Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/omY9DvjPiRTWUi_Hf41FKKlAS6g.roa
File:                     omY9DvjPiRTWUi_Hf41FKKlAS6g.roa (raw, json)
Hash identifier:          j6pEx14tIoVGygJE6/dXeKW9bc3CmxQw951rVhiyG9U=
Subject key identifier:   A2:66:3D:0E:F8:CF:89:14:D6:52:2F:C7:7F:8D:45:28:A9:40:4B:A8
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0109
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/omY9DvjPiRTWUi_Hf41FKKlAS6g.roa
Signing time:             Tue 31 Mar 2026 08:30:12 +0000
ROA not before:           Tue 31 Mar 2026 08:30:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        150.91.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A2663D0EF8CF8914D6522FC77F8D4528A9404BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d2:4b:74:40:b4:6b:ef:f6:90:8c:7d:50:28:
                    5b:4f:18:cf:9b:e4:20:35:93:96:a6:81:75:b7:58:
                    f9:57:78:f1:b6:99:d0:f4:63:a4:06:c6:42:96:fb:
                    01:67:b3:4a:e5:fb:3b:7f:9a:b6:bd:21:c0:2b:8e:
                    2b:63:9b:dd:71:1b:d0:ea:74:89:c7:9e:39:7c:d9:
                    ef:18:80:ed:09:20:ac:c7:2a:b9:01:85:6a:c0:62:
                    4f:54:3a:20:37:06:ca:8f:ac:64:66:c5:92:1c:0e:
                    17:ba:69:51:40:96:8a:e6:5e:73:6e:84:f7:15:f9:
                    94:0e:ad:1a:1b:5b:4a:4b:fe:ca:c3:a5:cb:21:8e:
                    a3:29:9b:1a:2f:2d:17:aa:a7:22:a4:cf:73:63:a1:
                    29:b1:57:a2:5e:65:19:9f:d0:db:3c:1b:df:72:1a:
                    5b:6f:cc:7f:bd:a8:68:84:21:71:a4:c7:ad:25:e0:
                    09:ed:73:6b:8b:0c:f2:59:c8:41:99:52:9b:9d:68:
                    27:48:08:10:92:64:00:85:44:34:48:93:3d:a4:4e:
                    98:07:98:a0:c6:da:77:e8:b7:88:c3:d0:81:67:3b:
                    4a:3c:38:3d:a2:5c:1d:54:63:dc:3c:85:08:3e:5c:
                    50:d6:33:1a:b1:5f:b3:d9:67:65:69:9d:be:c8:7c:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:3D:0E:F8:CF:89:14:D6:52:2F:C7:7F:8D:45:28:A9:40:4B:A8
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/omY9DvjPiRTWUi_Hf41FKKlAS6g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.91.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:d2:76:e7:6b:52:91:56:72:69:07:84:4d:13:58:80:f1:
         de:b7:9d:a4:b6:83:04:2d:55:8d:ac:51:5a:9e:d7:87:35:0e:
         37:07:9c:d2:93:c1:7c:ac:42:83:21:8f:bc:36:27:18:ba:eb:
         61:b0:80:ed:54:c7:86:9a:d8:5c:eb:94:ab:e2:de:03:ea:55:
         ad:3c:55:03:e3:5b:c1:f9:58:f8:62:fa:3a:99:9e:0d:2b:66:
         33:63:8a:af:f9:38:19:74:4c:0f:97:1b:10:2d:1e:bf:55:8d:
         e3:13:0d:e1:d7:dd:ce:8b:9f:36:dd:56:2a:c5:70:fe:3e:7e:
         ed:1b:e5:19:53:4f:d3:6f:db:c3:31:ea:49:0b:7d:2d:67:00:
         34:a8:7e:71:5d:4c:96:28:c2:f8:49:e7:3a:34:1a:b9:0e:df:
         37:b8:c6:60:94:27:bf:4f:16:1b:56:92:35:36:e3:25:43:c8:
         03:f1:d0:31:83:f1:f3:05:4a:a6:8b:dd:74:47:23:c3:28:7a:
         0b:83:61:14:5c:93:a4:76:f0:b4:d7:7a:a1:35:6e:75:f9:c5:
         38:85:e8:5c:0c:f0:06:5a:16:70:f8:64:30:36:93:2e:f4:68:
         eb:9c:e9:bd:ca:cb:c7:06:9c:80:54:c6:8c:66:7e:00:e2:ec:
         d3:9e:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:10 2026 by rpki-client