Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-pCgu-TgU_yBo2JZFpXheeBme78.roa
File:                     -pCgu-TgU_yBo2JZFpXheeBme78.roa (raw, json)
Hash identifier:          HbEUziJBlSZWt9BwxqxestcaHu7Ti4LF67r9nZnRf+4=
Subject key identifier:   FA:90:A0:BB:E4:E0:53:FC:81:A3:62:59:16:95:E1:79:E0:66:7B:BF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       068D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-pCgu-TgU_yBo2JZFpXheeBme78.roa
Signing time:             Tue 31 Mar 2026 07:28:08 +0000
ROA not before:           Tue 31 Mar 2026 07:28:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FA90A0BBE4E053FC81A362591695E179E0667BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:90:07:25:7e:97:af:5e:9a:ec:20:83:bb:47:
                    58:e7:12:7c:68:f1:db:17:50:b3:ad:2e:f9:72:88:
                    1f:c9:bd:8e:55:65:ac:42:5b:84:c2:82:10:56:2d:
                    e8:c3:7a:37:08:7e:aa:c5:f5:b1:d7:b6:4e:0c:e1:
                    79:d0:d1:e2:09:9f:3c:c2:f7:35:5b:b6:8a:9d:3a:
                    b8:b2:96:6d:25:74:b7:30:97:fa:5c:ac:85:90:d8:
                    8a:c0:8e:ec:26:2c:2c:74:fd:b1:d0:f0:e4:3b:4c:
                    c2:00:71:db:9c:30:44:28:3a:60:f2:e6:3f:6a:01:
                    62:7d:80:53:91:48:55:60:82:b0:95:af:be:06:44:
                    0d:b9:21:a8:26:4a:02:e3:86:9f:6b:37:e7:df:8c:
                    64:df:62:43:f6:44:ee:01:bf:60:99:9f:8d:dc:f3:
                    92:33:62:f8:25:08:ed:bb:c8:be:21:f7:59:78:ae:
                    f1:91:b8:ec:21:bc:8b:19:58:2d:61:4e:5f:dd:7f:
                    6c:f0:5e:41:4d:6f:ea:13:d2:0d:6f:6d:8a:cb:96:
                    48:b3:41:8d:53:09:f5:bd:42:6e:af:c7:38:70:df:
                    46:fb:61:5e:1d:58:bc:76:0c:a2:78:f2:c8:da:50:
                    81:aa:9d:40:83:79:07:52:94:ee:6a:94:b5:b3:db:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:90:A0:BB:E4:E0:53:FC:81:A3:62:59:16:95:E1:79:E0:66:7B:BF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-pCgu-TgU_yBo2JZFpXheeBme78.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:d8:7f:94:95:5f:5d:91:b7:9d:8c:18:d5:4a:5a:ef:7c:f3:
         91:92:20:69:ec:14:1a:81:74:f8:4c:76:ba:93:cd:6a:62:cc:
         c0:b7:8a:1d:97:67:4c:cf:b4:ff:38:7f:bf:e7:37:ce:ae:0f:
         cc:df:83:2d:de:51:ab:ee:75:14:ce:ae:63:c8:1a:e1:6d:a5:
         7d:df:7a:1a:85:8e:90:de:80:d1:c0:3c:f2:17:11:1d:b4:6c:
         00:35:5a:1c:ae:27:f8:85:80:31:01:c0:85:31:69:5d:d1:e9:
         eb:28:1f:42:2e:8b:02:d1:bf:32:ca:b9:50:e3:4a:5c:be:86:
         fc:60:36:1f:61:ff:e9:ab:67:df:c7:40:62:1e:53:1f:77:a6:
         70:d6:52:5b:38:51:fe:c5:ee:0c:b4:a0:ad:ce:f4:f1:57:1b:
         24:5b:25:d6:99:bd:8c:25:a1:44:ad:58:59:a6:41:c6:53:14:
         8b:37:30:c8:37:79:73:36:3c:8d:5f:12:10:47:be:d8:84:99:
         11:e4:d7:66:ce:58:fc:9a:2b:83:ec:f9:de:b6:69:01:b0:8a:
         e7:38:ce:bb:f8:1f:99:83:f0:7d:61:ee:92:80:3b:2b:25:e0:
         6f:42:fb:15:c0:5c:8a:3a:3a:3a:d0:c1:07:c3:b4:a8:c4:53:
         83:7f:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:19 2026 by rpki-client