Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/t-OwWhP_l7OzfWRjB2wqppadB2M.roa
File:                     t-OwWhP_l7OzfWRjB2wqppadB2M.roa (raw, json)
Hash identifier:          kGPEQcDUBJvw+3OyyqMHC8qRbYxBkSbD8tLiIQHbE9Q=
Subject key identifier:   B7:E3:B0:5A:13:FF:97:B3:B3:7D:64:63:07:6C:2A:A6:96:9D:07:63
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       010C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t-OwWhP_l7OzfWRjB2wqppadB2M.roa
Signing time:             Tue 31 Mar 2026 08:30:14 +0000
ROA not before:           Tue 31 Mar 2026 08:30:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        202.208.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B7E3B05A13FF97B3B37D6463076C2AA6969D0763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a6:9b:4e:68:0f:09:ba:59:fe:9e:e2:27:2c:
                    12:56:dc:88:dd:af:a4:de:ed:58:56:a5:95:fe:56:
                    f9:ce:53:f6:12:df:72:b6:fb:86:20:53:ff:23:7d:
                    ae:4d:ac:8a:0b:bb:e3:7b:e5:a1:f0:fc:60:fe:bf:
                    c1:21:52:7a:6e:e7:a5:6e:ca:5a:c6:93:1f:66:15:
                    c3:2a:41:10:7c:62:b5:12:a0:d5:4d:95:b0:96:bd:
                    0b:fc:82:19:dd:7a:bb:af:79:93:36:3a:a4:d7:22:
                    8d:2d:60:81:c2:9c:eb:45:5a:f6:b4:26:ab:78:1d:
                    60:db:63:30:b8:67:a4:e3:5e:6f:09:ac:5b:51:f3:
                    3f:da:bc:27:9f:98:03:7b:32:c0:40:e6:83:10:54:
                    f5:e3:3a:02:81:89:f1:a7:68:bd:05:54:d2:b0:ce:
                    f4:58:25:b2:9e:d3:cc:e7:85:f0:3f:77:53:bd:64:
                    93:e0:cc:b5:22:2c:c7:46:23:89:1b:f5:1d:19:0b:
                    19:5f:73:a2:34:5f:9d:98:3f:fb:fe:f3:78:4f:d7:
                    01:be:c4:42:71:d8:e1:a7:5f:5a:e1:b8:a2:d8:aa:
                    02:a3:2e:ab:1a:f9:94:8f:b5:b7:78:cc:71:5a:66:
                    21:3a:73:ee:be:c8:88:a1:ea:54:29:6a:6f:59:36:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E3:B0:5A:13:FF:97:B3:B3:7D:64:63:07:6C:2A:A6:96:9D:07:63
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t-OwWhP_l7OzfWRjB2wqppadB2M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:45:f3:cd:6e:b4:cc:c4:85:34:3c:c4:97:b1:3c:9f:b8:
         a8:a1:74:d4:8c:67:de:14:66:98:57:bc:31:db:fc:ba:e6:e4:
         9c:cc:fa:1d:8d:e5:8f:6b:3a:23:14:b6:a0:b7:49:6e:7f:fd:
         21:d7:b0:da:da:74:3e:4a:1c:73:0d:7b:09:8d:2f:18:82:94:
         d0:9d:79:a7:d0:30:37:54:ff:cf:04:13:72:49:e9:7a:2c:f1:
         5f:f8:a6:3c:9f:a0:56:1b:f1:0e:06:cb:a2:76:26:4a:5e:f7:
         c7:14:46:d3:24:00:e6:ed:fd:b8:f5:72:cb:e0:11:0a:c7:bc:
         d5:8c:0b:5b:7a:b0:45:00:6e:a2:bf:80:34:05:12:b2:a9:79:
         e6:0e:d3:56:3f:7e:ec:05:d6:e9:76:62:f9:dd:ff:2c:a7:40:
         20:00:5e:6e:b9:a6:ff:89:39:7a:bb:c5:03:47:6d:fc:a2:16:
         40:e2:1c:0e:b6:87:de:b9:d3:7d:43:0b:a6:fa:f0:85:6d:03:
         b1:ca:64:f6:0a:34:cb:84:da:3f:57:43:1d:3a:07:28:3e:d7:
         0b:77:e2:57:28:3d:56:f5:44:02:0e:a6:49:ca:eb:f4:23:40:
         1e:cf:2d:16:7d:6e:cd:dc:04:a4:58:a8:1c:f6:d3:d5:f0:56:
         4c:d1:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:03 2026 by rpki-client