Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa
File:                     S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa (raw, json)
Hash identifier:          GAo7E5G5JXaMRDDqIap2QqkSIppNkbBsutCHRH1lRNQ=
Subject key identifier:   4B:53:BC:49:D8:1E:94:47:32:A8:4E:19:A3:2D:98:1D:D6:EA:5B:54
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       AC
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa
Signing time:             Tue 31 Mar 2026 07:48:56 +0000
ROA not before:           Tue 31 Mar 2026 07:48:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38631
IP address blocks:        119.235.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Mar 31 07:48:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4B53BC49D81E944732A84E19A32D981DD6EA5B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:9a:15:4c:5c:52:9e:a7:0f:03:43:3b:1f:
                    d6:5b:b2:63:d9:bf:f4:2c:47:7f:44:17:1b:f6:36:
                    ec:31:49:06:0f:13:d9:b7:09:68:1a:e5:a0:e8:ef:
                    c0:de:27:6a:76:7b:65:43:a0:d3:03:db:cb:70:a3:
                    6c:97:f6:0b:3b:eb:95:d4:73:a5:76:6b:ae:5e:c4:
                    13:94:5c:af:63:84:78:f0:9a:3b:a7:5a:c2:5d:eb:
                    df:0e:8f:76:12:36:51:c1:eb:70:1c:8e:fd:ad:fa:
                    18:77:92:3c:d1:cb:67:b9:87:8e:98:c0:0b:33:22:
                    52:20:2b:a5:74:1d:b0:cc:25:38:bd:1a:d9:46:d8:
                    bb:44:68:0d:54:51:3d:7a:de:99:94:92:53:f5:01:
                    96:4a:37:9a:fd:58:4b:c1:28:69:c9:3c:a1:3d:54:
                    d4:5c:4d:4d:fc:64:7c:f2:05:b8:35:ca:02:75:32:
                    36:78:74:b4:f3:e8:bc:95:00:d2:10:19:a0:1e:1c:
                    69:04:77:c4:0d:5a:2e:63:8f:55:4d:54:a2:38:0c:
                    95:4d:19:e6:79:93:b5:f0:7b:34:e5:71:11:a5:7a:
                    d9:a6:01:6a:e8:b9:b2:8a:a8:c0:9a:b0:0e:8a:ef:
                    6b:ce:ae:60:48:56:01:55:46:d5:7c:cd:29:2f:82:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:53:BC:49:D8:1E:94:47:32:A8:4E:19:A3:2D:98:1D:D6:EA:5B:54
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:4c:cf:f3:0f:4e:18:f6:6b:f6:0a:97:04:21:1d:7f:e8:7b:
         9b:5b:f7:00:a5:67:f3:7f:6a:b2:a8:b6:5b:60:bb:f4:36:f6:
         3c:c3:e1:6b:64:69:f2:84:f8:2a:44:12:67:99:8a:2a:bb:cf:
         82:36:6d:df:fd:ac:4e:12:4e:55:b7:36:ab:c3:b9:9a:60:35:
         d3:eb:39:f3:9c:57:2b:2c:ac:19:c2:62:80:14:f4:2a:52:f5:
         7c:95:53:ae:a6:56:56:da:97:fc:c6:ae:27:33:b2:d5:e8:72:
         5a:73:13:e2:63:98:3d:24:a4:9f:dc:53:00:61:89:21:bf:d1:
         67:57:2c:35:c3:ec:28:0c:18:06:3c:db:f3:b5:cb:6c:95:e2:
         38:a7:da:1b:d1:49:95:ef:b6:9b:0b:77:92:8a:44:fa:33:a8:
         b1:79:91:86:c5:17:97:fd:8d:63:80:36:c7:fd:58:00:4f:c7:
         96:14:3f:ef:9a:71:29:85:c1:a1:2d:c5:1d:aa:f6:87:b3:47:
         86:79:c7:ed:77:27:ec:96:63:96:98:22:f8:9c:81:5d:fd:21:
         9c:48:bd:f1:0d:58:e5:4f:c4:bd:8f:bb:10:c5:8c:76:4a:25:
         72:06:dc:6d:f8:d9:f9:21:7a:d9:5f:a7:21:71:92:ab:64:ec:
         c5:f6:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 02:07:20 2026 by rpki-client