Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/cIf4wjQCryMWQu6BTSnGo_uREak.roa
File:                     cIf4wjQCryMWQu6BTSnGo_uREak.roa (raw, json)
Hash identifier:          mFgMQtuJuWZDsIOL6pyhGfFrFDeAEXke5Iy0lnMSjZ8=
Subject key identifier:   70:87:F8:C2:34:02:AF:23:16:42:EE:81:4D:29:C6:A3:FB:91:11:A9
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       DE
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/cIf4wjQCryMWQu6BTSnGo_uREak.roa
Signing time:             Sun 01 Feb 2026 01:35:15 +0000
ROA not before:           Sun 01 Feb 2026 01:35:15 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        120.51.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Feb  1 01:35:15 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=7087F8C23402AF231642EE814D29C6A3FB9111A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:d6:73:7e:15:d1:68:53:08:ee:21:45:90:
                    0f:2f:5f:4c:7e:bf:a5:f9:24:e1:cd:1e:9d:2a:cb:
                    bb:ba:98:2b:c3:87:2b:cf:ab:d6:63:fe:f4:d2:ba:
                    5e:e4:a4:b1:b5:02:6f:40:6d:d6:1e:50:85:1f:80:
                    a3:1d:89:2b:bb:65:0a:fd:e3:98:59:20:98:f9:ff:
                    72:dd:c7:e1:7c:ca:82:f4:35:be:a9:8b:7e:c4:94:
                    96:4b:e2:f5:71:43:0f:b0:20:c8:91:55:4b:30:ae:
                    24:9f:43:18:2a:71:57:6a:0b:06:54:0d:e6:f9:50:
                    c2:46:55:b0:e9:0c:4c:22:d1:d5:06:4f:98:e2:fd:
                    fd:68:ab:b9:8e:37:42:e2:5c:2d:92:11:77:83:27:
                    a5:0d:19:d0:bb:12:c6:11:6d:f0:bf:aa:76:06:30:
                    35:0a:ef:78:22:ea:94:bf:1d:20:ac:87:67:19:53:
                    00:6b:b8:bd:ac:e9:51:73:fc:a9:cc:cd:a1:c7:81:
                    8d:c5:b4:e1:51:f3:ce:d5:dc:ee:f8:98:31:f1:5d:
                    da:83:2d:ad:6d:2d:fe:0e:d2:25:fc:c2:f8:64:95:
                    8c:84:e7:17:52:45:80:91:f1:28:b0:ca:80:91:94:
                    15:21:61:45:0d:41:7b:b4:30:f7:c7:05:1f:05:07:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:87:F8:C2:34:02:AF:23:16:42:EE:81:4D:29:C6:A3:FB:91:11:A9
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/cIf4wjQCryMWQu6BTSnGo_uREak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.51.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e5:2d:cd:22:9f:68:46:40:80:12:72:4a:f5:61:2c:31:31:8e:
         05:e2:98:10:67:11:b2:90:71:bb:43:42:90:0c:c2:17:29:c2:
         32:ae:98:40:70:ef:76:ae:fc:3f:84:9a:24:c2:4e:a5:7d:7e:
         7d:9f:5f:b2:16:91:b0:da:7b:b7:a7:5e:fc:ad:9d:d2:e3:cd:
         ec:48:7e:11:0e:43:5e:20:69:44:be:ec:d1:d5:ce:d2:fc:c7:
         e6:ab:3e:48:24:ec:83:18:1d:39:10:4f:66:ad:3d:f0:d0:51:
         58:ea:7f:fa:ef:a2:6a:d9:9c:70:d1:d5:09:3b:58:1c:11:dc:
         fe:e7:aa:b9:4c:e1:b4:97:3b:e3:80:39:fe:a5:86:76:b1:0f:
         da:61:bb:35:71:7c:8a:f1:bf:a0:ef:f3:0e:f5:7b:e7:c6:1a:
         68:10:10:7c:a5:14:47:37:77:98:4a:31:70:7e:a8:33:ea:af:
         d9:b6:d6:df:9a:81:7b:ae:3d:f6:ad:9c:4c:55:ee:70:0c:8b:
         a4:7c:4e:24:d1:d5:27:06:14:97:66:a9:6a:c0:e7:55:c5:a9:
         fe:ef:02:b4:4f:86:8a:f5:bb:2c:dc:af:38:13:6c:05:67:c1:
         ca:ce:8f:77:07:db:ba:ff:8e:fb:16:d5:58:8f:f7:19:05:43:
         50:be:cf:84
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNjAyMDEw
MTM1MTVaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwODdGOEMyMzQwMkFG
MjMxNjQyRUU4MTREMjlDNkEzRkI5MTExQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMb9ZzfhXRaFMI7iFFkA8vX0x+v6X5JOHNHp0qy7u6mCvDhyvP
q9Zj/vTSul7kpLG1Am9AbdYeUIUfgKMdiSu7ZQr945hZIJj5/3Ldx+F8yoL0Nb6p
i37ElJZL4vVxQw+wIMiRVUswriSfQxgqcVdqCwZUDeb5UMJGVbDpDEwi0dUGT5ji
/f1oq7mON0LiXC2SEXeDJ6UNGdC7EsYRbfC/qnYGMDUK73gi6pS/HSCsh2cZUwBr
uL2s6VFz/KnMzaHHgY3FtOFR887V3O74mDHxXdqDLa1tLf4O0iX8wvhklYyE5xdS
RYCR8SiwyoCRlBUhYUUNQXu0MPfHBR8FB2YHAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUcIf4wjQCryMWQu6BTSnGo/uREakwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9jSWY0d2pRQ3J5TVdRdTZCVFNuR29fdVJFYWsucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFeDOgMA0GCSqGSIb3DQEBCwUAA4IBAQDlLc0in2hGQIASckr1YSwxMY4F4pgQ
ZxGykHG7Q0KQDMIXKcIyrphAcO92rvw/hJokwk6lfX59n1+yFpGw2nu3p178rZ3S
483sSH4RDkNeIGlEvuzR1c7S/Mfmqz5IJOyDGB05EE9mrT3w0FFY6n/676Jq2Zxw
0dUJO1gcEdz+56q5TOG0lzvjgDn+pYZ2sQ/aYbs1cXyK8b+g7/MO9XvnxhpoEBB8
pRRHN3eYSjFwfqgz6q/ZttbfmoF7rj32rZxMVe5wDIukfE4k0dUnBhSXZqlqwOdV
xan+7wK0T4aK9bss3K84E2wFZ8HKzo93B9u6/477FtVYj/cZBUNQvs+E
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:06 2026 by rpki-client