Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1164/GlgSMbFpaMsyKIDDwl6Xzp-H3Zw.roa
File:                     GlgSMbFpaMsyKIDDwl6Xzp-H3Zw.roa (raw, json)
Hash identifier:          C7nIYksLXKjYIuhBXewIyfVc7ytDbBvPSVOexGdpcc8=
Subject key identifier:   1A:58:12:31:B1:69:68:CB:32:28:80:C3:C2:5E:97:CE:9F:87:DD:9C
Certificate issuer:       /CN=12301D400962DD987A3C7B83A3366287D47F86FD
Certificate serial:       0F
Authority key identifier: 12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/GlgSMbFpaMsyKIDDwl6Xzp-H3Zw.roa
Signing time:             Tue 31 Mar 2026 08:46:51 +0000
ROA not before:           Tue 31 Mar 2026 08:46:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        150.3.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12301D400962DD987A3C7B83A3366287D47F86FD
        Validity
            Not Before: Mar 31 08:46:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1A581231B16968CB322880C3C25E97CE9F87DD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:b2:28:6e:8f:9b:d3:ff:8c:15:2f:af:b2:
                    1f:d9:94:47:3b:a1:35:a6:f5:3c:99:0b:cd:aa:40:
                    55:f3:00:c8:7a:8b:2a:15:3a:85:c3:06:1c:a2:8f:
                    39:1e:c7:41:04:1f:25:a3:df:d5:f3:5c:cc:be:f6:
                    32:c1:fb:b6:42:e7:90:de:20:02:d5:63:98:60:24:
                    44:ae:fb:23:2b:92:22:70:eb:3e:07:e8:0a:f4:b2:
                    f4:92:c4:13:14:01:c6:6c:52:af:a4:60:98:94:c6:
                    da:46:ca:61:de:8f:e8:e0:35:6d:92:bd:f5:d9:bf:
                    eb:5c:ba:dd:2f:b3:cf:74:fa:9a:75:d0:db:d4:7e:
                    5c:31:ac:4a:20:eb:6b:2e:85:fc:8a:97:36:22:72:
                    5d:eb:c6:2a:37:b5:69:3c:06:75:e4:3b:45:91:b6:
                    ea:0e:5f:a2:ee:d1:6f:90:e2:5a:27:79:13:e9:37:
                    81:f3:a2:97:cc:4b:74:85:11:55:98:19:85:e8:90:
                    33:22:b7:47:88:c7:d7:0d:2a:af:fa:0e:15:df:3d:
                    1c:fd:f1:9a:c2:23:1c:f0:18:24:31:2b:c3:f0:71:
                    bc:4d:66:18:02:4b:6c:e9:0b:d7:65:1f:b6:12:e3:
                    f9:65:ac:16:13:7b:2d:d6:d0:4c:88:bd:e8:92:4e:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:12:31:B1:69:68:CB:32:28:80:C3:C2:5E:97:CE:9F:87:DD:9C
            X509v3 Authority Key Identifier:
                keyid:12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/GlgSMbFpaMsyKIDDwl6Xzp-H3Zw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.3.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:85:3b:4b:e9:8b:c7:92:a9:e5:3d:3e:89:14:b9:6e:d1:
         6e:13:19:0a:f5:da:8a:57:ef:7c:8b:d4:3c:b9:df:44:57:6e:
         e6:74:f5:65:93:d0:b3:d6:c0:58:28:b9:b5:b1:e3:b3:16:d3:
         71:4e:11:87:cb:dc:7e:c3:34:97:e8:f0:98:24:6a:8f:8d:1a:
         13:c9:64:36:b9:4a:c6:96:b8:89:fd:f0:8d:7d:c9:fa:7a:8f:
         b0:4b:35:c2:34:c6:1a:58:ec:b1:9e:cc:b8:a5:4c:e1:f5:6c:
         9b:91:77:c4:0e:02:dc:62:58:5a:69:98:19:d9:18:9e:2d:f2:
         26:87:a4:c2:38:16:31:c0:69:a9:02:33:02:e2:7e:89:1a:ff:
         ac:e1:a8:39:49:f1:8a:e0:ff:6e:b0:68:8f:20:0b:22:01:41:
         1b:91:81:bf:85:3e:6d:ff:15:8a:32:17:0d:5a:8c:0d:bb:df:
         34:d8:d1:82:89:fb:23:73:4f:2f:1d:4e:f0:16:91:7d:44:d9:
         30:6e:85:58:5a:e7:3c:fd:47:39:14:64:be:48:23:9d:05:68:
         ec:f1:b3:3f:f5:9b:05:f1:cb:6e:f5:a3:62:94:ed:c7:10:ca:
         fe:94:c6:0a:7d:29:54:cc:bb:c6:de:ac:23:e7:cb:c5:e0:92:
         a2:9e:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client