Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/gQVNhGa1_oS8ldAXz8UV3KCm3QI.roa
File:                     gQVNhGa1_oS8ldAXz8UV3KCm3QI.roa (raw, json)
Hash identifier:          9WTojYDlVd1FMWGefxDeiKpHI4rc94AnUeH6nmx0kUE=
Subject key identifier:   81:05:4D:84:66:B5:FE:84:BC:95:D0:17:CF:C5:15:DC:A0:A6:DD:02
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       FD
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/gQVNhGa1_oS8ldAXz8UV3KCm3QI.roa
Signing time:             Tue 31 Mar 2026 08:30:03 +0000
ROA not before:           Tue 31 Mar 2026 08:30:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        110.5.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=81054D8466B5FE84BC95D017CFC515DCA0A6DD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:10:7c:ed:a2:e9:a1:66:ff:33:a3:8e:89:
                    6e:3e:53:50:56:52:fc:8e:54:69:04:77:71:12:6e:
                    75:ed:41:a2:bc:58:5e:d9:04:b7:07:c5:e7:35:4a:
                    7f:b4:d6:73:29:27:12:6e:df:ca:c1:f8:37:d7:2e:
                    09:79:57:3a:89:d3:f9:1b:29:8b:ae:de:1e:2a:1e:
                    f7:50:0a:23:42:e7:6e:72:5b:8e:f4:71:15:45:0c:
                    7e:71:70:fc:9a:01:50:1b:58:2f:02:59:1f:8f:d8:
                    0d:98:75:c2:b2:a9:fc:8a:31:e6:17:cd:75:34:99:
                    e4:a5:58:56:7b:6f:2f:1b:03:5d:1a:15:5c:19:93:
                    4d:e1:30:5f:e5:be:9c:04:2f:57:27:ed:05:8a:a8:
                    d7:99:f6:e6:ff:e2:fa:47:8d:78:33:2c:b1:a5:21:
                    5c:9e:b8:c4:b3:e9:27:1a:1d:e6:7c:95:4f:2b:25:
                    c5:85:e9:2d:8d:41:22:f9:cd:26:4e:ee:78:a5:cc:
                    02:5c:05:6f:61:af:eb:b5:63:e5:7c:42:52:4a:e5:
                    f0:35:08:00:a1:38:ad:61:46:9b:6b:c5:47:4b:86:
                    40:53:ac:0f:aa:b8:74:08:3e:8e:11:9e:9e:5e:0a:
                    1c:1d:ea:b0:57:a9:a3:f9:b5:ef:a4:28:a9:d9:ea:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:05:4D:84:66:B5:FE:84:BC:95:D0:17:CF:C5:15:DC:A0:A6:DD:02
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/gQVNhGa1_oS8ldAXz8UV3KCm3QI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.5.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d2:79:4d:6f:2c:66:93:24:64:1a:14:4e:c4:7c:9c:75:76:9d:
         e9:a3:cf:66:34:f6:d7:19:f4:c5:45:b7:7e:10:d7:48:d6:fc:
         ea:95:c5:b0:25:5b:57:8c:01:a6:1c:43:50:26:e9:9a:06:af:
         d2:8c:83:a3:1b:b3:63:e3:e2:7c:93:e5:e1:bb:92:1a:cf:1a:
         e6:d9:84:a9:05:5c:13:54:db:54:2e:89:91:59:0c:54:cd:2c:
         88:3a:c8:b4:ee:17:ec:f9:9f:0b:12:5d:9c:10:2c:14:9a:26:
         59:51:92:6e:f6:c9:fb:ed:d6:2b:cc:74:3d:0d:e5:8d:9d:f7:
         cb:65:72:d7:3d:7c:49:b5:e1:aa:55:56:91:be:84:95:e8:72:
         79:16:f7:de:fe:dc:ce:ea:c5:e4:84:89:a0:14:22:7b:d2:72:
         8a:58:da:f5:cb:c6:0f:92:ba:73:c8:67:01:11:84:b7:84:6c:
         2e:57:40:c0:ed:a0:43:94:05:bf:6c:9f:19:7b:40:a0:ce:5e:
         a7:6f:66:36:54:cd:9a:56:e0:a7:bb:71:62:ed:c3:7b:fd:71:
         2d:1c:ca:f3:87:cb:bf:7e:b9:51:63:77:cc:b2:cd:16:d0:6f:
         9f:1c:0e:4d:af:4b:a2:00:25:23:80:fe:b6:1c:3c:6e:2c:c9:
         29:d6:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:53 2026 by rpki-client