Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/Wkk8WWmAE9VTNnyCCFN9sztl5vg.roa
File:                     Wkk8WWmAE9VTNnyCCFN9sztl5vg.roa (raw, json)
Hash identifier:          QWN29JG8H3sVGbuuGcyGCLN/4KlFO4b/HWRkxGpJbC4=
Subject key identifier:   5A:49:3C:59:69:80:13:D5:53:36:7C:82:08:53:7D:B3:3B:65:E6:F8
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       010D
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Wkk8WWmAE9VTNnyCCFN9sztl5vg.roa
Signing time:             Tue 31 Mar 2026 08:30:14 +0000
ROA not before:           Tue 31 Mar 2026 08:30:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        203.181.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5A493C59698013D553367C8208537DB33B65E6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:bc:be:0e:9d:47:da:a4:d0:ce:03:ae:8e:
                    e9:8b:17:21:e7:f0:87:50:fd:6e:3f:bc:a8:3f:cf:
                    c6:3a:c7:ee:e6:82:6f:dd:d6:7d:a8:13:43:2c:68:
                    f1:d0:4b:dc:3f:3a:1c:af:30:b4:e8:8b:27:22:c7:
                    11:5c:59:cf:10:51:9e:48:44:92:15:fb:8b:fd:ca:
                    ad:ad:5a:c8:19:3c:18:05:dc:a6:f1:7b:92:1f:f5:
                    40:de:3c:2a:61:ab:7e:91:a7:2d:68:ec:81:b9:4b:
                    79:db:a6:d1:79:a0:a6:6b:7d:c3:12:bd:37:a2:62:
                    35:da:47:5b:15:6f:f9:73:d4:1d:f8:94:be:24:b5:
                    f5:1d:12:bb:5a:69:db:d4:b7:de:41:06:52:e3:10:
                    06:db:0f:e1:a8:1b:9a:6e:d8:85:32:46:80:93:49:
                    56:31:ce:db:34:0c:56:0d:91:e1:ba:ef:25:f9:b6:
                    97:28:3d:30:ca:de:6d:24:67:c0:9e:99:16:da:a7:
                    d2:98:55:29:a2:66:b3:be:a9:79:99:73:9b:78:db:
                    f3:25:03:61:67:06:14:98:ed:31:be:cd:95:9b:1c:
                    6a:f8:28:93:34:6e:d0:d6:8e:dd:c1:11:04:93:a5:
                    e0:c0:e3:f0:63:40:8f:7f:63:ac:46:ae:62:3c:43:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:3C:59:69:80:13:D5:53:36:7C:82:08:53:7D:B3:3B:65:E6:F8
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Wkk8WWmAE9VTNnyCCFN9sztl5vg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:df:b1:82:6c:8d:47:d1:f5:7c:86:6b:2d:e4:55:d0:c9:
         25:a7:66:67:d7:a7:ca:93:b5:c5:89:b9:36:b9:1f:f3:6d:46:
         18:a8:3d:20:de:a4:da:ac:7c:ba:28:2e:72:22:19:4d:cf:f9:
         f7:70:c9:5b:ad:be:46:7d:31:cb:20:a1:d7:ab:6e:fa:44:bb:
         b8:60:19:86:c8:66:87:02:3a:ab:0d:70:35:28:6f:45:53:9a:
         8e:6d:ee:bb:66:6d:61:38:56:c2:39:2b:29:0f:e4:e4:00:b1:
         e1:df:94:23:bf:ee:9e:eb:d1:95:88:b5:9a:fd:0e:60:cf:c1:
         d9:db:da:24:bf:57:8c:c4:9d:94:00:ec:ef:56:a7:c5:e3:0a:
         44:98:95:2e:08:9f:36:e0:40:7d:71:7f:ec:06:67:44:39:5d:
         3f:41:31:cf:02:17:54:c7:ea:80:95:43:15:67:c9:8a:c4:01:
         42:76:e3:6d:a8:b1:28:a4:4c:8c:b5:07:16:45:98:77:c4:12:
         6b:18:8c:c5:61:2c:a0:6d:5d:7d:05:87:9a:bc:3b:bc:60:db:
         0f:be:ab:d0:37:01:d6:e7:d7:cd:d0:e8:7a:95:d2:42:52:52:
         43:6d:90:20:ca:40:29:c1:1a:e5:17:0b:c3:f8:46:0c:5c:2d:
         b2:ee:c2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:52 2026 by rpki-client