Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BRU9l6P-9V4Za9SuTQffAaXX5jE.roa
File:                     BRU9l6P-9V4Za9SuTQffAaXX5jE.roa (raw, json)
Hash identifier:          KIlOEqLEymANjeQuRwPUC75PypE1mwRVQei4EYboh+U=
Subject key identifier:   05:15:3D:97:A3:FE:F5:5E:19:6B:D4:AE:4D:07:DF:01:A5:D7:E6:31
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0511
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BRU9l6P-9V4Za9SuTQffAaXX5jE.roa
Signing time:             Tue 31 Mar 2026 08:19:22 +0000
ROA not before:           Tue 31 Mar 2026 08:19:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.157.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=05153D97A3FEF55E196BD4AE4D07DF01A5D7E631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:0d:49:7b:f9:37:ad:82:bd:99:16:e3:f1:
                    7f:dc:7c:06:7c:59:4f:cd:87:26:28:ba:07:79:b3:
                    f9:f4:89:af:41:a4:a5:19:72:f1:48:6c:fa:68:53:
                    9a:4c:03:10:49:91:e2:3f:0b:75:fa:7a:78:f0:3c:
                    59:37:b5:77:5b:88:5a:ee:3e:0b:89:cb:b9:07:f9:
                    62:72:15:fb:35:8b:c9:6c:8d:cf:69:86:f7:cf:12:
                    e7:ea:ab:f0:e9:be:81:ca:08:19:9d:58:f0:b2:fc:
                    46:48:82:a3:9d:85:c7:67:cb:91:22:80:33:29:8a:
                    48:49:af:e9:e7:17:c2:19:9b:9a:a3:97:38:17:da:
                    d3:59:f6:2e:7b:98:98:07:e0:6e:93:4a:a4:9b:a7:
                    2a:7e:17:71:e2:8c:50:e5:45:56:ee:9e:10:49:dd:
                    6c:63:53:2b:23:5f:7c:21:f1:19:b8:38:f0:0a:1d:
                    88:b1:f7:70:d5:0f:ff:14:0f:b8:15:54:62:b2:18:
                    a5:89:b6:b8:ab:5c:1f:83:39:0a:d4:7e:8f:a9:14:
                    04:01:53:37:86:d7:23:fe:06:28:54:1f:bf:91:3a:
                    c3:92:b9:54:62:81:16:a3:1b:03:f9:2e:91:c3:06:
                    53:ea:c0:19:e8:cd:7e:e4:94:24:a9:66:c3:cc:e8:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:3D:97:A3:FE:F5:5E:19:6B:D4:AE:4D:07:DF:01:A5:D7:E6:31
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BRU9l6P-9V4Za9SuTQffAaXX5jE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:ca:98:81:92:2a:ed:c2:65:5e:ae:9f:9f:2f:b8:51:ab:
         50:05:22:b8:87:05:9a:92:1f:26:97:47:32:38:aa:5e:6d:4b:
         68:1c:86:cd:c1:c1:94:8e:77:98:27:26:06:2e:7b:37:67:61:
         d8:97:a7:7c:0e:b1:4b:33:f4:13:00:c0:d7:c6:82:13:23:3d:
         37:7b:0c:61:9b:9c:52:98:a7:0c:98:2c:25:e3:40:4f:f8:b0:
         d7:b3:68:ff:95:cb:e0:94:1c:c0:eb:b8:17:7d:17:ea:6b:a4:
         f6:8b:0b:da:69:9d:71:01:b3:39:50:0e:74:eb:20:0a:4e:56:
         e3:b0:ff:e2:9d:e6:02:ad:78:4f:22:df:92:c2:2d:dc:17:61:
         71:92:6e:0c:4a:f4:27:c7:bc:2e:2d:76:a3:16:d6:7f:86:72:
         e2:d9:fb:80:62:83:0a:c0:aa:da:82:cb:80:a9:b1:a7:41:49:
         a8:6e:52:42:da:0d:43:d7:d3:d1:a5:2c:80:d1:3f:a9:d1:e9:
         8c:eb:ca:ce:bd:19:0e:1a:9b:65:94:b8:e5:d1:f8:5c:44:b2:
         68:f2:34:a3:fc:fd:1a:b0:8e:07:2a:4b:27:44:6c:3d:46:de:
         09:31:1c:6a:21:93:f7:bd:8d:40:9d:50:1b:e0:b8:96:5d:52:
         5c:72:f4:db
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1MTUzRDk3QTNGRUY1
NUUxOTZCRDRBRTREMDdERjAxQTVEN0U2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2UA1Je/k3rYK9mRbj8X/cfAZ8WU/NhyYougd5s/n0ia9BpKUZ
cvFIbPpoU5pMAxBJkeI/C3X6enjwPFk3tXdbiFruPguJy7kH+WJyFfs1i8lsjc9p
hvfPEufqq/DpvoHKCBmdWPCy/EZIgqOdhcdny5EigDMpikhJr+nnF8IZm5qjlzgX
2tNZ9i57mJgH4G6TSqSbpyp+F3HijFDlRVbunhBJ3WxjUysjX3wh8Rm4OPAKHYix
93DVD/8UD7gVVGKyGKWJtrirXB+DOQrUfo+pFAQBUzeG1yP+BihUH7+ROsOSuVRi
gRajGwP5LpHDBlPqwBnozX7klCSpZsPM6N2LAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUBRU9l6P+9V4Za9SuTQffAaXX5jEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L0JSVTlsNlAtOVY0WmE5U3VUUWZmQWFYWDVqRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU7neAwDQYJKoZIhvcNAQELBQADggEB
AIOjypiBkirtwmVerp+fL7hRq1AFIriHBZqSHyaXRzI4ql5tS2gchs3BwZSOd5gn
JgYuezdnYdiXp3wOsUsz9BMAwNfGghMjPTd7DGGbnFKYpwyYLCXjQE/4sNezaP+V
y+CUHMDruBd9F+prpPaLC9ppnXEBszlQDnTrIApOVuOw/+Kd5gKteE8i35LCLdwX
YXGSbgxK9CfHvC4tdqMW1n+GcuLZ+4BigwrAqtqCy4CpsadBSahuUkLaDUPX09Gl
LIDRP6nR6Yzrys69GQ4am2WUuOXR+FxEsmjyNKP8/RqwjgcqSydEbD1G3gkxHGoh
k/e9jUCdUBvguJZdUlxy9Ns=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:17 2026 by rpki-client