Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/jTzepH9H8IwuRjyL0P29AtMe45w.roa
File:                     jTzepH9H8IwuRjyL0P29AtMe45w.roa (raw, json)
Hash identifier:          Z9Hyu72HX3V3eIEKt7ZJnvmTaKYg5EYgbh1xI68RXi4=
Subject key identifier:   8D:3C:DE:A4:7F:47:F0:8C:2E:46:3C:8B:D0:FD:BD:02:D3:1E:E3:9C
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       F2
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jTzepH9H8IwuRjyL0P29AtMe45w.roa
Signing time:             Tue 31 Mar 2026 08:29:57 +0000
ROA not before:           Tue 31 Mar 2026 08:29:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        211.13.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8D3CDEA47F47F08C2E463C8BD0FDBD02D31EE39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:16:a8:c8:6e:23:86:5d:41:2c:6c:77:99:
                    80:31:e7:21:48:d9:1b:79:08:bc:9f:78:19:d2:76:
                    80:9b:85:db:73:d0:3d:3e:7a:7b:43:32:d3:29:d2:
                    90:8c:3a:c7:59:50:35:a1:13:2f:1a:6a:c6:46:4a:
                    a6:b7:16:ce:c0:90:b8:18:69:00:02:59:42:37:7b:
                    7f:17:e6:9b:4f:87:c3:b9:82:22:ac:11:8f:9f:c0:
                    20:25:e1:ae:fd:ce:52:21:d5:47:20:11:63:3b:3e:
                    31:75:ba:77:8a:38:d7:3f:c9:b4:44:07:9b:88:e6:
                    f3:82:29:d8:76:1f:f1:02:70:4c:a7:5f:c0:2b:32:
                    e3:cb:15:2a:e6:4b:37:d1:38:15:fb:3f:5a:42:90:
                    b8:bb:0a:0e:fd:61:44:84:6a:9e:fa:51:0b:a8:3b:
                    bf:ce:30:e0:1a:b4:11:b3:77:7b:a7:3a:d7:89:8f:
                    ec:88:0b:a0:f0:c4:43:05:39:23:98:42:ba:b3:d4:
                    b4:94:84:f5:ba:64:d3:c4:32:bb:82:27:91:b4:98:
                    c7:bc:fd:07:e8:b7:4e:9f:cc:c6:e9:73:cf:5d:2e:
                    39:19:a9:8b:1d:ce:e5:73:fa:2c:cf:95:18:ed:a7:
                    91:0f:f3:2d:63:81:2a:17:e4:f2:05:9a:94:57:53:
                    90:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:DE:A4:7F:47:F0:8C:2E:46:3C:8B:D0:FD:BD:02:D3:1E:E3:9C
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jTzepH9H8IwuRjyL0P29AtMe45w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:83:92:ab:ed:05:e3:bc:4c:31:ee:f7:3a:55:f7:23:23:b6:
         d6:6d:8d:a0:43:aa:a1:8c:cf:7c:73:29:82:1b:a8:63:62:da:
         82:6e:87:4d:ef:62:ed:0b:ad:28:ca:f2:dd:b9:8f:10:05:1f:
         a4:f2:b7:0a:f2:29:10:cd:f9:7c:5b:b8:85:62:b7:b5:6f:65:
         73:ff:4c:f5:33:f4:bc:d1:87:c3:11:4e:b4:22:75:d4:79:25:
         8e:31:4e:4f:bf:b7:5b:c4:81:29:cf:51:f9:83:3b:de:8b:cc:
         fb:30:8a:ab:bf:f8:e0:bf:9c:e7:68:11:ad:e0:f9:21:b3:fa:
         94:91:fd:51:12:5d:bf:c7:d0:cc:dc:f4:9f:55:13:6b:c2:7b:
         49:d8:ad:5c:b9:8c:c7:fe:5a:2c:56:15:5c:02:b0:56:38:69:
         74:db:a2:a9:43:77:fd:df:b1:1d:93:e8:9f:0b:1a:d4:d3:8a:
         16:ba:e4:e5:57:2e:47:4f:23:1e:81:d4:e1:c8:b7:8e:78:bf:
         83:93:94:6b:cd:0c:4b:9e:18:58:c9:35:f9:8b:fe:3e:16:4d:
         37:98:37:06:21:07:b2:ae:5b:d0:d7:23:62:db:0c:27:7d:1a:
         67:5c:93:5a:d3:2a:32:07:5d:6b:b3:e7:11:2a:41:77:ab:a6:
         8b:1c:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:09 2026 by rpki-client