Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/BV1AqR_rxgS3-qLRC9LwiywDNwg.roa
File:                     BV1AqR_rxgS3-qLRC9LwiywDNwg.roa (raw, json)
Hash identifier:          TGlppxuuqiOJwR0ALfS4PC5A4/7V8f3DDnT+INhB+LE=
Subject key identifier:   05:5D:40:A9:1F:EB:C6:04:B7:FA:A2:D1:0B:D2:F0:8B:2C:03:37:08
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       70
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/BV1AqR_rxgS3-qLRC9LwiywDNwg.roa
Signing time:             Sun 01 Feb 2026 01:35:56 +0000
ROA not before:           Sun 01 Feb 2026 01:35:56 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        203.174.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Feb  1 01:35:56 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=055D40A91FEBC604B7FAA2D10BD2F08B2C033708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:16:0e:bb:01:35:30:c7:27:e1:3b:13:5f:
                    ec:9c:6a:72:12:81:29:9d:44:0a:fa:5a:11:3c:b8:
                    bc:7b:77:cd:17:38:67:8c:4d:6b:67:f3:54:d2:9c:
                    f4:28:4e:b4:fd:37:01:e2:4e:58:e9:65:99:38:cd:
                    8a:cd:ce:e5:b9:20:f4:3e:d2:e9:aa:bc:fd:68:99:
                    2f:f6:83:74:0c:e9:db:f0:7f:2b:a9:9b:83:ff:af:
                    42:61:04:46:bf:6a:a2:de:a1:bd:83:05:7b:72:69:
                    dd:ce:59:c7:8d:7b:ad:29:2f:b9:d3:2a:bc:79:09:
                    ce:d3:ba:fd:7e:f0:83:1a:e5:12:22:c9:8b:ea:52:
                    87:9f:f2:15:ab:15:27:61:5a:f5:e9:ce:f7:dc:1e:
                    1c:b9:5b:63:ac:69:c5:d2:68:42:11:36:f4:0f:71:
                    22:46:0a:88:95:5f:08:3c:5c:3c:e6:72:4c:f5:da:
                    b4:1a:4b:67:e6:e0:ea:c9:b1:e4:98:03:f4:84:fa:
                    12:84:3a:b8:4e:be:d1:5f:46:78:ec:84:02:94:dd:
                    1f:14:80:eb:46:f1:87:d9:94:f3:47:99:30:8e:74:
                    aa:3c:9f:26:94:72:6b:1f:34:41:43:ab:a6:66:f4:
                    cc:80:69:05:a2:6a:f3:a8:b3:9d:a5:69:22:e4:ab:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5D:40:A9:1F:EB:C6:04:B7:FA:A2:D1:0B:D2:F0:8B:2C:03:37:08
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/BV1AqR_rxgS3-qLRC9LwiywDNwg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:d6:84:36:3b:66:c5:e4:92:1d:77:b5:b5:78:9f:03:63:
         45:38:be:53:02:98:af:bf:39:eb:ae:f8:a3:2c:1b:88:12:6a:
         25:6e:b2:17:84:b5:40:c9:10:f6:f3:ab:ba:e7:af:e8:32:28:
         e7:14:30:ee:ae:de:e4:79:91:58:08:03:3d:f5:2c:ea:20:1c:
         0e:17:f6:00:ae:d0:aa:72:fa:3f:84:17:4e:95:c5:79:03:fe:
         30:4e:c1:56:29:35:27:0d:15:0e:3c:99:19:54:45:52:30:d8:
         0e:ab:eb:3c:5d:f8:98:dd:31:09:58:0f:1a:b7:08:48:6e:3b:
         4f:a5:e8:a8:85:65:e9:93:e7:77:fb:91:be:2d:e4:e0:49:c1:
         cb:38:38:d4:c9:4e:46:aa:37:38:1c:3f:72:3d:f0:54:b4:94:
         4a:ad:d6:de:b6:5f:1f:11:cd:ea:69:57:93:04:17:64:c8:21:
         a3:0c:33:06:b2:66:60:fb:ff:ac:02:73:62:ec:90:9e:1b:45:
         cd:90:72:8d:15:93:4b:9a:46:a5:19:9c:44:a6:34:89:92:bd:
         3a:5c:7b:84:fb:d1:a0:c0:67:d7:81:07:55:09:5c:aa:b7:7d:
         2f:67:f6:80:72:e4:c4:c7:ec:6c:cf:76:e1:3e:ef:28:de:ac:
         b6:b8:a4:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:55:15 2026 by rpki-client