Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/cUjQyPgZX_hLibIAsj-O3NYIy14.roa
File:                     cUjQyPgZX_hLibIAsj-O3NYIy14.roa (raw, json)
Hash identifier:          drXIVLh9LVPy+4m5JM84FOQr+lMuxb8zzHqI4ldInI8=
Subject key identifier:   71:48:D0:C8:F8:19:5F:F8:4B:89:B2:00:B2:3F:8E:DC:D6:08:CB:5E
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       E7
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/cUjQyPgZX_hLibIAsj-O3NYIy14.roa
Signing time:             Tue 31 Mar 2026 08:29:51 +0000
ROA not before:           Tue 31 Mar 2026 08:29:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        36.3.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7148D0C8F8195FF84B89B200B23F8EDCD608CB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:b9:c0:cc:26:ae:d3:21:af:27:a6:94:4e:
                    06:f1:75:f7:94:7a:a8:d1:73:30:3e:f7:d6:e4:8b:
                    42:76:85:11:c0:a0:d5:ed:7b:21:ac:40:63:37:04:
                    c8:21:15:55:81:16:d0:2e:c1:2d:fe:97:26:03:49:
                    1a:b0:a7:73:15:02:07:47:0c:80:54:a7:a4:61:9c:
                    69:94:92:b9:bd:5d:e2:6a:67:ba:ee:94:04:88:5d:
                    71:82:09:32:1e:73:23:00:28:d2:79:ed:5e:af:01:
                    e5:b2:e1:b6:2a:83:93:1f:37:e3:31:cb:e4:68:ec:
                    9e:22:2f:3a:af:52:92:0e:66:f4:76:40:b9:d0:a5:
                    0a:5a:8d:fe:e8:de:43:50:d6:3e:28:c5:c6:ea:c3:
                    71:27:38:9f:7b:aa:73:2b:cc:10:58:ed:14:3c:66:
                    02:66:15:83:c3:75:c2:fd:21:19:40:6f:3a:27:4d:
                    68:59:24:5a:3e:44:9e:f6:64:5a:d5:f7:e4:2e:32:
                    92:82:7f:cc:b9:3f:04:40:2f:18:b3:ae:d4:03:7c:
                    24:6f:5b:ee:60:cc:7c:13:12:ad:56:cf:48:9e:cd:
                    ea:21:54:0a:f3:2a:13:be:97:66:fb:a9:06:d8:b3:
                    b2:18:aa:72:25:21:47:e3:93:a9:03:1f:3c:73:81:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:48:D0:C8:F8:19:5F:F8:4B:89:B2:00:B2:3F:8E:DC:D6:08:CB:5E
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/cUjQyPgZX_hLibIAsj-O3NYIy14.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.3.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:c6:9d:e8:f5:68:d5:db:ed:1a:6b:62:77:25:14:6e:ac:d5:
         63:31:29:7d:09:74:d8:34:ad:bb:ed:d0:98:af:eb:23:45:65:
         94:62:31:fb:1b:18:ff:13:41:d7:a7:f5:60:55:45:e9:54:d8:
         c0:3a:07:c4:b3:54:c3:01:43:a0:36:bb:13:88:4d:f7:c7:a0:
         27:6d:ee:5c:f0:5e:48:9e:62:4b:80:37:6e:ea:94:c5:c7:29:
         3a:7e:8f:57:a2:d4:92:da:42:11:7b:e4:e1:0c:8f:10:a2:0b:
         5b:8e:53:c5:71:dc:a5:1d:c2:7d:c2:7f:b2:e4:4e:86:a2:de:
         fa:42:f5:68:e9:ba:fe:df:3e:4b:1c:23:bb:2b:c5:3e:ef:fc:
         51:d4:3b:c6:76:c3:0e:e7:b2:d9:89:91:31:05:74:89:48:c6:
         e5:1d:fb:bb:04:25:79:49:49:17:73:7e:04:48:47:ba:7d:5f:
         bb:de:c7:da:0a:49:63:49:8b:6b:22:22:10:d9:cb:27:25:de:
         1d:4d:3a:9d:f1:02:90:87:97:a4:b0:94:ba:2d:94:ea:0f:c7:
         2b:ce:ae:9a:a6:bb:f3:44:6f:93:fd:12:de:11:10:95:58:52:
         a1:42:65:8f:d5:5f:67:ca:84:13:bc:a7:3d:84:34:d9:d9:2c:
         8e:bd:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:03 2026 by rpki-client