Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/RPZLUbfGNxxcthmw7oP6Q8kNjok.roa
File:                     RPZLUbfGNxxcthmw7oP6Q8kNjok.roa (raw, json)
Hash identifier:          vr0HJ0puG2KXT530cp5G5iscNKSiZidry9Iy5GOByX0=
Subject key identifier:   44:F6:4B:51:B7:C6:37:1C:5C:B6:19:B0:EE:83:FA:43:C9:0D:8E:89
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       4E
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/RPZLUbfGNxxcthmw7oP6Q8kNjok.roa
Signing time:             Tue 31 Mar 2026 08:15:47 +0000
ROA not before:           Tue 31 Mar 2026 08:15:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17530
IP address blocks:        61.193.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Mar 31 08:15:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=44F64B51B7C6371C5CB619B0EE83FA43C90D8E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:03:74:5b:1e:29:06:32:88:98:aa:7b:cf:
                    01:29:0f:7f:be:79:e7:a6:a4:89:70:3e:a5:0e:b7:
                    14:ac:01:89:05:a3:4c:82:41:ab:5c:ba:31:c4:e5:
                    f2:d4:2c:9d:4e:a5:41:43:7e:30:81:1a:49:d2:b6:
                    9f:ec:0a:f0:ad:69:af:f6:d1:a9:df:57:9f:60:27:
                    c3:a0:92:d8:c5:fb:8f:00:05:16:bc:0a:8f:b5:48:
                    10:1f:45:58:d5:cf:da:59:a0:2e:57:7e:b7:cc:06:
                    9b:a5:51:88:af:17:a2:5f:db:dc:50:82:a3:86:59:
                    17:07:8c:15:1f:77:09:60:14:44:95:78:56:9a:ad:
                    21:c8:b3:6d:ee:51:a3:7b:35:e3:bd:00:bc:a8:31:
                    99:42:95:42:82:35:21:b9:22:0e:57:d1:15:35:49:
                    4f:5b:69:eb:20:cb:1c:60:4a:c8:74:4b:0a:69:7c:
                    4d:4c:56:58:b5:03:4e:45:eb:9a:bf:6c:1c:9c:b4:
                    0d:e7:25:91:a7:40:88:1d:25:28:e9:05:70:2e:9f:
                    ce:33:2c:1d:ef:b2:e9:45:d0:34:5c:42:0c:c3:a1:
                    13:83:9a:14:cd:51:4c:b5:bb:66:09:57:69:56:9b:
                    4f:71:59:c6:3f:18:c0:c9:77:49:e9:e9:13:82:1d:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F6:4B:51:B7:C6:37:1C:5C:B6:19:B0:EE:83:FA:43:C9:0D:8E:89
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/RPZLUbfGNxxcthmw7oP6Q8kNjok.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:47:f3:4e:56:d2:e5:7f:f8:a2:39:82:f1:9e:33:09:ec:80:
         73:d5:a0:de:ae:5d:ad:2d:33:fe:f1:3c:96:42:f9:98:94:6b:
         98:5c:3b:76:d6:4d:2a:2c:42:cd:bf:d5:34:eb:f4:e1:bd:6a:
         cd:e0:6f:ef:f8:be:85:9f:26:e9:11:60:2b:96:62:fd:7e:a4:
         64:f0:c5:12:ec:bc:f7:db:46:e0:d8:b5:1e:c6:4e:1d:f0:4c:
         fc:44:b4:4f:76:b7:3e:1f:5b:02:27:f2:aa:77:7e:e2:a8:f1:
         fd:4e:99:cf:ac:02:91:fd:81:7f:c6:ba:ef:86:a1:4e:f6:51:
         e5:d8:0a:0e:8f:2c:10:73:74:b2:5c:69:81:59:36:9e:18:ed:
         8c:da:62:28:0b:bc:26:b0:41:06:c3:58:7f:d8:d2:22:77:5d:
         b9:5b:e1:73:3e:b0:24:c4:2b:da:9b:a4:53:8f:ec:ab:c1:8f:
         32:b8:4a:9d:de:ac:75:48:4e:ed:b5:96:7b:c4:5a:cd:7c:87:
         6b:e1:93:36:4f:b6:ca:5c:96:63:85:50:49:89:e5:38:67:a9:
         27:8c:e3:41:32:fc:05:19:ee:c5:14:21:19:85:66:0c:7c:5a:
         e7:8f:0c:99:8f:42:7a:ac:7a:e7:f7:53:f7:1c:ec:9e:19:84:
         ab:74:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:51 2026 by rpki-client