:d2:6c:0c:2e:c6:7c:9d:e7:9f:3f:86:22:
                    9d:a2:bd:ca:a6:66:8f:eb:94:01:30:17:fb:55:86:
                    8d:10:30:2a:ea:23:26:f3:ce:72:6c:2b:5a:5c:cf:
                    f6:12:37:43:a8:c2:ce:d9:21:7b:1d:67:b3:95:44:
                    18:0e:cd:95:88:36:5f:a9:21:c5:6c:1f:77:6f:49:
                    e2:55:07:9a:74:16:41:48:9f:41:4c:f4:7a:0d:3a:
                    1a:06:82:71:dc:70:96:bb:f8:80:0d:12:e1:0b:4e:
                    55:69:2b:71:a2:a2:e9:77:92:37:34:0d:89:73:24:
                    b6:fd:2b:a2:23:6f:25:62:0e:14:98:fd:65:55:0d:
                    13:08:03:68:cc:b8:7a:12:7d:5f:00:56:4c:71:38:
                    6a:36:b2:78:1e:86:ad:7a:c9:ec:ac:ff:bf:3a:b3:
                    1f:5a:cd:27:98:92:89:0f:b3:e0:84:7a:e4:b5:88:
                    4e:22:59:1f:a6:a5:d2:14:c6:91:1e:38:7c:2d:46:
                    d4:ef:e1:64:17:12:c7:a8:30:a0:3e:6a:96:c3:40:
                    54:aa:eb:ea:d6:ae:ea:09:60:2b:43:cf:26:79:8f:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5F:85:B9:58:64:8F:1F:91:F1:89:20:43:BD:51:F2:0B:AA:05:8C
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/TF-FuVhkjx-R8YkgQ71R8guqBYw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:db:5a:9c:31:e2:1f:cc:33:7f:a1:b5:8e:8d:58:7a:61:a0:
         e7:0f:8a:f3:37:9b:30:21:9f:1c:0d:5e:0c:0c:11:80:d3:09:
         0b:b6:54:e0:bb:f4:fb:a2:33:9f:09:fe:b3:8b:b8:f3:83:f6:
         28:a9:42:cf:2a:24:4c:17:ad:9c:8f:fb:0e:3b:06:cf:fe:2d:
         8a:23:5f:b8:ba:66:0d:f8:ed:15:90:c4:65:f1:78:cf:c6:a8:
         27:72:5e:8f:fd:cd:b6:35:a7:b4:e8:7c:97:af:f6:9e:c7:27:
         d3:4d:71:80:f5:0e:73:be:04:c8:1d:0f:c4:1f:63:7a:1d:0d:
         6c:a4:c8:03:a3:c5:8a:5f:de:3a:94:a8:3c:5d:0f:f3:54:88:
         b9:48:f3:82:b2:d8:5d:09:54:25:2a:ad:54:d5:3d:9f:55:63:
         50:b0:f2:10:81:51:a2:a9:80:45:af:60:b1:b2:87:25:1f:0f:
         b8:cc:e1:d6:17:1a:63:ac:23:53:00:4c:05:50:e3:4b:cb:65:
         85:5e:99:4a:e0:fe:31:12:96:51:43:7e:40:af:f2:5c:63:e2:
         a9:ea:f0:32:c6:e3:00:89:13:07:a8:54:a4:29:8c:4d:a5:f8:
         b7:e5:65:d2:7c:08:fc:17:a3:91:04:7a:60:d5:0f:b2:65:e4:
         82:9e:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:16 2026 by rpki-client