Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/BLaSo9Io302_jM6iQTbeSGHUKR4.roa
File:                     BLaSo9Io302_jM6iQTbeSGHUKR4.roa (raw, json)
Hash identifier:          5jaI2HXEf7xFT3fglrEca9CgReTT/WUDJDt0PV/6W0g=
Subject key identifier:   04:B6:92:A3:D2:28:DF:4D:BF:8C:CE:A2:41:36:DE:48:61:D4:29:1E
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       FB
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/BLaSo9Io302_jM6iQTbeSGHUKR4.roa
Signing time:             Tue 31 Mar 2026 07:51:24 +0000
ROA not before:           Tue 31 Mar 2026 07:51:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9351
IP address blocks:        182.22.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 31 07:51:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=04B692A3D228DF4DBF8CCEA24136DE4861D4291E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:14:e4:d7:49:b1:ff:a2:0c:9f:53:42:a8:
                    05:36:4e:d3:88:59:57:24:a7:ca:ac:68:15:64:d1:
                    e0:e2:fc:6d:9c:98:46:01:7e:0d:71:9e:ac:e3:ba:
                    73:f6:5a:6a:ec:54:98:2d:7c:f5:19:74:6b:70:fd:
                    81:a9:c1:b5:10:be:74:d5:1c:78:1d:d7:de:31:68:
                    e6:8e:f0:0e:a3:4d:a5:14:f1:d8:db:fd:ac:0d:d1:
                    59:74:d9:6a:71:3e:49:ad:ab:a5:45:7c:06:87:1d:
                    e6:ed:63:19:c9:47:9e:b1:cf:ff:cb:6c:ce:fc:f3:
                    3b:e7:b8:01:bd:c7:f7:2b:3b:93:6b:e3:1b:6b:fd:
                    c0:88:e5:5a:7b:eb:aa:1f:8a:01:2c:06:7d:d4:a3:
                    e7:dc:e7:30:3f:b4:8a:14:9e:af:7f:b9:93:ea:94:
                    01:75:bf:ab:ce:8c:27:11:c3:3c:c8:72:e3:6c:83:
                    a9:38:5b:f1:e3:fc:b1:a2:0a:4c:64:f5:f1:d4:43:
                    d9:78:33:fd:14:e9:9c:58:3f:04:45:c4:86:f0:91:
                    69:2d:9b:74:3b:e5:c3:79:c0:01:94:d7:06:37:e6:
                    5d:75:c3:0b:a1:2d:a3:ef:0c:d9:0b:3b:e2:aa:78:
                    55:a2:a0:22:0b:ca:a5:fc:01:ea:e3:83:45:4b:51:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B6:92:A3:D2:28:DF:4D:BF:8C:CE:A2:41:36:DE:48:61:D4:29:1E
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/BLaSo9Io302_jM6iQTbeSGHUKR4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.22.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:49:c7:5a:b7:1b:d1:ab:cd:27:41:fc:50:de:68:6b:29:
         a0:85:ca:b1:9e:c9:cf:b6:b1:86:6f:05:0c:51:d9:1a:2a:f8:
         da:72:6b:51:c0:80:66:9c:d5:19:a1:f5:cb:dd:b5:b4:38:cb:
         80:55:73:7d:c7:8c:b9:30:16:7e:1b:f3:1a:5f:af:ad:93:1b:
         5f:f9:81:64:c3:40:bb:d6:39:89:dc:8c:9a:d0:57:9e:5c:ba:
         7b:55:6b:df:df:0d:ca:08:f0:7b:36:c4:f2:78:55:c2:1d:a6:
         3d:65:29:7e:ad:45:f1:43:34:c6:40:37:6a:42:ed:a7:08:fd:
         25:22:b5:6d:84:7d:57:08:c7:76:b3:80:9a:43:6d:de:76:4f:
         73:e6:12:8f:02:7e:f9:a1:02:fc:48:3d:e8:0a:99:20:6f:ab:
         2a:07:4c:f2:ef:32:9c:c3:52:20:02:09:c5:4e:48:47:cb:4e:
         83:42:7a:50:aa:c2:ec:fe:17:78:71:c1:b3:2d:e6:55:33:a4:
         be:be:c4:2b:14:db:ed:de:ce:59:48:e7:d1:c7:c2:8d:81:c9:
         39:a9:ba:0f:f8:f8:3a:01:88:39:93:04:88:c5:29:fb:de:bd:
         40:08:74:8c:c6:60:bd:e6:38:98:03:73:9a:73:db:63:d1:a7:
         35:25:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:23 2026 by rpki-client