Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/zz59iW8Av9NXyDld3wRTKlM1JOs.roa
File:                     zz59iW8Av9NXyDld3wRTKlM1JOs.roa (raw, json)
Hash identifier:          gO0AxyLWnXSqZsTku7L6MZp8hxs1556+v9Ejv2U5aZM=
Subject key identifier:   CF:3E:7D:89:6F:00:BF:D3:57:C8:39:5D:DF:04:53:2A:53:35:24:EB
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       010A
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zz59iW8Av9NXyDld3wRTKlM1JOs.roa
Signing time:             Tue 31 Mar 2026 08:30:12 +0000
ROA not before:           Tue 31 Mar 2026 08:30:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        180.235.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF3E7D896F00BFD357C8395DDF04532A533524EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:7c:19:88:ab:f5:7e:ca:23:5c:59:26:8d:
                    18:1b:2e:1a:23:65:8e:cb:83:5d:c4:61:f3:45:b8:
                    88:dd:1c:74:aa:bc:cf:b0:dd:05:4d:af:16:15:d9:
                    ae:1f:ef:93:fc:ca:0f:a2:71:74:a5:5c:99:b5:08:
                    9d:4d:8a:f8:ae:11:4e:16:e3:48:a9:04:b6:c5:f8:
                    c6:01:58:04:8a:cd:b3:ff:1d:1c:bd:66:36:be:62:
                    27:82:ca:9d:df:4e:83:af:4b:ee:93:1b:f3:9d:b6:
                    12:59:e9:6b:30:f1:0b:96:c9:7d:88:74:92:fb:2b:
                    1d:29:e6:94:4b:02:26:30:aa:53:d0:60:1b:ab:2a:
                    e0:59:51:9b:9a:ec:c0:01:07:0b:e4:2c:63:67:b4:
                    ee:34:c2:13:7c:e1:71:55:de:81:29:e4:84:f5:2b:
                    31:66:8b:85:63:7d:5a:1e:49:bb:32:c6:19:71:03:
                    39:37:a5:37:05:cd:fc:1a:6b:6c:73:e9:df:c0:b3:
                    69:ef:3e:6f:05:28:41:25:e4:ca:98:50:ce:a1:14:
                    28:75:42:f1:83:de:5d:70:79:6c:5f:2a:ad:c1:fe:
                    e8:04:18:73:cb:95:a7:b4:c3:3f:6e:58:d5:d3:77:
                    a2:90:2a:e7:66:f7:83:fc:e6:7d:10:bb:e6:2c:43:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3E:7D:89:6F:00:BF:D3:57:C8:39:5D:DF:04:53:2A:53:35:24:EB
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zz59iW8Av9NXyDld3wRTKlM1JOs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:bd:0d:55:3f:d6:5d:70:f5:a2:59:46:c7:be:1a:20:93:4b:
         71:28:5b:f4:73:d3:a8:5f:98:91:7e:dc:42:e8:36:27:82:31:
         d9:a8:fa:6c:95:5a:5d:17:be:c3:87:18:72:d5:19:13:75:b8:
         11:a3:e1:b4:c8:b5:3b:fd:f9:4b:0f:a5:43:92:79:a8:86:0e:
         68:2a:a6:77:07:31:a8:2f:6c:5f:9d:71:44:2c:54:e1:c4:70:
         f8:ef:9c:ec:05:48:20:10:89:27:ee:60:9f:76:2a:8c:bf:7a:
         bc:54:e4:b1:67:3d:37:32:b5:1b:0b:47:40:8c:51:fc:cb:66:
         f4:73:c8:99:13:91:ac:82:15:30:03:f4:ea:00:5e:8d:cc:2f:
         b1:15:95:1e:fb:df:33:d2:cb:5a:b5:cc:7b:98:82:4d:48:98:
         f6:7b:b0:27:0c:74:f2:1e:de:34:0c:d9:08:b1:21:c2:b2:70:
         8c:41:4f:32:00:98:8e:dd:a2:3e:5d:6d:92:1c:6f:91:14:52:
         6e:66:55:cf:dd:b7:7c:20:92:c8:41:9f:1b:69:4a:b6:24:f3:
         da:75:d6:04:c8:b0:1f:e2:f5:c2:83:d6:05:6f:f3:2a:73:6c:
         77:c5:af:0b:56:a5:fe:3b:a8:e4:d3:d8:71:6f:a0:bb:fd:8a:
         39:e0:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:41 2026 by rpki-client