Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/NGjSirFVS6AdnEZPspr3ZEYr0Dk.roa
File:                     NGjSirFVS6AdnEZPspr3ZEYr0Dk.roa (raw, json)
Hash identifier:          Ipw6ARwq4yoxjdCOgT5Bxs6tPN0gNJkQKF9EwuiUjOI=
Subject key identifier:   34:68:D2:8A:B1:55:4B:A0:1D:9C:46:4F:B2:9A:F7:64:46:2B:D0:39
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       4D
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/NGjSirFVS6AdnEZPspr3ZEYr0Dk.roa
Signing time:             Tue 31 Mar 2026 08:15:47 +0000
ROA not before:           Tue 31 Mar 2026 08:15:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17530
IP address blocks:        59.191.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Mar 31 08:15:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3468D28AB1554BA01D9C464FB29AF764462BD039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:65:3e:c8:16:2d:0b:29:67:62:fc:37:74:
                    98:f3:2b:67:a3:19:bb:d1:9c:a3:c8:39:ea:20:66:
                    f0:57:36:2f:69:24:b3:54:49:70:1f:d4:9e:c2:da:
                    3c:da:41:7e:68:d9:2b:d6:7f:02:4e:83:46:2b:48:
                    17:3f:80:d1:b4:2d:78:cc:36:67:38:b4:df:ee:92:
                    e6:95:cf:d4:0d:2c:80:b0:22:73:d6:2b:57:c9:f7:
                    4f:8b:4c:b3:07:51:9a:9e:59:35:cf:4f:90:95:b9:
                    28:e7:78:e7:e2:7c:4e:03:44:a9:76:df:c4:3f:22:
                    e0:b5:38:78:d4:39:63:b1:5e:7e:c6:a2:c9:5e:66:
                    14:94:97:b0:4d:c7:0e:c8:14:2b:9b:20:73:8f:66:
                    7c:4a:42:28:98:d4:0b:7f:e8:2c:b3:b2:dc:3b:9f:
                    e6:ae:c3:04:60:39:aa:c6:bb:e4:b4:73:14:29:9d:
                    01:a7:3a:84:89:24:5d:a9:6a:75:af:ea:81:41:92:
                    2e:0c:5f:26:78:b5:9f:17:c1:fd:83:a5:73:09:59:
                    bf:8f:fa:e8:07:cf:bf:a1:f0:2e:b2:0b:e4:f5:ed:
                    2e:a8:70:94:19:6a:8b:c9:f7:03:53:75:16:f6:ee:
                    7d:fb:69:dc:b9:58:e7:83:59:49:45:fa:1c:fb:17:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:D2:8A:B1:55:4B:A0:1D:9C:46:4F:B2:9A:F7:64:46:2B:D0:39
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/NGjSirFVS6AdnEZPspr3ZEYr0Dk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.191.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:c5:c7:96:de:e8:b6:fe:63:14:4a:e7:7d:c7:ef:4f:6f:f7:
         53:dc:27:00:f9:d3:a1:54:c6:c9:de:9b:a6:30:50:a0:8e:06:
         2b:e9:d2:f3:1c:17:a4:d4:50:83:5b:bb:eb:e3:99:6b:ee:23:
         98:97:c6:4f:3e:91:40:8f:53:45:02:5a:25:1b:41:04:0c:40:
         bf:42:1f:dd:83:b3:0d:8a:76:27:37:bd:2b:99:b4:82:d2:c8:
         b8:c6:d2:5f:5c:fe:ae:38:ac:2b:4a:e8:ef:ad:d9:43:02:a7:
         9e:10:5f:2f:b6:b3:06:ae:6b:db:9c:f6:52:e2:e4:f3:89:03:
         7a:e3:8c:4f:46:a1:56:86:6f:9a:69:47:15:7f:36:51:7b:64:
         98:86:d7:ef:f5:24:bf:66:c9:78:d9:4f:02:e9:05:8f:de:3e:
         90:02:2e:ad:55:b1:f8:d3:e9:05:b8:5a:f4:36:62:8d:33:ad:
         17:b7:40:ba:d9:92:4d:f9:df:03:bd:05:b1:fd:12:43:a6:21:
         fe:ea:48:fd:69:23:b7:b0:16:56:df:dd:b8:cc:9e:cd:77:87:
         e9:14:39:27:c0:4d:a7:e6:30:f5:84:00:80:ba:f2:6d:d9:bd:
         62:dd:0e:67:1f:aa:9c:86:bf:6c:dd:da:80:37:50:14:6c:d9:
         0a:86:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:14 2026 by rpki-client