Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BgknaDOld86Sb6bh7l6liVGds3A.roa
File:                     BgknaDOld86Sb6bh7l6liVGds3A.roa (raw, json)
Hash identifier:          02wLfZaJW7q26uYzZnXwElXOX0mVQlNOkDmQV6el1oE=
Subject key identifier:   06:09:27:68:33:A5:77:CE:92:6F:A6:E1:EE:5E:A5:89:51:9D:B3:70
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0596
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BgknaDOld86Sb6bh7l6liVGds3A.roa
Signing time:             Tue 31 Mar 2026 08:20:26 +0000
ROA not before:           Tue 31 Mar 2026 08:20:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.159.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0609276833A577CE926FA6E1EE5EA589519DB370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:fd:0e:c8:5a:62:ae:8e:83:90:d3:ac:4e:
                    46:c2:f7:bb:cf:a8:dd:cf:e3:71:74:e6:29:b5:08:
                    ed:51:82:fb:ed:4b:a8:22:6c:54:27:82:6c:2e:18:
                    0c:9b:a3:12:4f:12:b3:ec:67:be:20:7a:ed:19:67:
                    9a:6b:a3:66:2f:85:68:44:9e:12:92:8f:2e:0f:6f:
                    48:6a:99:e8:4f:09:27:2f:5a:ae:d5:ee:39:9f:77:
                    e1:31:2f:ac:78:dc:bb:b7:c3:03:51:a2:bf:3c:a0:
                    87:81:b8:4e:90:2d:f8:be:3a:03:01:df:72:9f:4a:
                    ff:d4:53:26:6a:77:cd:bd:a4:81:32:6a:4d:00:59:
                    ba:57:c7:f5:48:41:ad:9e:93:76:7e:eb:6f:89:0d:
                    f2:41:1f:2f:de:c1:37:93:a4:2f:3f:15:44:ab:56:
                    1a:99:af:d0:91:9c:69:e9:b4:78:5f:f7:10:da:65:
                    61:f9:4e:4b:59:9d:b5:c1:55:d3:d9:10:4a:de:e3:
                    50:d1:60:d2:69:b7:46:87:c0:0b:c4:a1:85:88:e8:
                    9f:cc:59:24:4c:68:70:61:3f:cb:81:b0:fe:6d:23:
                    b5:82:fc:58:68:14:3b:4e:e8:17:48:31:d5:86:16:
                    77:b8:e0:c7:5e:00:f9:c3:b5:a3:91:19:20:e9:e2:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:27:68:33:A5:77:CE:92:6F:A6:E1:EE:5E:A5:89:51:9D:B3:70
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BgknaDOld86Sb6bh7l6liVGds3A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:48:cc:12:47:0b:27:45:d2:df:db:4b:14:29:2e:ea:31:fd:
         2b:af:03:e8:27:27:45:8d:1b:ed:af:28:25:8a:b0:8f:62:ef:
         59:bd:19:f9:5b:74:e0:97:ab:2b:85:69:29:75:1b:e2:d2:c1:
         86:bd:a9:0d:7d:f7:8c:cf:d6:d8:95:2b:09:f7:c3:e2:88:0b:
         63:51:23:40:23:6d:ef:f5:91:1e:10:f5:90:3d:07:b8:16:6b:
         bc:a3:1f:ed:c2:e8:ac:1c:c5:7f:93:eb:fe:43:86:f4:d3:f2:
         e7:39:6c:a3:6d:ce:3a:da:c7:2c:b8:a4:4d:22:3d:03:2f:72:
         9d:ce:b7:1a:ef:e5:50:6f:e3:7f:4c:41:70:12:99:fe:66:17:
         61:88:e9:1d:21:f3:27:6e:c7:a5:45:62:5c:74:a9:22:1d:53:
         e3:e0:21:68:84:32:4e:14:a3:1c:70:bb:d0:94:16:dd:1a:ff:
         0b:f8:cc:bf:93:12:d3:16:69:8c:5f:1d:78:b2:d2:9b:7e:ee:
         7f:4c:5d:7e:53:aa:ff:a8:d3:d9:dd:6a:af:ca:a4:39:e3:87:
         34:96:de:6c:37:4f:7d:02:1f:cf:3e:d9:8d:1d:c7:89:b1:3b:
         b5:a3:77:03:71:c4:f7:56:22:db:83:ef:c4:cb:e7:8b:d8:6f:
         f1:a4:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:24 2026 by rpki-client