Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/_zHmZsW8xF07W6ewjSAtawHOI_c.roa
File:                     _zHmZsW8xF07W6ewjSAtawHOI_c.roa (raw, json)
Hash identifier:          XJeMyDsTdZybi7PZc+4Q45PdQFjTmj5280hBzZ694OM=
Subject key identifier:   FF:31:E6:66:C5:BC:C4:5D:3B:5B:A7:B0:8D:20:2D:6B:01:CE:23:F7
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0104
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/_zHmZsW8xF07W6ewjSAtawHOI_c.roa
Signing time:             Tue 31 Mar 2026 08:30:07 +0000
ROA not before:           Tue 31 Mar 2026 08:30:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        122.145.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FF31E666C5BCC45D3B5BA7B08D202D6B01CE23F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:02:8f:14:73:d4:b2:4b:2a:58:d7:a2:70:
                    f5:7f:70:ea:da:09:8a:ee:8b:8e:51:da:86:aa:26:
                    26:40:67:63:f6:82:a6:b9:dc:01:28:e9:f1:c4:77:
                    21:a8:fc:29:d0:b9:80:fc:0f:ab:79:de:62:ee:76:
                    28:39:25:24:0d:fd:15:12:3e:a9:b1:cf:1d:11:55:
                    6a:e6:88:a5:7e:af:ea:d0:4a:4a:ae:f3:3b:03:d6:
                    d2:e4:63:08:16:03:0b:db:ef:04:0e:8b:bc:2e:92:
                    76:12:03:99:f2:a0:d6:46:8b:05:d2:ee:fb:82:24:
                    7a:39:8b:96:81:5e:6a:61:aa:7d:f9:8f:14:2f:ab:
                    25:c9:d4:70:6f:53:f3:76:0f:8e:92:47:54:09:32:
                    2a:85:31:87:d0:0a:29:29:f9:32:a9:ae:25:8c:e3:
                    78:e1:98:3e:e3:7b:f7:6a:69:b7:8d:91:06:89:a2:
                    b9:4b:31:87:48:8b:e2:63:66:97:d4:3d:e2:19:07:
                    27:f5:cd:d6:66:bd:31:67:f8:bd:58:43:ea:16:c9:
                    0f:85:e2:09:60:b7:14:b8:70:0f:c1:61:c5:1f:c4:
                    1c:57:89:41:c4:c1:3d:24:0f:11:1c:90:98:02:e8:
                    62:3b:25:8d:49:5b:b3:da:e6:f5:c1:b7:e2:d6:b4:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:E6:66:C5:BC:C4:5D:3B:5B:A7:B0:8D:20:2D:6B:01:CE:23:F7
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/_zHmZsW8xF07W6ewjSAtawHOI_c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c4:9d:9f:aa:78:d9:bb:0e:68:92:bc:8e:8f:0e:14:bd:f6:2c:
         1f:56:35:9f:c5:8b:4f:c0:f4:5d:6a:b7:8f:72:fe:d3:f1:d2:
         15:75:ea:d6:37:e6:8c:29:43:3b:8e:3b:c3:c4:23:d0:e6:9c:
         92:01:3c:3d:dc:86:ff:6c:a6:58:b3:86:f5:65:f5:fc:58:0c:
         8a:3d:3c:3d:78:48:91:53:40:db:a1:53:44:29:43:58:a9:0d:
         4f:a5:4d:8d:22:fe:26:79:bc:6f:fe:c7:aa:9a:39:a1:f8:2f:
         fe:45:30:43:39:90:99:37:2e:bc:34:3e:5c:4b:44:f1:63:0a:
         b9:bc:85:a0:e6:11:0f:67:01:17:92:49:c4:8f:9c:c9:42:a8:
         6f:dc:10:1b:ff:cb:46:5f:61:05:12:60:1e:9f:ce:24:3d:d7:
         11:fc:a3:85:71:3e:94:f6:52:55:91:29:e2:67:e4:e4:be:ef:
         72:c7:d5:dc:c9:47:48:5a:e1:ad:81:be:d6:ed:e5:e1:e5:99:
         c6:d5:4d:8f:66:bf:cf:d0:c6:a8:4e:74:6f:bf:14:c4:95:55:
         a0:51:eb:a2:32:d1:c2:5c:8e:0f:ed:e3:41:4b:aa:24:1a:b8:
         7b:39:0d:cd:ae:ea:de:2f:32:7f:2c:5f:33:9e:21:49:7c:b1:
         00:7f:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:09 2026 by rpki-client