Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/tlKdjo1B-fHAq9eyIGddzCs0X00.roa
File:                     tlKdjo1B-fHAq9eyIGddzCs0X00.roa (raw, json)
Hash identifier:          QG7DI10gTT+zE31Hm1nee7YKN5vHHKOA+r/n+MvEO+4=
Subject key identifier:   B6:52:9D:8E:8D:41:F9:F1:C0:AB:D7:B2:20:67:5D:CC:2B:34:5F:4D
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       62
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/tlKdjo1B-fHAq9eyIGddzCs0X00.roa
Signing time:             Tue 31 Mar 2026 07:36:59 +0000
ROA not before:           Tue 31 Mar 2026 07:36:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        202.233.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Mar 31 07:36:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6529D8E8D41F9F1C0ABD7B220675DCC2B345F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:7b:32:85:fb:8d:0b:96:71:53:83:d9:49:
                    c5:fd:01:48:f4:fd:fe:9b:6b:0b:48:a4:ef:14:64:
                    1f:bf:80:2d:50:e1:15:85:85:91:4b:38:12:63:b1:
                    9f:39:9a:a7:e2:4c:cd:8d:94:47:c0:e4:a4:96:34:
                    4b:77:f2:d8:52:53:c3:09:cb:03:81:8f:eb:c9:87:
                    39:09:3a:f7:a8:6a:d4:58:0e:14:ba:11:8e:56:cb:
                    f1:3b:18:76:03:20:bf:b5:d4:c3:99:cf:24:22:11:
                    9a:32:bb:62:c6:c1:0f:2b:8c:56:58:87:2c:f1:bf:
                    00:15:bb:16:b7:e1:4a:ae:bd:db:09:30:28:f0:ca:
                    91:a6:4b:81:6c:c4:6b:17:73:9c:c2:49:9c:f4:09:
                    3a:67:de:6c:55:13:be:23:8f:ad:2d:47:37:4b:ca:
                    39:48:1f:92:0d:6c:2a:15:89:78:46:93:17:d4:9b:
                    18:c6:6e:57:a7:69:35:ec:fe:d6:26:8c:14:ae:e1:
                    14:ca:ee:e0:10:d6:e0:9a:72:80:2e:2e:a2:79:0a:
                    9e:33:34:83:d1:d5:38:38:be:f8:71:cc:34:c0:69:
                    5f:64:c6:f9:de:f0:92:5b:b4:e4:02:05:6c:1c:cf:
                    99:53:44:e4:49:ed:91:18:99:69:bd:69:b0:bf:c0:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:52:9D:8E:8D:41:F9:F1:C0:AB:D7:B2:20:67:5D:CC:2B:34:5F:4D
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/tlKdjo1B-fHAq9eyIGddzCs0X00.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.233.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8d:59:99:24:bc:4a:e6:7d:1a:2b:61:2c:07:3f:11:f1:24:
         e0:73:1d:8d:22:be:1d:41:6a:c2:ea:49:05:1a:9b:0d:c1:8a:
         11:02:7f:42:a0:6a:9a:39:41:3c:bd:50:99:e9:1b:da:58:53:
         bc:da:e4:c9:1a:b1:65:16:f3:aa:7e:ab:14:3b:c0:05:46:1a:
         dd:76:b2:a0:19:0f:f2:86:19:45:06:de:51:ed:10:3d:28:b0:
         8c:05:bf:91:cc:4c:fb:d7:e3:69:59:90:75:ea:9d:cc:01:3b:
         fa:bf:69:11:57:de:4a:20:49:69:f2:e1:86:0a:ca:91:a0:93:
         97:0a:ad:f9:1b:ee:36:78:3f:02:ac:88:51:b0:77:54:9c:3e:
         b7:0a:27:50:8c:c7:f5:fc:53:f6:28:9c:b4:2e:e6:47:71:ea:
         a7:22:35:9e:bc:6a:be:e7:6b:66:1f:0e:5d:45:b0:25:35:4e:
         ff:92:f1:0e:5c:29:a1:5d:55:44:d3:3a:c3:cd:a7:23:1c:e3:
         b4:31:ca:f3:72:d0:58:67:ab:c1:56:e6:34:d1:0e:b3:fc:cb:
         eb:ff:e8:22:ea:27:2e:a9:0a:a0:ac:b2:e5:f9:5f:62:46:2f:
         ce:42:af:12:27:b8:52:cb:e4:42:7b:10:34:68:49:90:fc:a2:
         13:4d:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:20 2026 by rpki-client