Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/XzTORV8HVtgjCr17ELQeeRKXQpk.roa
File:                     XzTORV8HVtgjCr17ELQeeRKXQpk.roa (raw, json)
Hash identifier:          MMZrd+tP9XIAdkNrpiJNn8wYBwprY6I2nS2pYnoLVQU=
Subject key identifier:   5F:34:CE:45:5F:07:56:D8:23:0A:BD:7B:10:B4:1E:79:12:97:42:99
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       EC
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/XzTORV8HVtgjCr17ELQeeRKXQpk.roa
Signing time:             Tue 31 Mar 2026 08:29:54 +0000
ROA not before:           Tue 31 Mar 2026 08:29:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        122.223.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5F34CE455F0756D8230ABD7B10B41E7912974299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:68:1f:e5:ae:23:cf:67:fd:e9:ea:00:3a:
                    17:20:49:08:e4:77:fd:b1:6d:77:e7:cc:bf:ca:f2:
                    55:9f:23:a0:5c:39:ba:82:91:3b:dc:79:da:57:33:
                    80:98:00:39:eb:76:8f:e6:af:ad:97:7f:d9:22:a4:
                    f2:90:18:1d:a6:e4:62:38:41:6f:b8:4b:01:85:43:
                    fb:7e:85:8f:6b:83:01:ba:60:da:82:15:04:75:77:
                    69:b3:92:62:ea:b4:31:b8:ec:8c:9d:4b:8c:82:7e:
                    1d:24:5a:9d:37:15:ad:42:66:23:88:6c:ad:48:0e:
                    1d:fc:a3:01:f6:94:d0:c7:2b:6a:6a:4b:42:0c:6d:
                    63:9d:24:4f:90:8a:c6:23:59:0d:70:ae:01:b3:c4:
                    26:44:0b:cd:08:e4:45:ab:20:cd:b3:45:3c:4b:5a:
                    23:9c:0a:7c:4a:32:6e:e2:e5:dd:d0:f7:b1:ac:d6:
                    71:a0:d6:fb:07:48:2c:aa:4e:33:25:db:1a:f9:69:
                    74:46:90:1e:cc:ed:a7:e2:d2:a9:d6:00:5d:72:c0:
                    2d:d7:ff:08:0d:7f:6a:fc:00:04:49:70:32:0f:c9:
                    1b:c2:94:d3:f7:fe:b8:e3:32:23:12:8f:8c:a0:cb:
                    df:99:1e:c9:dd:f5:67:6d:48:dc:c7:0d:42:8b:3b:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:34:CE:45:5F:07:56:D8:23:0A:BD:7B:10:B4:1E:79:12:97:42:99
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/XzTORV8HVtgjCr17ELQeeRKXQpk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:9f:97:82:ab:6d:69:28:94:01:c2:13:13:32:a2:e9:9b:5b:
         c5:b5:fa:2c:1c:59:64:ba:63:0f:b1:b8:52:1b:03:43:09:dc:
         d9:b2:ac:81:1c:2a:c3:df:c3:ab:f8:d3:1c:c6:93:00:56:b5:
         fa:cd:70:cb:d2:70:c6:63:8c:a0:b4:f0:32:1d:db:05:dd:9c:
         59:db:6c:ee:50:ef:76:8d:84:2c:b8:c4:1b:a9:e5:38:87:cd:
         b0:ac:73:e8:65:68:64:08:05:46:fd:b4:a7:c0:a9:e5:72:d1:
         f2:9e:0b:69:af:f8:aa:a0:e2:24:8b:0e:3b:4e:71:15:4f:fe:
         82:9f:30:7b:65:d9:4a:67:bf:e0:f8:f9:49:7a:a9:e7:37:e2:
         ea:42:f4:40:a7:ab:9b:87:93:89:04:7f:3e:25:77:ff:ba:95:
         0e:ac:6e:63:8a:1d:3b:67:d5:2d:ff:fe:55:66:23:70:bc:a2:
         c6:16:05:f7:d4:57:2b:e7:2c:f1:80:5a:8c:d9:63:a1:c0:9c:
         f9:2c:14:01:55:0a:9d:95:06:64:32:38:f3:a3:06:44:b6:2d:
         7f:00:2d:3e:29:30:4e:0a:bb:9c:0c:a1:5f:fa:d5:ca:66:e2:
         f1:07:eb:3b:f6:9e:82:40:65:8b:2c:f8:ba:4f:25:ad:a8:69:
         ce:c6:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:40 2026 by rpki-client