Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/v1bmuXi_iL_a7LpJvUfZ9laQ6JQ.roa
File:                     v1bmuXi_iL_a7LpJvUfZ9laQ6JQ.roa (raw, json)
Hash identifier:          3YeQF5NcPUJUJIsfUMPIDT1GN1ORmU8PjHyANN4l5XE=
Subject key identifier:   BF:56:E6:B9:78:BF:88:BF:DA:EC:BA:49:BD:47:D9:F6:56:90:E8:94
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       64
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/v1bmuXi_iL_a7LpJvUfZ9laQ6JQ.roa
Signing time:             Tue 31 Mar 2026 08:31:39 +0000
ROA not before:           Tue 31 Mar 2026 08:31:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Mar 31 08:31:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF56E6B978BF88BFDAECBA49BD47D9F65690E894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:d4:8c:0d:00:1c:40:c4:31:b1:02:3a:ed:
                    36:91:40:13:ed:39:7a:97:f2:8f:bb:5b:6f:58:d8:
                    bb:fc:98:b2:c4:ea:e5:b8:ae:32:96:49:ef:15:45:
                    14:fc:5d:e5:e3:fc:8c:17:1e:77:bf:3c:55:6d:35:
                    60:02:4b:b5:7a:95:37:fa:bc:d1:52:8b:e2:fa:40:
                    c1:f7:1d:38:a7:2e:e0:63:eb:94:bd:5d:d1:2c:49:
                    5e:07:e3:30:41:37:91:34:4c:82:a1:62:b3:16:b5:
                    16:5d:c7:30:93:70:db:b8:83:6a:70:0e:b9:35:10:
                    fe:c5:c5:96:d5:9d:e7:75:42:44:a3:4d:7d:a9:d6:
                    76:9e:5a:f2:5c:71:2b:f3:d9:b8:d0:58:c6:9f:ab:
                    5c:51:c3:8f:ba:6b:50:e9:f7:bd:08:11:e9:37:55:
                    4d:43:1b:91:e5:8b:5f:0f:28:7d:e4:6d:ff:10:a6:
                    be:49:72:c7:6a:31:fd:f9:0b:97:c4:7f:f3:6d:f9:
                    ad:e3:18:8f:c8:d5:e2:03:aa:87:22:d8:c3:92:71:
                    88:1e:9c:1e:58:da:28:a5:68:89:e5:10:aa:66:d3:
                    8b:20:bc:31:bc:ef:c2:56:d9:73:13:a7:2e:09:46:
                    6d:17:b5:2f:0a:63:0e:a4:1d:40:96:0e:2c:0d:95:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:E6:B9:78:BF:88:BF:DA:EC:BA:49:BD:47:D9:F6:56:90:E8:94
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/v1bmuXi_iL_a7LpJvUfZ9laQ6JQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:f8:26:0f:e0:66:5e:6c:fa:5d:03:03:84:93:6a:0e:c3:
         5f:65:ee:96:32:4a:c5:c2:bd:93:89:bc:ed:2b:63:00:eb:b5:
         1a:64:f3:8e:23:e7:1c:34:c0:25:87:2b:d2:aa:a0:34:d9:13:
         dd:9b:8b:2d:95:16:9b:4f:43:d8:2b:f3:0f:19:9e:07:cb:f0:
         90:fd:6f:9d:c8:a0:ce:78:be:13:15:79:f4:dd:c4:2c:08:3d:
         d3:26:2e:a9:0f:da:ef:8c:a6:0c:73:f8:8a:36:a2:e8:dd:c9:
         b1:de:0e:c4:ec:b3:f1:fb:5f:33:83:80:8f:9a:38:db:49:30:
         e6:ac:78:3a:48:29:bd:04:b5:ea:4d:00:b1:d5:1a:7a:fb:6d:
         8c:da:1d:a4:2f:c1:09:42:d9:31:7a:b5:72:fa:bf:33:e6:4d:
         04:f2:ed:82:75:06:b6:20:53:53:52:af:98:73:57:9f:29:1c:
         b8:cf:58:a7:cd:25:ec:21:04:46:74:21:18:91:bd:67:fd:be:
         f8:bc:39:99:f1:0c:82:c1:ff:ab:03:9c:ab:76:52:14:97:fa:
         b3:87:0e:7c:b5:24:be:c6:53:06:79:9c:4f:2a:9f:b0:f2:e9:
         d5:6b:c6:4c:c5:f4:d3:ff:8b:13:a7:71:de:db:36:ed:97:c2:
         bc:78:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:11 2026 by rpki-client