Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/gpBeJysIGQlW4AIZpkiHad-tYLg.roa
File:                     gpBeJysIGQlW4AIZpkiHad-tYLg.roa (raw, json)
Hash identifier:          KRydr5d83aT+vGaXRdDlZeKKiTuvuEWjHM2lb+B91D8=
Subject key identifier:   82:90:5E:27:2B:08:19:09:56:E0:02:19:A6:48:87:69:DF:AD:60:B8
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       EA
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/gpBeJysIGQlW4AIZpkiHad-tYLg.roa
Signing time:             Tue 31 Mar 2026 08:29:53 +0000
ROA not before:           Tue 31 Mar 2026 08:29:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        120.51.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82905E272B08190956E00219A6488769DFAD60B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:20:01:a4:dc:bb:67:5d:cb:6b:a9:c1:45:5c:
                    b3:00:22:4e:8a:ca:d2:55:80:76:61:61:47:3f:91:
                    b4:da:9f:90:f0:2f:b6:c4:91:57:e0:c3:e5:04:f4:
                    94:e8:ea:a4:1e:38:fd:aa:92:3c:8c:32:b8:4d:3c:
                    aa:15:55:8f:c0:65:5f:40:4e:79:a8:c2:64:b7:12:
                    86:13:99:d4:7e:93:d7:a3:89:09:12:2a:57:0e:17:
                    5f:a1:f5:cc:65:5f:e4:3b:f0:ea:50:8c:7e:39:98:
                    64:70:8c:b0:40:3f:15:6a:6c:05:e2:21:33:0d:b4:
                    dd:0c:8c:00:11:06:57:7f:c7:3c:8a:0d:f3:f0:a0:
                    fc:15:a7:e1:97:c4:08:e9:52:fe:26:17:83:d2:3f:
                    64:10:3a:9b:18:ad:7c:b5:98:fc:f8:a9:e9:0a:34:
                    14:99:74:30:1d:e9:dd:33:f2:fb:77:31:2d:64:f3:
                    2a:39:f6:a4:00:f4:fb:e0:fa:bd:38:5d:9c:b4:9e:
                    1d:6a:a5:d8:b8:5e:9a:e9:06:51:ce:f2:0d:8e:1d:
                    39:e2:45:fd:72:2b:0a:77:36:25:1d:1f:52:ae:7e:
                    ad:73:75:b0:e0:8c:b5:44:53:2b:d3:6b:96:a5:c7:
                    2f:e1:86:3a:48:52:20:73:7f:17:96:5a:61:d3:ee:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:90:5E:27:2B:08:19:09:56:E0:02:19:A6:48:87:69:DF:AD:60:B8
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/gpBeJysIGQlW4AIZpkiHad-tYLg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.51.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:78:4c:69:15:dc:c4:fb:ba:52:21:c7:f8:96:36:c1:2c:27:
         ba:0f:8e:5e:2a:24:9f:d8:b7:82:b9:f0:65:4c:9d:2b:11:69:
         a6:83:bb:28:42:2a:d6:77:34:a0:a9:04:3f:5f:17:9c:54:2c:
         50:74:28:da:bc:12:1b:fa:bf:77:a0:30:4d:dc:31:c8:02:cc:
         3b:e9:94:a6:fa:18:07:62:2b:cd:bf:50:0f:db:fd:7b:67:aa:
         29:a3:4a:f8:e1:40:1e:d5:f6:a3:eb:8b:51:8b:d7:73:ba:dc:
         08:15:03:2d:e1:e0:ed:db:26:14:66:e4:0b:da:b8:89:fe:43:
         2e:97:c8:1c:a5:19:53:2f:2c:37:6d:04:4f:75:88:82:b7:b1:
         39:ba:7f:9e:1a:4c:99:16:a5:f1:13:23:0c:51:c3:cb:26:5b:
         11:89:62:76:75:34:6a:f3:42:d7:55:36:ac:30:80:86:54:ad:
         01:4f:a8:4b:2f:76:61:29:f0:01:27:19:6e:35:c1:c6:2f:25:
         80:a3:26:88:fc:7a:af:03:2b:4b:cb:a9:0b:4e:03:81:7b:44:
         f3:92:72:1c:91:89:06:5b:47:bf:b1:7c:ae:cb:cb:3e:3b:51:
         27:f7:38:7c:8c:35:2b:29:6c:95:63:da:14:04:d7:c9:20:ab:
         8c:9d:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:01 2026 by rpki-client