Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/S1uN57ZtpapAjQX7LwyXF2mQNiI.roa
File:                     S1uN57ZtpapAjQX7LwyXF2mQNiI.roa (raw, json)
Hash identifier:          oA2pj5Jo74kR6fwz+lWlmeGLX2/n26+RjDu27FedcRo=
Subject key identifier:   4B:5B:8D:E7:B6:6D:A5:AA:40:8D:05:FB:2F:0C:97:17:69:90:36:22
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       5B
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/S1uN57ZtpapAjQX7LwyXF2mQNiI.roa
Signing time:             Tue 31 Mar 2026 08:29:35 +0000
ROA not before:           Tue 31 Mar 2026 08:29:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        124.146.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4B5B8DE7B66DA5AA408D05FB2F0C971769903622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:44:00:99:18:de:f5:02:9c:4e:36:fa:e3:
                    85:10:6d:49:b0:c3:ed:84:01:4f:27:c4:02:e5:e5:
                    8e:98:65:76:c4:8d:b1:82:1f:4e:d3:69:76:4a:3f:
                    8a:c1:00:5b:ec:95:be:fa:e5:33:b2:60:0c:00:06:
                    27:6d:86:d7:0f:83:17:78:1d:30:d6:52:f2:7d:b7:
                    d1:db:d0:c4:6f:4e:0b:52:3f:35:f6:8c:de:a5:50:
                    ac:ad:08:ca:bd:0b:91:6f:1b:cf:39:d4:3c:8d:e6:
                    df:75:c3:40:0e:91:a9:87:86:4e:15:a8:a9:bd:ab:
                    37:23:78:aa:b6:35:4c:3e:42:fa:0a:fc:73:78:24:
                    3c:33:2e:db:41:40:2f:c7:15:ba:08:6d:c6:4b:32:
                    90:53:0d:56:94:d7:74:c0:20:4f:fa:4a:12:7c:99:
                    b8:5f:7d:8b:b6:32:00:e9:32:f2:37:47:99:13:0d:
                    87:82:e5:1c:92:3f:7f:7c:a7:5c:02:3a:2c:1a:e5:
                    ab:92:5c:3c:89:01:aa:f4:05:7c:17:db:c6:bc:8a:
                    8a:60:c5:53:e1:25:2e:a9:14:0e:09:30:9c:96:c2:
                    e4:5b:a7:31:9e:4b:19:39:fd:d1:74:6f:96:7a:01:
                    9a:04:d2:80:46:08:51:65:9d:06:ea:91:5e:b8:ab:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5B:8D:E7:B6:6D:A5:AA:40:8D:05:FB:2F:0C:97:17:69:90:36:22
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/S1uN57ZtpapAjQX7LwyXF2mQNiI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.146.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:44:53:ad:c5:93:4a:f6:1f:4d:98:6f:25:f8:ea:83:92:
         36:2a:d3:a4:63:4e:91:bc:09:53:c0:0f:f6:84:ea:31:ac:79:
         0b:25:71:5a:ef:32:ec:b5:fc:48:13:e0:9c:0f:79:08:4a:2c:
         f6:ce:6e:46:98:ef:7d:3f:4c:13:91:b9:32:70:9c:1e:d1:29:
         6b:00:1e:e8:a2:05:0f:73:c8:0a:8f:ce:fe:cf:58:f8:47:96:
         25:0b:4c:39:82:df:e1:12:78:16:1e:03:76:26:47:c6:66:91:
         8d:a8:40:97:27:94:b9:35:e8:ff:46:7a:05:9b:5d:e6:43:05:
         a4:3c:33:bb:ab:78:90:7b:ba:36:6a:8f:6e:3d:39:23:50:37:
         e2:14:89:95:5e:1a:da:ec:0b:64:f2:81:20:71:d5:d2:d5:f5:
         ce:1a:c3:32:1e:01:76:da:3f:f4:0f:6d:18:59:89:c8:db:62:
         52:29:9a:9b:31:7a:ab:b8:88:76:28:07:5e:a3:f3:68:8e:75:
         af:b2:da:27:3f:d1:cf:c8:d6:6e:16:50:73:63:3e:67:fe:d7:
         88:16:f7:b5:72:85:b6:f2:6f:68:59:1e:b5:ea:9b:2f:66:23:
         70:ab:b8:ba:14:83:ee:27:01:9a:de:e7:32:af:79:e2:e0:0c:
         b3:cb:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:53 2026 by rpki-client