Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa
File:                     WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa (raw, json)
Hash identifier:          +RXwYwQR8XijIisNUA7MBzP1IYmCBOKcMBoZVEkardk=
Subject key identifier:   5A:D3:6A:12:ED:8B:3E:AF:91:3A:90:9C:26:81:5C:60:0E:C5:C6:CF
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       42
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa
Signing time:             Tue 31 Mar 2026 08:32:39 +0000
ROA not before:           Tue 31 Mar 2026 08:32:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18283
IP address blocks:        101.50.48.0/21 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: Mar 31 08:32:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5AD36A12ED8B3EAF913A909C26815C600EC5C6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:c0:fb:da:8f:7b:71:0a:de:6b:5b:60:a3:
                    61:9e:2f:0f:e2:36:a3:57:57:02:90:e7:bb:b4:c7:
                    ce:e9:bb:53:4a:7f:bd:82:c7:37:7b:52:ba:78:a0:
                    fc:a2:26:54:6d:93:e8:5b:8d:9b:2c:81:40:38:b7:
                    18:e1:c7:f1:d8:3c:a5:9d:0f:45:71:3b:a5:de:a5:
                    34:c0:f1:d3:7e:9f:1b:61:e8:d0:91:cd:9b:00:d4:
                    c5:02:4a:f8:cc:69:a3:ce:6f:a1:66:e1:34:88:0a:
                    bb:2f:5b:fe:f7:5c:10:b2:84:32:95:a8:a4:5c:33:
                    b0:e0:4a:f5:26:45:bb:c0:03:6d:6e:8d:46:db:46:
                    68:d5:4a:fb:41:b7:e8:a7:bd:2d:cc:1c:10:90:65:
                    19:a0:58:bd:02:0f:63:35:b4:25:88:6a:5b:04:25:
                    0c:a7:e6:69:14:dc:de:ef:65:8e:42:a7:c5:f0:f8:
                    c7:8c:03:fc:f9:c3:cc:7a:97:fe:43:68:84:42:6d:
                    73:23:c9:b2:9f:71:36:6a:44:74:33:38:16:88:3a:
                    53:ed:f3:a5:c5:20:b2:98:c6:77:f3:e1:e0:10:c8:
                    3c:d6:ae:d8:4a:1e:2c:f1:52:4e:bd:89:87:ac:9b:
                    94:10:8b:be:73:00:98:a1:14:ba:cd:c5:98:f5:a9:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:6A:12:ED:8B:3E:AF:91:3A:90:9C:26:81:5C:60:0E:C5:C6:CF
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/WtNqEu2LPq-ROpCcJoFcYA7Fxs8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:21:b4:4a:b5:3a:c6:c5:cd:20:ae:54:e2:df:6e:24:a5:eb:
         1d:35:b1:e7:8c:27:72:9f:ac:be:f1:2a:7e:57:ed:fd:21:a3:
         f8:e9:3d:31:ce:3c:fb:af:05:02:6a:7d:dd:06:91:c1:be:3c:
         2b:64:00:25:06:64:54:e5:f4:c6:f3:ca:14:03:20:44:42:08:
         73:c8:61:23:a9:a9:a8:a2:49:e3:f5:cb:26:84:d7:53:99:2e:
         e4:8d:59:c5:58:ed:5d:70:54:7e:10:6c:1f:23:56:9b:21:a7:
         99:59:a6:d8:47:52:80:9c:f0:30:c4:5d:2e:92:a9:30:01:92:
         aa:b7:6c:15:33:2f:3d:6b:17:1a:72:ce:ad:a5:8d:a4:e6:11:
         8e:6d:39:57:60:9a:e3:28:b7:a9:bc:50:e2:b7:22:68:d3:6d:
         f8:2d:ab:a1:e1:ee:63:73:6c:6c:98:54:3f:d3:d2:f6:81:3f:
         23:9f:3b:a2:2f:60:ca:39:ff:1a:fc:5c:33:fa:97:30:54:0b:
         e5:92:e5:ac:9b:54:7f:9c:2d:9e:9b:3e:8d:36:ac:f4:a5:4f:
         e6:95:e8:31:cf:e9:8e:0f:0e:b2:f3:bb:62:04:7f:91:01:ce:
         74:5f:45:01:25:14:97:d8:d2:46:48:34:be:37:0e:1d:3e:7a:
         f4:3c:84:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:07:03 2026 by rpki-client