Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-nBOlEad283n-8UVeog1pSIhvAc.roa
File:                     -nBOlEad283n-8UVeog1pSIhvAc.roa (raw, json)
Hash identifier:          0ywjoMDzESMcBdVzLgR4qPSqMWJHemdnmjebozilJ2o=
Subject key identifier:   FA:70:4E:94:46:9D:DB:CD:E7:FB:C5:15:7A:88:35:A5:22:21:BC:07
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0690
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-nBOlEad283n-8UVeog1pSIhvAc.roa
Signing time:             Tue 31 Mar 2026 07:28:09 +0000
ROA not before:           Tue 31 Mar 2026 07:28:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        219.117.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FA704E94469DDBCDE7FBC5157A8835A52221BC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:57:93:56:bf:11:77:b6:ce:97:eb:36:37:
                    40:50:29:64:42:cf:57:ca:06:d9:ed:64:80:8c:c8:
                    cb:30:0f:44:bf:eb:8e:00:b6:bd:69:fb:11:d9:24:
                    82:c3:28:a8:97:ec:18:4b:61:50:8b:2c:ec:fa:f6:
                    30:a5:82:49:39:c6:c0:f1:7c:e1:93:6d:85:c3:a8:
                    78:fb:d2:fb:ec:5f:69:d1:1a:19:fb:42:9c:ef:1b:
                    40:c6:c3:45:72:8d:41:fa:51:e2:19:09:9b:e6:44:
                    0f:8d:c8:85:0e:99:2f:12:ad:a3:93:67:fc:58:30:
                    f7:35:5f:30:dc:78:50:c6:99:5c:c3:63:eb:de:a2:
                    2b:db:8d:e1:10:ab:7f:ce:b4:54:10:95:9e:43:f0:
                    0f:ac:04:7f:65:e7:82:ba:69:f9:29:dc:cc:2d:4d:
                    47:4c:e6:72:05:3c:d8:60:0d:f5:6d:07:86:cc:96:
                    f2:3a:ee:23:58:ab:8f:28:3e:5f:4d:08:31:8f:19:
                    48:9c:5c:ca:71:f8:d5:df:96:60:5c:c5:40:90:fc:
                    8c:0b:b4:66:9f:1c:71:88:42:1f:9e:6d:ca:30:82:
                    3b:88:23:2e:b0:4d:d9:b6:21:ae:9d:c7:05:52:4c:
                    7f:b5:aa:f6:ca:16:8e:08:fb:58:38:1e:cc:82:9b:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:4E:94:46:9D:DB:CD:E7:FB:C5:15:7A:88:35:A5:22:21:BC:07
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-nBOlEad283n-8UVeog1pSIhvAc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:c8:a2:1d:75:c7:46:8b:83:c7:1d:8f:08:9c:85:0d:05:
         4b:a7:84:9a:eb:7c:a7:a5:3d:70:60:33:b8:57:4c:e5:01:99:
         12:90:35:c7:37:80:d2:49:00:ca:34:d4:9b:52:3a:7d:f5:35:
         ba:0b:79:03:82:03:31:7b:49:62:10:a5:bb:5c:57:f3:d6:15:
         5d:d0:ac:92:3a:9e:58:f3:9c:af:00:ef:18:94:da:f7:b6:36:
         f6:cf:f6:63:47:07:c2:36:13:47:2c:07:b9:6a:cf:2c:b2:5a:
         05:8e:3a:05:28:07:ac:65:3c:ba:c7:41:4b:bb:8b:c4:03:95:
         9a:c6:9c:45:d8:87:e5:98:77:9c:73:33:0d:84:dd:34:f9:40:
         2d:d5:e3:a9:80:f2:d6:95:fa:4f:32:f3:ef:2b:e9:fc:46:45:
         bf:07:af:a1:6b:49:18:0e:83:a9:91:f8:5d:92:d5:b6:9f:63:
         d9:00:d4:49:8d:c7:ab:b2:b3:f3:16:d4:ab:0b:7c:ff:0c:8b:
         52:1b:02:c1:ba:a0:e3:0e:6d:ce:5c:ca:ba:f9:e5:ef:f6:ca:
         45:91:ee:cc:7a:79:05:45:81:14:b2:bd:1e:e0:91:eb:09:d4:
         e4:0d:f2:d9:c4:e9:7b:57:9b:7f:37:97:04:50:65:e9:93:1a:
         c2:2c:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:35 2026 by rpki-client