Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/wtT0u72Ypplt09H5yjzLu2ku528.roa
File:                     wtT0u72Ypplt09H5yjzLu2ku528.roa (raw, json)
Hash identifier:          bruuK2Yjr+Vyc8oSZTd0gXVhHmbd2EdDmQdDuYPb/P4=
Subject key identifier:   C2:D4:F4:BB:BD:98:A6:99:6D:D3:D1:F9:CA:3C:CB:BB:69:2E:E7:6F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0108
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/wtT0u72Ypplt09H5yjzLu2ku528.roa
Signing time:             Tue 31 Mar 2026 08:30:11 +0000
ROA not before:           Tue 31 Mar 2026 08:30:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        150.9.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C2D4F4BBBD98A6996DD3D1F9CA3CCBBB692EE76F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:9e:5b:59:08:ae:b7:46:02:36:0c:4e:10:
                    9c:32:76:56:e0:94:2a:0b:5f:e5:46:1e:6c:fb:da:
                    b0:9b:56:b7:c1:bd:bb:2f:70:5a:a2:48:1c:1e:42:
                    32:f5:3f:0c:30:71:17:af:9a:d7:59:e8:73:3a:75:
                    ee:34:65:c6:cc:93:ab:e8:1e:2c:46:e2:73:52:7d:
                    81:07:ca:cc:4f:f9:65:40:c0:2d:c6:e2:2f:7c:54:
                    63:69:7c:08:82:0c:32:a5:77:cd:9d:21:ae:99:47:
                    d9:56:f0:b0:89:4b:43:b0:12:a7:78:b7:6f:a5:f6:
                    81:01:0a:75:50:8c:5e:73:08:11:84:6b:f6:5e:45:
                    57:8b:1c:5a:54:f2:21:94:ca:05:69:26:5c:ff:84:
                    8a:83:5a:39:c5:e6:ac:db:1e:7e:64:82:c3:fa:60:
                    b6:be:73:b2:19:73:bc:b3:a2:28:6d:90:90:24:33:
                    bc:c5:97:9a:cd:e8:82:de:09:37:1f:bb:9f:d0:d3:
                    c1:61:f8:9c:ea:1f:96:b5:3d:fc:6e:04:9a:12:96:
                    9f:ed:44:56:89:92:00:b2:2f:75:cd:ca:40:17:34:
                    ae:7d:a3:56:25:e3:aa:42:d0:fa:67:5f:23:64:cc:
                    1b:70:15:19:71:84:7c:b8:fc:7e:fe:40:b2:22:b6:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:F4:BB:BD:98:A6:99:6D:D3:D1:F9:CA:3C:CB:BB:69:2E:E7:6F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/wtT0u72Ypplt09H5yjzLu2ku528.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e7:15:87:9e:4f:da:10:0b:df:13:46:97:0e:90:8d:0a:aa:be:
         1a:93:0d:b3:c2:78:61:d5:bf:85:fa:31:96:05:91:90:cd:61:
         f1:11:ec:3b:f5:a6:51:f5:88:77:d9:39:f6:d7:73:7e:8c:ee:
         4e:af:5f:14:32:b6:d7:8e:3d:e5:62:3e:78:f6:a3:76:e3:26:
         08:02:d5:9c:d8:d7:df:45:f6:17:d7:b3:2b:a6:a9:79:2a:db:
         6d:87:62:0e:1b:ea:3a:fe:5c:9b:10:2d:df:ca:bd:e7:9a:50:
         ec:f2:5d:d4:09:6e:c4:62:15:15:2f:32:d1:cf:9a:55:26:39:
         e7:10:6d:01:b5:18:bb:9c:c2:6b:ce:5f:30:60:66:5f:d5:ac:
         d7:7e:7b:c6:f1:9d:66:d5:f6:a3:fe:93:be:2e:51:7f:46:41:
         7f:d0:ce:bf:20:c4:c3:18:92:4d:06:2f:f0:ea:f3:11:7f:b2:
         96:ee:3c:83:c3:ac:a0:a6:8c:ab:d7:00:2c:0c:30:b2:a3:0c:
         e5:12:97:67:94:22:35:f3:d4:68:4f:ca:9a:39:dc:1a:d1:b4:
         ad:c2:f3:bb:78:da:8e:6d:2e:a3:22:86:a2:33:71:2c:8c:b1:
         08:00:25:2d:66:2e:08:a4:70:d9:5e:8b:3b:50:32:92:12:06:
         a0:fa:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:52 2026 by rpki-client