Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/t74dM_dN3DcC9PvbhllD6tnkn9E.roa
File:                     t74dM_dN3DcC9PvbhllD6tnkn9E.roa (raw, json)
Hash identifier:          h+wScgV3HpFUA5R0C55AjG0Jy4lEddodh0jRxy4Y/xI=
Subject key identifier:   B7:BE:1D:33:F7:4D:DC:37:02:F4:FB:DB:86:59:43:EA:D9:E4:9F:D1
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       F0
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t74dM_dN3DcC9PvbhllD6tnkn9E.roa
Signing time:             Tue 31 Mar 2026 08:29:56 +0000
ROA not before:           Tue 31 Mar 2026 08:29:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        222.228.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B7BE1D33F74DDC3702F4FBDB865943EAD9E49FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:0f:2f:e8:98:2f:ec:e1:2d:bf:56:da:d9:
                    c1:40:86:ba:f5:19:ec:e0:bc:07:44:10:3f:94:43:
                    85:c2:6a:b4:d4:08:15:14:2d:c2:d0:bd:f6:4b:30:
                    ad:f8:1e:92:37:f3:63:72:a7:af:bc:f3:e4:d4:0b:
                    bd:81:7d:2d:69:98:1b:9a:f0:39:a3:47:43:e6:29:
                    25:aa:bb:29:8f:0b:09:48:57:1f:ab:56:07:c7:84:
                    05:de:ad:6f:89:b0:18:b2:c0:0c:cb:60:b4:8d:54:
                    89:72:d4:0c:c6:f0:43:56:c8:39:5f:c1:d0:7c:53:
                    f8:8d:d5:d0:ee:df:98:90:80:77:a6:e4:76:19:0f:
                    59:64:51:47:68:c4:fa:9c:b3:f4:c6:24:f9:1b:dd:
                    5e:16:10:7c:90:d5:23:f8:d0:38:3c:f3:b6:1d:c9:
                    06:aa:4a:ac:33:fa:93:d2:3c:82:f7:a6:e0:da:f4:
                    11:58:fb:e6:39:17:1f:d2:ba:ad:9a:70:47:4e:a2:
                    51:03:a1:e9:ac:7c:c8:11:69:82:52:d3:08:29:d9:
                    85:1d:e3:b6:e0:74:48:37:53:01:f0:98:58:6f:9e:
                    6a:7a:80:af:b1:f8:73:ea:67:c8:d2:89:37:82:d3:
                    46:99:9e:1a:b4:93:7a:43:49:36:4c:85:de:13:50:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BE:1D:33:F7:4D:DC:37:02:F4:FB:DB:86:59:43:EA:D9:E4:9F:D1
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t74dM_dN3DcC9PvbhllD6tnkn9E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.228.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:df:4f:f7:4c:a4:a3:7d:a2:cc:a1:33:fa:df:6f:b1:75:
         a5:19:6f:58:1f:dc:e0:d6:6e:33:a2:4f:4f:e2:fc:29:d1:77:
         61:e5:25:cb:25:22:1e:c5:07:24:1a:ee:bf:84:88:37:42:ee:
         1e:85:f5:d7:7b:a4:a2:ba:4f:75:45:87:f9:33:4d:bd:d5:c5:
         9d:9d:78:db:13:de:81:d1:bf:24:b0:22:4f:08:43:44:a2:cc:
         06:df:e5:e1:e1:44:83:d7:ec:29:33:c3:78:65:0b:93:d5:e0:
         ad:bd:15:4e:54:1d:fd:3a:84:fd:8b:df:dd:b6:77:d4:19:47:
         6e:1e:b6:3c:da:e9:4f:9d:4d:e1:b1:50:2d:06:ec:65:a2:35:
         0e:d1:3f:dd:48:d2:10:f0:5c:9c:e4:7b:52:3f:c5:7e:0f:ff:
         6e:4d:2f:a7:34:c7:f6:65:8d:9e:23:a2:22:fa:20:a6:d0:4f:
         4f:02:45:5c:51:82:91:c1:fe:d7:6c:b2:f1:4b:2e:0a:ff:ec:
         03:33:54:75:e9:46:a6:e9:38:76:a8:1f:41:d7:e3:c9:ea:21:
         9d:06:30:5f:72:e0:f6:73:6d:6b:10:07:74:bb:01:01:95:e6:
         16:93:1e:62:6b:37:bd:aa:1d:f7:e3:0b:e6:02:6e:53:03:6a:
         95:1a:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:49 2026 by rpki-client