Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/dZjGBJDyC12ePHDTsAXeRH-F-OY.roa
File:                     dZjGBJDyC12ePHDTsAXeRH-F-OY.roa (raw, json)
Hash identifier:          8mY3Lac85vWgO7BvMmcsGXzcGcnlQePbqLUP73Wt2uM=
Subject key identifier:   75:98:C6:04:90:F2:0B:5D:9E:3C:70:D3:B0:05:DE:44:7F:85:F8:E6
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0118
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/dZjGBJDyC12ePHDTsAXeRH-F-OY.roa
Signing time:             Tue 31 Mar 2026 08:30:19 +0000
ROA not before:           Tue 31 Mar 2026 08:30:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        124.155.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7598C60490F20B5D9E3C70D3B005DE447F85F8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:b3:45:34:36:cf:cc:cd:d9:cd:08:3e:21:
                    6d:7c:5f:01:86:12:9d:16:40:45:27:e7:17:a9:7c:
                    41:c3:07:3d:5b:42:5a:e7:90:de:d5:7b:3b:b8:e8:
                    6d:33:c5:47:34:fe:f0:94:cc:61:85:18:74:f2:c0:
                    84:8f:87:be:ae:b8:db:50:b4:c9:b2:09:95:91:c7:
                    5c:22:ec:1f:75:77:8d:01:c3:2a:0d:25:08:10:e9:
                    13:48:53:63:c0:eb:fa:58:3c:8e:d1:56:a6:96:30:
                    da:ef:91:3d:fe:64:97:21:4e:66:d7:4b:48:11:19:
                    bb:c6:c8:3e:5c:a1:4f:da:a2:92:be:07:ee:8e:8a:
                    b8:ae:18:1d:bb:ed:4b:fb:f6:5e:65:8d:1f:45:c7:
                    43:ef:ed:52:09:17:08:66:3d:b8:c6:89:3b:b2:e8:
                    c6:42:2c:76:fc:1b:7c:b5:bb:fa:b3:2b:50:3b:21:
                    9e:31:05:84:02:a6:32:07:12:fa:86:96:1d:f3:16:
                    e7:42:ae:1f:6f:18:71:d8:e0:ea:07:46:8a:f9:d1:
                    f8:04:dc:df:b8:4f:3c:c6:94:22:17:17:56:2e:23:
                    37:33:45:e9:ef:f4:2b:47:53:63:e2:78:06:c6:f1:
                    ba:f2:65:60:b2:39:93:57:77:d1:a1:5a:64:09:59:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:98:C6:04:90:F2:0B:5D:9E:3C:70:D3:B0:05:DE:44:7F:85:F8:E6
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/dZjGBJDyC12ePHDTsAXeRH-F-OY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:8a:d2:98:62:05:51:f3:86:39:1a:dc:6d:bf:fb:be:d2:
         60:31:ec:26:f0:c2:5f:8e:10:73:93:1d:be:5a:e1:82:40:01:
         54:d3:61:6c:20:10:e2:f2:4b:52:c1:20:2b:82:16:80:3b:ce:
         83:5c:9b:df:0a:5f:c6:fd:c3:99:c2:de:5d:9f:b1:9f:7d:c9:
         33:1d:1c:d8:df:af:23:fe:f4:e1:a4:b0:83:d4:6b:97:bd:a1:
         e5:ce:02:27:f5:16:36:f7:22:86:51:e6:59:64:0d:9c:b6:5b:
         ea:36:f6:8b:a9:b2:0a:39:dd:ed:30:51:0d:f5:a3:37:a5:70:
         09:e6:78:3b:36:4c:d0:e8:d7:1e:b3:3d:47:64:70:58:fd:90:
         d6:eb:8d:09:c4:ed:4f:47:4c:f9:27:d2:97:72:f3:fd:ce:e9:
         4a:81:b3:e9:f2:fc:69:e7:48:d8:58:c7:dc:2a:3e:5d:9e:5f:
         fa:b6:df:e1:10:c6:f1:ec:29:0b:f8:9a:22:e3:04:ae:1b:1d:
         82:46:0a:ad:6f:64:a2:50:8b:33:b5:6e:32:fe:8f:82:35:3d:
         d6:7d:b4:3c:e7:d4:77:31:0d:69:93:cd:e2:76:82:3e:62:71:
         82:59:92:21:79:90:44:8a:c0:2b:f5:42:77:00:71:f9:a5:f0:
         22:d3:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:22 2026 by rpki-client