Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bMI06-RVFVrIpLt7aCwS7AdZAus.roa
File:                     bMI06-RVFVrIpLt7aCwS7AdZAus.roa (raw, json)
Hash identifier:          SUch+/k1V0DhuT87DLQNBedrmXXvbcTRrx2t3qxxqBg=
Subject key identifier:   6C:C2:34:EB:E4:55:15:5A:C8:A4:BB:7B:68:2C:12:EC:07:59:02:EB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04F5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bMI06-RVFVrIpLt7aCwS7AdZAus.roa
Signing time:             Tue 31 Mar 2026 08:19:10 +0000
ROA not before:           Tue 31 Mar 2026 08:19:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6CC234EBE455155AC8A4BB7B682C12EC075902EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:bf:32:c0:1a:f1:be:e9:8f:a6:56:b2:48:
                    25:8c:e9:84:de:4a:e8:ea:61:ae:e4:49:b7:57:a1:
                    11:64:d5:00:b0:3d:c4:75:d6:21:e6:21:d5:e6:fa:
                    7a:90:3a:60:f8:72:a9:6b:0a:a6:d9:d5:e0:00:12:
                    9c:23:de:04:02:b0:c7:a6:65:df:6a:f3:81:09:32:
                    4d:02:59:01:48:d5:7a:5f:6e:7e:6a:24:be:8c:46:
                    c8:1f:98:15:0e:78:54:8c:a9:b7:b8:b5:60:5c:6b:
                    43:ad:97:c2:96:be:8a:14:fe:5a:6b:36:90:e3:0e:
                    7c:8a:73:f8:b0:20:0e:cb:c9:1e:31:7b:c5:93:e1:
                    95:91:4a:95:3b:2f:19:79:bc:17:fa:65:40:26:67:
                    8d:9f:8f:97:72:0d:75:5f:30:ca:d7:ab:f5:6b:93:
                    ee:88:91:fa:d5:09:b5:ee:76:b1:c6:c8:80:20:21:
                    8d:0e:34:de:30:ec:d1:06:44:2d:5f:59:ad:41:62:
                    d9:19:f5:e1:36:a2:19:cb:2b:93:15:aa:2c:45:c3:
                    9a:f8:d0:1d:fe:0f:ad:c7:e0:12:62:eb:6c:45:58:
                    c0:57:ca:3c:0b:4e:38:5e:11:8e:62:0c:a4:96:25:
                    46:97:fd:2e:c3:d5:37:b8:dd:ff:9c:da:92:ec:47:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C2:34:EB:E4:55:15:5A:C8:A4:BB:7B:68:2C:12:EC:07:59:02:EB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bMI06-RVFVrIpLt7aCwS7AdZAus.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:f3:19:9d:19:34:25:2e:fb:f8:d6:f0:bc:41:48:2a:8e:
         24:d3:37:d4:2e:ab:bf:a1:b7:4d:1f:2e:78:a2:5d:99:af:e3:
         12:3c:4f:25:6f:b4:1b:06:9c:af:89:be:98:4f:bf:22:3b:6e:
         40:f3:c6:1d:1e:ba:f6:f2:b1:c8:cf:0d:d6:e6:92:54:44:13:
         a4:ab:fc:63:fc:da:98:88:dc:11:41:3a:64:9c:67:1e:af:2b:
         0c:7c:77:d4:65:76:9b:0e:ba:b3:be:ec:22:02:bf:30:16:38:
         08:7b:63:30:2e:d9:5a:23:f0:65:c3:c7:4c:82:fd:9b:05:4b:
         40:2b:ca:c7:49:f6:63:ef:57:4e:7f:be:cd:5e:6b:71:5d:4a:
         2b:ae:28:f2:32:8e:f6:ce:1e:62:d6:77:6e:59:e2:b4:09:5e:
         6f:ba:cf:70:12:52:cf:d9:c2:bc:ab:78:11:bb:59:cc:f5:33:
         2c:60:00:b5:bc:b7:8d:79:9c:18:34:2a:8d:64:ca:6d:5b:7c:
         54:37:7d:b4:c3:7c:f5:e6:ed:ab:de:82:43:ca:ef:9b:8a:fa:
         14:05:5f:84:ea:d1:56:a2:39:e3:10:14:48:4d:bc:b9:e3:8f:
         6e:ef:31:38:bd:dc:c5:f9:fd:63:d5:c3:b2:da:e9:aa:7d:0c:
         4c:ef:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:10 2026 by rpki-client