Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/lTWFgy91yzEZLv4Pc1m2hQZsK8E.roa
File:                     lTWFgy91yzEZLv4Pc1m2hQZsK8E.roa (raw, json)
Hash identifier:          ygZAQ9AjZ8n8behPgpt53h7ZAoym0MHWmVseOYeL9xQ=
Subject key identifier:   95:35:85:83:2F:75:CB:31:19:2E:FE:0F:73:59:B6:85:06:6C:2B:C1
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       FF
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/lTWFgy91yzEZLv4Pc1m2hQZsK8E.roa
Signing time:             Tue 31 Mar 2026 08:30:04 +0000
ROA not before:           Tue 31 Mar 2026 08:30:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        116.70.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=953585832F75CB31192EFE0F7359B685066C2BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:bb:b0:89:6f:08:af:ae:ee:a2:ce:1b:2d:
                    fb:a6:49:f5:c2:6f:66:c8:29:0b:e8:2a:29:29:97:
                    8b:e3:0c:77:5f:85:8e:35:47:23:f6:57:60:59:e9:
                    0f:28:13:5b:97:37:66:8c:fc:11:ea:54:e9:dc:23:
                    73:52:46:be:cb:4e:26:d7:be:bf:41:84:c6:89:18:
                    0c:05:7a:b9:e3:1a:ce:3b:63:e9:ff:52:ac:73:3b:
                    fd:39:57:0f:08:b4:25:a4:15:aa:53:7d:f4:cc:52:
                    a3:48:d0:2c:1c:7d:4b:61:1b:79:35:8e:6f:d4:ba:
                    bb:ab:3d:3e:b1:74:d5:a7:79:8a:36:0d:70:2d:4e:
                    50:a0:59:3b:f5:75:ad:c8:f7:ca:c0:0d:48:12:1b:
                    bf:9e:c8:66:bb:50:2d:7b:cb:a8:c8:4d:dc:a2:e2:
                    31:88:e9:f6:e3:32:47:67:9a:25:38:19:a9:a8:9f:
                    4a:31:e7:63:83:22:47:6e:c5:2a:96:2b:ff:3b:11:
                    e1:63:e1:2b:66:ea:1d:1a:19:60:65:6b:cf:a3:6c:
                    d0:57:36:75:1b:fb:d0:16:01:57:a0:bf:3c:62:ee:
                    8c:4e:5f:fc:41:ec:40:a4:c2:e8:9e:d2:77:4d:7a:
                    6b:f7:02:6a:65:89:3a:ca:b0:65:79:ca:1f:b4:87:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:85:83:2F:75:CB:31:19:2E:FE:0F:73:59:B6:85:06:6C:2B:C1
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/lTWFgy91yzEZLv4Pc1m2hQZsK8E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.70.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:d4:15:49:88:90:30:95:6d:5c:53:40:40:14:73:6e:1a:
         eb:9a:a0:22:dc:b3:f9:71:57:2e:12:ff:c2:94:38:bd:19:a3:
         55:d2:41:d2:67:7c:13:68:5a:76:c8:06:2e:d0:44:88:30:85:
         ec:a7:5c:d7:85:28:c8:3c:29:73:55:6a:96:ed:45:8b:bd:db:
         89:63:33:c6:ad:de:7f:e9:79:7c:f8:20:45:40:c4:02:85:38:
         35:b3:8d:8c:f3:5a:43:8f:b2:46:ef:93:9e:94:72:d4:3c:e8:
         de:d3:bb:dc:53:e4:f9:9a:ee:77:08:68:8f:c8:69:bd:f6:71:
         34:e0:e7:ca:28:9c:76:34:7a:c4:04:13:27:d2:79:b1:78:bb:
         ea:8f:8e:a3:d6:05:6a:4f:73:47:9e:25:1b:08:32:d7:4d:b1:
         53:c8:aa:3e:d4:9d:4b:53:d9:cd:7b:86:21:e5:90:cc:e5:d5:
         7e:fb:dd:19:c8:59:1f:0e:c2:95:21:10:f9:16:79:9a:ed:7f:
         31:71:5a:bc:84:1a:88:0d:03:44:38:45:8f:bd:d8:5d:33:b8:
         a2:5f:5d:45:6f:27:8a:d1:b7:5a:46:c3:6a:16:0f:ce:6e:d8:
         da:13:0b:77:72:bf:6c:3f:65:f9:3f:4e:6a:1c:aa:e0:b2:ce:
         45:b7:30:00
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNjAzMzEw
ODMwMDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1MzU4NTgzMkY3NUNC
MzExOTJFRkUwRjczNTlCNjg1MDY2QzJCQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/g7uwiW8Ir67uos4bLfumSfXCb2bIKQvoKikpl4vjDHdfhY41
RyP2V2BZ6Q8oE1uXN2aM/BHqVOncI3NSRr7LTibXvr9BhMaJGAwFernjGs47Y+n/
UqxzO/05Vw8ItCWkFapTffTMUqNI0CwcfUthG3k1jm/UururPT6xdNWneYo2DXAt
TlCgWTv1da3I98rADUgSG7+eyGa7UC17y6jITdyi4jGI6fbjMkdnmiU4Gamon0ox
52ODIkduxSqWK/87EeFj4Stm6h0aGWBla8+jbNBXNnUb+9AWAVegvzxi7oxOX/xB
7ECkwuie0ndNemv3AmpliTrKsGV5yh+0h0JDAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUlTWFgy91yzEZLv4Pc1m2hQZsK8EwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MC9sVFdGZ3k5MXl6RVpMdjRQYzFtMmhRWnNLOEUucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGdEbAMA0GCSqGSIb3DQEBCwUAA4IBAQBL
GNQVSYiQMJVtXFNAQBRzbhrrmqAi3LP5cVcuEv/ClDi9GaNV0kHSZ3wTaFp2yAYu
0ESIMIXsp1zXhSjIPClzVWqW7UWLvduJYzPGrd5/6Xl8+CBFQMQChTg1s42M81pD
j7JG75OelHLUPOje07vcU+T5mu53CGiPyGm99nE04OfKKJx2NHrEBBMn0nmxeLvq
j46j1gVqT3NHniUbCDLXTbFTyKo+1J1LU9nNe4Yh5ZDM5dV++90ZyFkfDsKVIRD5
Fnma7X8xcVq8hBqIDQNEOEWPvdhdM7iiX11FbyeK0bdaRsNqFg/ObtjaEwt3cr9s
P2X5P05qHKrgss5FtzAA
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:59 2026 by rpki-client