Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/BuSW3lJNbwXMO8JofHHJNeG67Fc.roa
File:                     BuSW3lJNbwXMO8JofHHJNeG67Fc.roa (raw, json)
Hash identifier:          czDMH6zXuJrRleoZGsrKRIiQzz4wvI/V+I83E9Z+yEA=
Subject key identifier:   06:E4:96:DE:52:4D:6F:05:CC:3B:C2:68:7C:71:C9:35:E1:BA:EC:57
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       F6
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/BuSW3lJNbwXMO8JofHHJNeG67Fc.roa
Signing time:             Tue 31 Mar 2026 07:31:11 +0000
ROA not before:           Tue 31 Mar 2026 07:31:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18126
IP address blocks:        112.137.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Mar 31 07:31:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=06E496DE524D6F05CC3BC2687C71C935E1BAEC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:7e:f7:3c:21:10:5f:e1:aa:fd:75:82:40:
                    6a:f2:e8:54:04:17:70:ee:d9:70:35:ed:3a:6d:6b:
                    9c:e9:2f:e1:2a:13:cc:c0:1f:1b:1e:80:9d:aa:48:
                    ae:00:4e:be:0f:3c:4d:84:00:12:92:53:64:2b:90:
                    be:40:02:36:a2:33:ac:7c:a2:c5:ea:5c:c5:51:03:
                    8b:b4:0c:7e:e6:d6:0d:88:0c:90:69:f1:d6:fe:66:
                    f4:d8:f0:18:ff:a7:47:6b:cb:b3:42:ce:0b:34:13:
                    8d:7d:30:d8:f6:4f:c4:9b:4d:64:32:cb:53:5b:dc:
                    49:7a:ba:09:0b:08:ec:25:6a:9e:f6:f0:d5:a7:fa:
                    1e:d4:3f:cd:fa:51:9c:d4:a1:fa:2d:a2:7c:3e:04:
                    db:8a:59:0d:d8:df:58:17:d2:44:b3:f1:17:6e:9b:
                    4b:7e:58:9e:6d:82:ef:e7:1f:98:8f:02:80:da:27:
                    2a:ab:a8:0c:6a:60:08:f5:92:36:46:c1:a9:7c:05:
                    ef:0e:1f:0b:d2:2a:1e:e4:d1:e1:0a:8e:ae:71:54:
                    a4:6d:98:43:33:3b:a0:a4:38:2a:1e:f5:f4:79:29:
                    10:1e:be:5c:48:19:e4:a1:28:bf:b1:ce:d8:26:4a:
                    3e:95:2a:01:e0:4f:d6:c2:aa:cc:03:4c:9f:c6:1a:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E4:96:DE:52:4D:6F:05:CC:3B:C2:68:7C:71:C9:35:E1:BA:EC:57
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/BuSW3lJNbwXMO8JofHHJNeG67Fc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:52:70:58:2a:17:a6:f3:95:e4:7a:8d:f4:a5:0a:6b:58:2d:
         62:19:3f:a9:b5:ab:ef:57:da:e1:d0:aa:86:8e:12:7b:bf:1b:
         48:11:f9:e2:3f:49:bc:29:0f:48:00:82:0f:31:dc:d8:50:11:
         d2:57:b7:15:0a:3d:35:8a:6a:87:30:1f:a7:b8:f4:dd:90:6b:
         b5:84:74:66:00:d0:d7:42:4f:5d:53:21:ae:ff:0e:4f:f7:e1:
         5e:58:f2:a6:cd:8a:b0:4b:fb:d9:d8:f1:07:c8:47:b3:32:3e:
         ad:37:0d:9b:b7:3d:f4:17:33:f6:4a:a2:cb:74:8b:99:0d:c7:
         f0:b9:45:1d:4b:74:b4:ac:f7:18:47:10:d8:f7:e6:6b:2e:80:
         2d:97:8e:b6:8c:32:99:f3:c1:40:05:85:94:bf:b7:8d:2e:7f:
         e8:47:d5:de:33:ff:94:6f:0c:ee:52:21:84:cf:49:cb:eb:46:
         7b:13:5e:46:2a:b7:8f:f1:ab:e2:77:3f:1c:d2:ad:84:8c:01:
         2c:4c:1d:eb:57:0b:a7:3b:e7:69:5b:1d:2e:b4:a6:66:eb:e0:
         8e:8d:46:c3:af:f2:3c:a3:f2:64:f6:08:91:38:13:74:64:70:
         f0:fc:51:44:44:03:89:6e:b0:d1:41:1d:00:83:11:fb:55:10:
         e7:db:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:20 2026 by rpki-client