Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/VZjqevV7clmo_9w6uXDxSv7qVnQ.roa
File:                     VZjqevV7clmo_9w6uXDxSv7qVnQ.roa (raw, json)
Hash identifier:          7qBB+dWlhIA6kzzOck+iC8h4AVuazztoQtXmZZm1INo=
Subject key identifier:   55:98:EA:7A:F5:7B:72:59:A8:FF:DC:3A:B9:70:F1:4A:FE:EA:56:74
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       011A
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/VZjqevV7clmo_9w6uXDxSv7qVnQ.roa
Signing time:             Tue 31 Mar 2026 08:30:20 +0000
ROA not before:           Tue 31 Mar 2026 08:30:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        221.113.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5598EA7AF57B7259A8FFDC3AB970F14AFEEA5674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:41:be:c0:0b:3f:e3:b0:79:72:15:d7:72:
                    f1:a2:61:49:34:23:70:5f:55:2e:7b:10:07:f5:8a:
                    79:62:c2:9e:20:62:ab:f8:f2:76:b4:23:82:83:fa:
                    71:cb:cd:ae:8b:37:55:c3:e2:17:c7:60:08:c9:cc:
                    34:75:ea:ea:67:90:9f:08:95:45:af:30:7d:13:f0:
                    75:43:90:93:95:22:c5:62:cd:96:6a:33:25:70:8e:
                    1a:3e:66:e6:91:29:71:c4:0b:ac:49:ea:f7:ff:91:
                    d7:e3:92:00:be:2e:15:e6:5a:76:43:25:c0:1d:52:
                    24:e1:13:e2:2a:7a:2d:e1:35:47:33:68:b4:25:d9:
                    2c:d9:4f:7f:26:ed:28:08:b9:d3:70:35:73:5a:ad:
                    36:51:78:e9:22:b7:6a:74:e8:cb:88:18:6d:03:f7:
                    85:27:fb:fc:18:48:0b:e8:a6:74:ff:2e:85:1c:da:
                    2e:a2:ba:9e:5b:ec:63:4d:8c:7e:22:10:37:64:c8:
                    61:df:f0:b0:f2:e0:cc:51:59:2f:49:50:67:69:ec:
                    82:f6:08:06:05:44:f2:8a:b1:41:74:5a:80:3d:eb:
                    ad:88:52:ec:d8:a5:c4:79:44:23:06:cf:72:34:3b:
                    dd:64:ef:6e:75:32:79:ea:5b:e9:be:52:cc:84:14:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:98:EA:7A:F5:7B:72:59:A8:FF:DC:3A:B9:70:F1:4A:FE:EA:56:74
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/VZjqevV7clmo_9w6uXDxSv7qVnQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:73:60:1b:77:48:82:7c:b4:79:74:f7:21:18:54:e7:f2:
         20:f1:bb:22:7f:24:92:b3:5b:f9:d8:46:e4:fd:30:82:77:e2:
         8a:12:6c:1d:e0:9a:8b:72:15:68:3d:5f:d2:53:88:c1:d7:b5:
         a3:ac:94:97:0d:bd:8d:99:85:56:68:90:63:fd:74:31:a1:c2:
         c2:ff:d9:74:00:cd:a2:23:b0:e8:9e:c5:ea:9b:57:7e:08:dc:
         a2:b0:5f:91:ea:e2:57:36:f0:49:34:5b:01:db:58:93:6c:e9:
         1b:e2:e7:04:1b:95:de:ba:e1:92:b6:8a:b6:24:50:18:d8:be:
         03:70:6c:ff:8f:5a:fa:11:8e:42:48:14:96:67:6c:37:f3:0a:
         37:fe:db:04:d1:13:8c:27:09:85:9e:ed:fe:bd:5b:77:dd:76:
         db:ca:f3:87:4f:bd:6a:53:19:32:1a:34:ec:57:8e:dd:04:00:
         0d:20:80:f1:bf:1d:0c:26:29:42:3c:bb:60:71:1e:dd:30:4e:
         83:60:2a:e6:43:bd:8d:34:73:1b:0a:9c:4d:c3:c3:6c:36:d9:
         78:b5:4c:fa:1e:90:37:aa:c7:54:63:b9:b4:82:7c:bf:48:b6:
         25:06:79:9b:ab:cd:fb:d9:1b:55:08:da:3b:cd:6e:b2:17:b7:
         30:8a:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:31 2026 by rpki-client