Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/zQRO5lVY3M67y0WYsON_608eJG8.roa
File:                     zQRO5lVY3M67y0WYsON_608eJG8.roa (raw, json)
Hash identifier:          WUK3+VzA7QmFikHkLBSnR9DLsIPq30Yov3UJYRUi9QY=
Subject key identifier:   CD:04:4E:E6:55:58:DC:CE:BB:CB:45:98:B0:E3:7F:EB:4F:1E:24:6F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       010E
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zQRO5lVY3M67y0WYsON_608eJG8.roa
Signing time:             Tue 31 Mar 2026 08:30:14 +0000
ROA not before:           Tue 31 Mar 2026 08:30:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        203.189.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CD044EE65558DCCEBBCB4598B0E37FEB4F1E246F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:92:d7:68:37:36:27:2c:8f:2d:06:f1:8e:
                    fd:ac:eb:f5:f9:81:dc:43:a6:14:6f:5e:4b:dc:19:
                    c5:2d:ff:fc:98:19:8d:36:3e:d6:b7:1c:7b:ae:1b:
                    a4:c4:06:32:ba:13:a8:16:2a:e2:86:44:be:a1:be:
                    a0:1b:b2:7f:78:56:70:03:1f:53:e9:63:ed:2e:06:
                    56:e6:21:3b:b0:a0:05:50:85:64:5c:b9:58:42:7b:
                    5a:bf:8d:af:f7:d3:65:01:ba:cd:56:cc:cf:c0:b5:
                    64:6e:bd:a3:38:52:79:77:9b:14:b6:22:89:da:e9:
                    48:8a:79:29:6a:44:3e:79:5d:35:44:74:33:95:88:
                    55:1c:5c:06:05:de:40:91:f1:37:b4:0f:96:a1:f0:
                    f0:67:3a:85:63:02:3e:b4:01:09:1c:53:c0:1e:f0:
                    23:40:db:76:d8:78:39:96:3f:fc:48:52:12:99:2a:
                    f6:34:c7:16:3b:1a:5b:89:ed:01:65:b2:37:f1:14:
                    24:45:c8:05:ee:98:c1:d6:f6:88:b9:a9:80:c5:64:
                    e3:c2:fc:48:08:42:05:d6:3c:76:f2:0f:b8:8e:47:
                    34:54:b5:73:bd:ab:97:9b:2f:1a:dd:00:5f:79:39:
                    72:80:67:9b:f7:f7:c2:e9:f4:23:7d:b3:71:68:1e:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:4E:E6:55:58:DC:CE:BB:CB:45:98:B0:E3:7F:EB:4F:1E:24:6F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zQRO5lVY3M67y0WYsON_608eJG8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.189.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:33:41:85:1e:4e:c6:c1:1c:0f:46:86:2f:1b:36:a2:ff:
         fb:ff:40:f6:fa:32:ff:50:97:f7:e0:90:43:f7:81:0f:0e:f3:
         c6:8d:0f:00:98:8a:91:c1:ab:90:8e:bd:d2:99:49:10:e1:e8:
         a9:b0:ba:d6:d8:82:bd:41:50:6e:c7:90:84:7e:21:f8:92:e5:
         a3:2a:a5:98:48:7a:74:41:1e:03:92:3d:7d:17:bb:5a:e6:85:
         8c:78:9b:94:b4:44:94:e6:59:e7:7e:c0:57:0f:31:70:25:03:
         bc:1c:67:67:59:d3:ca:50:31:fd:22:ea:bf:7e:f5:a4:30:a2:
         6c:e7:a8:cc:c0:4e:17:3b:18:0e:f3:3f:a9:f4:ab:c3:8b:b7:
         db:2c:93:2a:0d:db:77:db:a3:3b:64:92:67:a1:d8:a1:3c:63:
         d3:c8:5f:bc:bd:c8:1e:b1:7e:1d:c3:5b:5f:b3:57:1b:4a:23:
         52:89:a8:c4:8b:f7:3e:2f:c6:25:f5:22:e9:ed:d4:e1:b1:3a:
         8e:02:fe:99:f0:4f:6a:06:62:c8:e0:9b:b2:68:3a:0d:5c:07:
         b5:5c:54:99:d1:eb:01:6f:41:32:d4:b6:34:cc:af:98:ee:a0:
         71:26:2a:bc:cd:2e:fe:31:c3:1a:18:dc:30:cb:f1:a0:4a:87:
         c5:c3:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:31 2026 by rpki-client