Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-LRr_SwIXzWHPW-CwhEdVIC_fLU.roa
File:                     -LRr_SwIXzWHPW-CwhEdVIC_fLU.roa (raw, json)
Hash identifier:          Ru65rbfWLLVwsvjNLhtH0y+J7ZQWgcrt55paMcXXft4=
Subject key identifier:   F8:B4:6B:FD:2C:08:5F:35:87:3D:6F:82:C2:11:1D:54:80:BF:7C:B5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       069B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-LRr_SwIXzWHPW-CwhEdVIC_fLU.roa
Signing time:             Tue 31 Mar 2026 07:28:15 +0000
ROA not before:           Tue 31 Mar 2026 07:28:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        42.126.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F8B46BFD2C085F35873D6F82C2111D5480BF7CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:e7:0a:61:c8:14:f9:8c:95:e0:fa:2f:da:
                    c7:dd:4a:df:e2:52:73:95:93:bf:82:04:7b:80:56:
                    0a:39:3b:ce:a0:ff:db:12:eb:ff:d5:80:40:c3:1e:
                    0b:b5:72:7e:b2:c3:e2:1c:86:73:48:da:2e:48:d7:
                    e9:11:27:e0:64:94:61:35:1b:61:6b:86:da:83:3a:
                    35:be:ab:aa:d5:bc:ae:ee:1f:25:14:2f:3c:79:4e:
                    49:f4:e9:d4:95:ec:43:3c:39:87:72:6c:04:47:a0:
                    24:31:ac:31:41:99:5c:3c:41:74:a4:c2:a8:dc:84:
                    75:0c:9b:c5:44:ce:86:f7:31:cf:1d:5f:4f:32:3c:
                    20:c7:1a:24:9b:69:78:4d:ef:37:94:9c:c7:af:85:
                    20:ab:cb:2b:70:b9:6a:93:24:0a:d8:4a:3d:f0:6b:
                    c7:45:29:b5:18:da:de:8d:fe:00:9d:0c:9a:31:e9:
                    2a:74:a1:8f:d2:52:91:90:73:b0:88:5d:77:ae:fd:
                    b7:48:72:27:0c:80:56:6d:82:55:93:09:95:ac:02:
                    4c:e5:b3:21:67:69:a6:7e:b4:42:4e:1d:87:e2:2d:
                    f8:52:9c:02:b5:12:a4:06:15:de:05:8b:6f:48:f7:
                    65:3a:cc:79:6c:3c:cd:2c:a4:bf:d2:88:b4:25:60:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B4:6B:FD:2C:08:5F:35:87:3D:6F:82:C2:11:1D:54:80:BF:7C:B5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-LRr_SwIXzWHPW-CwhEdVIC_fLU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:43:be:f5:43:3a:1e:e2:72:38:0b:c7:ab:6d:aa:bb:d6:
         24:f3:96:47:99:55:b1:f0:55:fc:22:72:fd:d6:dc:e7:75:dc:
         54:94:51:24:48:23:e1:60:02:39:3c:ef:f4:1a:df:87:86:30:
         da:a9:47:e8:89:29:63:32:7f:d8:12:e2:da:bf:79:03:d2:6f:
         61:78:81:96:01:1f:46:ac:fe:7a:ed:37:06:c8:35:d7:81:0f:
         5e:33:08:92:18:b0:65:f1:12:1f:de:2f:8a:70:d2:32:06:58:
         d8:70:54:bd:4a:10:30:a9:3d:f7:c2:a3:84:d1:a3:15:fb:a1:
         1a:12:e8:28:8b:25:d1:dc:70:9b:8f:17:82:24:5e:6d:a6:37:
         41:46:6b:04:34:be:c2:b9:62:07:a9:0c:e0:93:5c:ca:bd:6a:
         ad:13:87:5f:c3:ad:69:7b:a2:6a:05:e4:70:17:3e:bf:6a:13:
         a5:6d:ab:90:56:0c:99:28:97:3e:60:04:21:14:b3:b7:4a:79:
         66:d2:3a:a0:47:1f:a5:13:fa:fa:f7:1c:34:10:16:de:0e:e2:
         9a:e2:00:59:1a:4d:87:09:a0:e9:e6:38:fd:83:9a:77:fd:61:
         3b:d0:b4:27:e3:74:47:88:ad:c5:bc:52:99:16:50:6e:fd:ce:
         22:15:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:32 2026 by rpki-client