Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BexJKl0H1GLbv3Ntt2sSFyr2KPo.roa
File:                     BexJKl0H1GLbv3Ntt2sSFyr2KPo.roa (raw, json)
Hash identifier:          zANwOj6yjG0KP9b0CM2IPDMQivYb9WDE7ACFyanDE3Y=
Subject key identifier:   05:EC:49:2A:5D:07:D4:62:DB:BF:73:6D:B7:6B:12:17:2A:F6:28:FA
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       028B
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BexJKl0H1GLbv3Ntt2sSFyr2KPo.roa
Signing time:             Sun 01 Mar 2026 01:31:32 +0000
ROA not before:           Sun 01 Mar 2026 01:31:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        210.135.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar  1 01:31:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=05EC492A5D07D462DBBF736DB76B12172AF628FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d6:89:d9:e3:6b:29:44:1b:60:9a:28:fa:9a:
                    0f:29:86:70:06:71:a1:8b:81:99:2b:b2:9c:79:0d:
                    cc:e8:ac:2d:67:89:91:6e:37:85:4a:1d:8c:8b:1e:
                    57:aa:ac:6b:60:89:f8:ac:87:b9:62:ae:53:fd:a3:
                    7d:ce:92:19:14:a2:96:c7:5d:a2:c2:f1:32:79:5f:
                    de:31:76:ec:f2:60:3f:29:86:d5:ec:ce:a1:55:17:
                    f8:fb:7f:a8:22:d1:79:7b:e2:51:9d:e9:ac:85:2e:
                    b2:38:50:ec:d8:6c:a7:32:fb:af:09:08:c0:2d:5e:
                    1a:d3:04:99:ba:92:e0:19:87:b9:40:d2:a8:42:19:
                    b7:0a:d0:65:6b:75:b6:71:b2:73:1f:0f:20:48:1d:
                    e8:61:bb:e3:1c:3b:89:c3:07:5d:c9:50:20:bc:75:
                    e5:05:b1:14:35:c8:8f:18:57:74:98:0e:ba:98:f0:
                    bf:33:67:a7:6d:96:df:6e:f5:b1:02:de:d3:32:81:
                    a2:1c:5b:5b:65:12:9e:99:97:80:af:fc:de:f7:e8:
                    35:59:96:7d:01:ad:c0:3b:c9:c4:66:b4:5a:ed:2f:
                    b1:56:eb:eb:11:fb:75:fa:4a:4e:b8:f4:c6:33:ec:
                    16:2c:2c:a7:9e:65:dd:ea:2f:51:9b:73:fc:25:64:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EC:49:2A:5D:07:D4:62:DB:BF:73:6D:B7:6B:12:17:2A:F6:28:FA
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BexJKl0H1GLbv3Ntt2sSFyr2KPo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.135.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d3:82:9a:ff:e1:f3:13:56:9a:e4:9d:16:bc:10:60:95:30:9e:
         4a:dc:50:af:27:a7:88:90:13:61:ca:6b:11:6d:2d:3f:07:45:
         c6:24:a6:b3:c0:37:8a:76:cc:50:55:76:de:25:09:03:e0:2b:
         b4:a6:4a:63:18:2f:54:d5:bf:30:11:7a:d2:b6:0e:83:88:0f:
         13:95:a4:f6:bf:31:80:ca:3e:2c:3f:b1:11:62:2c:1f:f2:4d:
         3b:15:7d:84:cb:d1:09:88:60:fc:26:e5:5e:63:b9:53:23:d5:
         1d:41:2b:ef:f2:94:0e:8c:a5:f2:7b:36:62:39:9c:46:70:11:
         ac:48:53:28:d4:c1:ed:38:1d:ff:f1:30:d4:d6:0c:9a:61:74:
         b2:1e:a1:8c:c0:1a:e3:10:0f:06:d1:0b:a7:20:39:14:85:fb:
         da:88:e5:87:59:89:dd:3d:e7:7d:a5:5d:c2:c7:b4:bd:12:1e:
         01:e9:ae:85:42:97:48:b5:73:59:b3:7e:79:ed:aa:5e:4b:9b:
         63:a8:93:aa:49:e6:b2:6b:ea:94:61:da:26:7e:a9:11:57:de:
         eb:93:f5:a8:76:ad:46:da:91:db:c4:50:6c:f1:c5:f5:65:ab:
         f1:35:52:fa:e2:5f:65:6b:60:37:bf:04:96:11:e9:b6:4c:03:
         36:6f:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:57 2026 by rpki-client