Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/BJXxpS8ma47EACrq66EFYDZzuD0.roa
File:                     BJXxpS8ma47EACrq66EFYDZzuD0.roa (raw, json)
Hash identifier:          NI7hb9XKl9X6x/E9zfFlpyZ44H4hyF+0T+SaXBAS8O0=
Subject key identifier:   04:95:F1:A5:2F:26:6B:8E:C4:00:2A:EA:EB:A1:05:60:36:73:B8:3D
Certificate issuer:       /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial:       28
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/BJXxpS8ma47EACrq66EFYDZzuD0.roa
Signing time:             Tue 31 Mar 2026 08:44:00 +0000
ROA not before:           Tue 31 Mar 2026 08:44:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7677
IP address blocks:        157.101.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
        Validity
            Not Before: Mar 31 08:44:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0495F1A52F266B8EC4002AEAEBA105603673B83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:94:6b:25:f4:69:c8:7a:a6:63:9a:04:2f:
                    47:a7:60:5a:3c:3d:03:0c:8f:41:fa:b2:6c:77:4f:
                    e8:22:5c:4c:55:41:00:e6:78:67:62:ce:54:62:84:
                    bb:c7:76:6e:35:af:51:47:88:15:0a:0a:68:f5:1f:
                    f8:ec:74:69:fb:33:6b:ae:e0:e1:73:8d:b9:58:4e:
                    89:8d:d8:9e:0f:c3:da:54:4c:9b:8c:cf:d0:77:27:
                    a3:41:36:cf:44:2e:b8:a5:18:48:df:4f:fb:02:bf:
                    46:ec:4d:52:1d:11:da:dd:9c:d7:83:75:f9:e9:2f:
                    c7:56:92:e9:26:14:9e:61:6e:cb:b5:ff:62:c4:ad:
                    ab:ba:80:01:ab:e5:de:2c:49:46:37:e3:d8:93:58:
                    f6:5f:6f:49:82:16:c7:bc:d7:4d:33:c9:5c:37:30:
                    74:5b:ae:79:24:23:ad:59:7b:15:f5:6b:99:3c:2c:
                    36:b7:b8:3d:ce:d2:30:b4:86:99:1f:be:05:0c:e7:
                    8d:dd:64:ad:ce:92:18:8f:44:ab:a6:38:25:2e:5e:
                    49:79:7c:cc:c3:83:68:54:48:d6:e6:6d:5c:a0:5b:
                    1f:b2:32:db:55:fb:60:75:19:51:6c:57:d3:b1:a5:
                    1b:e0:2e:c8:5b:2f:85:cd:e1:23:c9:9d:97:c4:ad:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:95:F1:A5:2F:26:6B:8E:C4:00:2A:EA:EB:A1:05:60:36:73:B8:3D
            X509v3 Authority Key Identifier:
                keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/BJXxpS8ma47EACrq66EFYDZzuD0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.101.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:39:fe:49:d9:2b:49:b6:5c:be:35:65:ed:ec:82:05:7f:a5:
         69:7d:0f:f3:6e:ea:29:00:6b:08:f6:43:61:a7:75:45:d6:90:
         79:9b:93:1f:b5:52:e7:d5:b0:ab:9a:e7:3d:e1:e8:2b:53:14:
         0b:47:cc:cc:dd:1b:1f:b2:cf:b1:ab:6d:e0:05:ca:b8:7a:dc:
         ee:a8:73:98:94:44:9b:70:29:27:df:54:e6:a3:61:53:c2:d4:
         2d:5f:4c:2b:ba:b4:62:5c:59:77:c5:75:1c:c1:35:06:99:d7:
         80:db:03:83:64:f1:8f:de:1e:a0:2c:fd:84:89:5d:5c:9d:50:
         31:97:4d:82:bf:42:33:3d:14:65:3f:8f:c0:99:64:52:8b:4b:
         cd:a5:af:ef:40:f9:b9:94:fa:2f:91:10:ae:26:b7:c1:df:64:
         74:c6:5c:86:ee:dc:b6:24:45:b0:95:41:75:49:19:c3:7f:f9:
         b2:9a:fb:38:8e:d3:11:d2:44:1c:59:26:68:7b:f7:17:0d:d7:
         15:f2:df:1a:ef:b0:16:4a:1e:d2:e7:ec:38:a3:ae:42:4e:ee:
         0b:4a:fd:2e:fd:33:14:bd:5c:12:b3:06:81:22:37:29:9f:1f:
         43:30:7c:37:a6:eb:4f:1a:c0:f8:27:a6:89:ce:c7:31:a0:6e:
         aa:76:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:32 2026 by rpki-client