Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa
File:                     z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa (raw, json)
Hash identifier:          J7s7jiQPXXyoSvTM0XutMVmiyR8De7DTFPDkQJCTOi4=
Subject key identifier:   CF:E4:C3:F7:8F:D9:10:0C:3A:85:8A:A3:6A:A2:F4:57:B2:19:CB:A2
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       E9
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa
Signing time:             Tue 31 Mar 2026 08:29:52 +0000
ROA not before:           Tue 31 Mar 2026 08:29:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        116.91.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CFE4C3F78FD9100C3A858AA36AA2F457B219CBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:a2:51:0b:d9:14:73:54:be:9e:a2:4b:55:
                    4b:d8:05:00:12:b8:ab:26:d4:2e:be:68:34:87:7e:
                    95:a0:49:07:dc:77:de:b6:61:78:ff:6e:0e:cb:a4:
                    2d:78:d3:b9:54:57:41:33:de:77:47:3f:c5:48:56:
                    db:9a:c0:59:dd:da:18:e4:cb:8e:0d:ac:3c:9c:38:
                    14:31:8f:99:e5:c2:6d:67:bd:ad:73:eb:1e:39:a7:
                    a8:1d:0b:88:56:b7:d0:e1:69:76:e8:a8:86:8c:42:
                    ab:53:5a:c4:1d:fc:7c:60:b9:70:85:9c:92:d6:f2:
                    97:bc:3a:47:ad:e7:37:b3:6a:af:7f:b5:2a:9e:1f:
                    92:61:00:9f:41:7a:9e:df:66:5e:4e:7b:b8:84:8e:
                    32:fa:6f:d4:2b:d2:59:68:5e:b6:d0:a4:c8:31:49:
                    f2:4d:2e:e4:f0:65:0e:20:08:7c:48:c3:88:e5:02:
                    b7:d4:83:2a:43:99:65:f1:36:61:f5:b9:34:cb:5b:
                    bc:03:35:af:e1:ca:92:5d:1f:e8:00:3d:f4:9e:fb:
                    ad:b0:90:16:8b:96:ac:16:05:38:d9:98:25:d4:db:
                    07:ce:2b:6b:a3:39:e2:15:62:62:d6:a4:ad:bf:66:
                    cf:a2:db:f3:24:c8:fc:7f:d8:75:f2:ba:09:0f:ee:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E4:C3:F7:8F:D9:10:0C:3A:85:8A:A3:6A:A2:F4:57:B2:19:CB:A2
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/z-TD94_ZEAw6hYqjaqL0V7IZy6I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:ca:d7:c8:dd:18:67:f5:36:f5:4f:c5:d5:f1:d9:84:64:
         86:bc:d1:fd:ac:17:3e:fa:59:ff:5e:cc:d8:65:3c:7b:94:b1:
         17:a6:db:51:df:d8:b1:a2:16:63:06:d5:6a:30:28:b7:5b:70:
         63:ca:e0:bc:da:6e:a8:62:24:47:c7:87:e3:e8:d8:d6:d1:05:
         d5:03:3a:b4:9b:1e:3e:78:40:b7:dd:13:62:f2:fd:00:9b:bd:
         69:b9:b4:34:60:95:06:84:74:50:79:2e:0f:47:5a:77:99:fc:
         64:9b:c9:fd:82:7a:db:ac:da:64:a1:01:e4:27:a7:86:64:f5:
         9f:3c:b5:f2:1d:52:a9:4e:46:99:ed:a2:a8:79:47:30:f4:8c:
         29:13:3a:6e:b3:b7:7e:61:d4:e5:a0:dc:dd:fc:48:5b:6e:af:
         04:69:71:9d:84:b9:df:70:8c:3b:19:76:16:35:3f:cb:ae:e5:
         cb:0c:26:e6:fb:6f:a7:34:e3:a5:c9:32:9e:aa:8d:92:0d:a9:
         73:35:e2:39:4f:be:43:3b:3b:9b:dd:c5:90:b6:3a:db:05:e7:
         de:f1:e1:98:0a:0b:85:a5:4f:37:05:ec:83:73:0f:33:af:1a:
         78:94:31:88:f0:f3:86:24:b3:b9:a8:cb:4f:a1:51:18:2e:cf:
         4c:6f:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:20 2026 by rpki-client