Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/hQwLmaWHrQXbFUO42_yDh2jkwa4.roa
File:                     hQwLmaWHrQXbFUO42_yDh2jkwa4.roa (raw, json)
Hash identifier:          meLxYWs65K8AGTtOrsWlzfA8aDaMvzVtxZLqlDvinqM=
Subject key identifier:   85:0C:0B:99:A5:87:AD:05:DB:15:43:B8:DB:FC:83:87:68:E4:C1:AE
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       DC
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hQwLmaWHrQXbFUO42_yDh2jkwa4.roa
Signing time:             Sun 01 Feb 2026 01:35:14 +0000
ROA not before:           Sun 01 Feb 2026 01:35:14 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        101.50.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Feb  1 01:35:14 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=850C0B99A587AD05DB1543B8DBFC838768E4C1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:e4:cd:21:a2:ca:3d:45:40:15:cb:07:18:
                    c5:d4:5b:e8:a3:5d:d2:05:bb:8f:a2:85:10:e0:eb:
                    dd:39:f2:8f:7b:e7:2e:1b:ad:50:ca:6b:13:c1:52:
                    4a:b5:18:77:2e:f6:c4:a6:7a:d3:44:96:1e:b9:11:
                    b9:da:66:3c:03:0d:48:b7:0c:ad:e2:d8:9b:a7:5a:
                    1f:4c:5c:f0:d1:c0:a3:e9:52:34:f9:0e:72:04:29:
                    40:45:ac:fc:a5:ed:6f:86:8a:f3:f0:f8:91:27:bc:
                    21:c9:80:e6:40:f7:f2:86:48:88:78:0f:0f:df:31:
                    9b:64:b1:86:b1:6f:76:e3:13:a8:71:68:f2:4c:90:
                    f8:96:ec:92:95:2e:aa:85:32:0a:5b:2b:22:50:8b:
                    77:dd:9e:ff:55:29:5f:f1:a7:e7:57:76:86:fe:b6:
                    38:cc:0f:d3:f7:0f:bb:cc:ff:cd:86:9b:e1:10:15:
                    d1:1d:1a:88:24:db:77:47:2d:bf:12:d7:99:ba:23:
                    06:a9:84:c3:45:9f:7f:f4:67:5a:bf:37:5f:71:aa:
                    f0:c0:5b:60:00:c2:3f:3f:19:6f:77:73:dd:d3:67:
                    8f:7c:33:55:98:ee:71:7b:4a:75:8e:00:f3:d3:02:
                    02:56:e2:3c:53:3a:0d:a7:8c:e5:9c:7a:b3:42:d7:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0C:0B:99:A5:87:AD:05:DB:15:43:B8:DB:FC:83:87:68:E4:C1:AE
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hQwLmaWHrQXbFUO42_yDh2jkwa4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e9:33:1e:f4:4c:e5:50:f3:74:c6:9c:44:7a:4e:21:fc:c5:a5:
         bc:4d:2d:71:c8:ca:c7:67:e8:1d:e8:3a:05:fb:d7:0d:35:be:
         eb:aa:82:9e:9c:48:f1:9a:84:f8:1f:e2:08:be:b9:be:83:11:
         90:63:26:d4:94:67:8f:c6:ae:aa:b3:46:6f:77:20:a7:92:19:
         ee:63:57:b4:63:1c:66:46:d4:53:d7:ed:88:6c:c4:cc:06:7e:
         b1:32:00:b3:eb:d6:e6:37:f1:5b:f6:cf:17:b0:ee:c6:66:60:
         da:b2:a0:fc:00:e0:9e:92:79:d9:1a:48:ee:b7:68:e0:18:21:
         47:44:76:38:b7:f3:d2:0e:2d:66:2f:8a:65:39:e1:4e:f5:dd:
         a0:32:60:72:88:a1:eb:a0:0f:a1:39:95:fd:f5:6a:4d:88:8c:
         06:6f:36:31:4a:54:11:5a:c6:09:49:49:f1:b5:07:63:9e:06:
         d0:83:83:64:f0:a1:8b:79:2b:9a:9a:48:6e:80:fa:e8:06:43:
         9f:18:68:2d:20:c2:5c:b2:fd:15:5a:08:5d:f3:63:55:ff:41:
         f4:64:b3:f8:59:b9:5b:b9:b0:67:43:0a:4d:8f:39:d3:ee:f9:
         3c:53:df:91:5b:5b:97:25:3a:7e:b0:65:06:e5:2c:2a:4d:27:
         47:5b:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:05 2026 by rpki-client