Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/y8ggUsIS3PKXufoBwmTzC5_wU1k.roa
File:                     y8ggUsIS3PKXufoBwmTzC5_wU1k.roa (raw, json)
Hash identifier:          AYEk4K17UPi3AvxBsEi+QR6nuUYwr0JXTmi8b2GVUKo=
Subject key identifier:   CB:C8:20:52:C2:12:DC:F2:97:B9:FA:01:C2:64:F3:0B:9F:F0:53:59
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0112
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/y8ggUsIS3PKXufoBwmTzC5_wU1k.roa
Signing time:             Tue 31 Mar 2026 08:30:16 +0000
ROA not before:           Tue 31 Mar 2026 08:30:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        220.146.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CBC82052C212DCF297B9FA01C264F30B9FF05359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:4c:83:3e:59:2d:1c:b4:c9:69:5d:39:97:
                    61:64:2c:43:d8:02:f8:e3:00:18:73:74:63:c8:c4:
                    7f:78:e4:67:20:9d:84:41:b4:ae:92:48:a3:bb:73:
                    99:0c:f0:a8:01:15:3c:7f:df:b5:e8:1a:50:8f:9d:
                    c3:34:35:ee:c3:d3:f5:f1:c9:fa:c6:2d:1a:d0:cb:
                    46:c3:e9:14:29:8a:e8:56:23:99:b1:16:f2:26:fa:
                    a2:85:13:61:2a:57:85:22:a5:ea:6a:f3:43:a3:c3:
                    8a:f6:99:1d:6b:d8:cc:f7:28:4b:9b:aa:e3:bf:96:
                    04:fa:55:39:61:bc:23:19:19:c8:ef:6a:fb:a7:28:
                    8a:22:b4:96:f6:6d:86:2d:0b:29:27:0a:56:56:41:
                    12:f9:09:8d:b7:df:c0:37:77:9d:58:8a:fe:09:07:
                    51:b2:14:9e:49:78:cd:23:e2:48:8a:11:3d:a5:b6:
                    80:42:24:7d:04:c5:24:b2:1c:a0:51:da:84:82:14:
                    77:93:8f:05:05:e3:d2:43:2c:f3:fe:bf:7a:27:21:
                    dc:27:52:e8:b9:49:0f:e8:a7:ad:d2:21:fb:99:b1:
                    83:19:d7:47:de:0c:12:15:b6:29:c6:95:8e:f7:53:
                    e4:df:dc:80:d6:41:4d:d6:a9:01:ac:ef:a0:34:3a:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:20:52:C2:12:DC:F2:97:B9:FA:01:C2:64:F3:0B:9F:F0:53:59
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/y8ggUsIS3PKXufoBwmTzC5_wU1k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:a6:46:08:14:30:08:52:f4:be:08:28:8a:69:10:87:62:4a:
         82:f7:84:9d:fd:64:83:1b:12:88:3d:04:3c:7f:9d:fc:86:71:
         7f:5a:d8:dc:2e:55:19:42:b0:ef:87:77:a7:68:f0:99:3d:fc:
         b1:7a:14:3c:a0:a6:b6:1d:1e:65:43:2d:7a:14:18:5a:0a:0a:
         be:03:55:13:53:04:96:41:ad:ae:04:93:29:11:a7:d4:6c:82:
         49:70:d7:95:7b:d6:c2:4b:fa:69:44:40:4e:89:58:87:9e:f0:
         e0:c5:5b:ce:88:9f:6c:2e:e1:95:71:5f:47:f0:59:d3:22:70:
         8d:33:f3:7e:fb:d8:c8:ef:d5:73:d3:83:9a:6c:2d:82:a8:8d:
         ab:02:ac:12:1c:8e:9b:d5:73:b1:d4:02:72:fd:3c:06:52:21:
         9f:57:34:76:2b:84:ac:9f:d1:2b:e9:32:f5:13:39:4f:4d:0a:
         f8:a1:cf:de:00:2b:4f:64:e5:c2:f8:68:b0:e5:41:b3:93:eb:
         d5:76:f3:94:38:71:b4:cc:c7:f8:a7:59:f4:03:ac:c1:10:06:
         0b:cc:00:cc:64:af:10:87:4f:79:c2:17:52:9c:9d:08:55:4f:
         a2:f1:1e:fa:34:81:c9:47:bb:7e:3f:15:62:2a:11:a7:20:f1:
         2c:ad:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:02:14 2026 by rpki-client