Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/2WRb0j3nHTQCoPhnO_jrDHSQw3s.roa
File:                     2WRb0j3nHTQCoPhnO_jrDHSQw3s.roa (raw, json)
Hash identifier:          sYdWJjd67fexxrkKkawVBF9aNgICdMVlPNYsDF9/LME=
Subject key identifier:   D9:64:5B:D2:3D:E7:1D:34:02:A0:F8:67:3B:F8:EB:0C:74:90:C3:7B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06BD
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2WRb0j3nHTQCoPhnO_jrDHSQw3s.roa
Signing time:             Tue 31 Mar 2026 07:28:31 +0000
ROA not before:           Tue 31 Mar 2026 07:28:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        218.219.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D9645BD23DE71D3402A0F8673BF8EB0C7490C37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:6d:e3:36:c0:5e:e8:5a:a6:8e:35:3d:28:
                    d3:e3:21:ba:f6:1d:e4:7c:94:82:eb:44:89:9c:83:
                    35:f7:b4:7d:8e:e2:24:73:85:ee:fa:05:ac:02:82:
                    f0:1e:fd:2f:1d:e7:30:e0:0f:72:fa:ea:21:34:8b:
                    90:57:4d:5d:c1:19:22:75:ea:5c:be:b0:e1:8b:e6:
                    37:48:e2:2d:1a:e4:98:1d:c9:ad:81:67:f8:83:97:
                    7e:06:e3:bd:6a:dd:91:2b:46:d3:03:b7:d7:ba:f0:
                    a0:07:64:57:e7:69:8a:34:b7:09:52:c7:42:f9:8c:
                    7b:1f:01:3c:a4:04:9f:8d:bc:73:6d:aa:a4:18:52:
                    b5:8d:4c:6f:06:3a:8d:cb:bd:ac:21:6a:d9:af:bf:
                    4c:c2:d2:0a:93:be:8f:fa:ef:58:23:a3:60:1d:e9:
                    3b:7c:92:37:29:2f:aa:f2:e4:f9:8f:8c:e7:6a:cd:
                    36:f4:e0:1d:ae:e9:d2:63:a2:2c:2a:d3:da:80:40:
                    60:67:ad:34:51:e1:e4:ba:8c:e0:f6:a9:de:8b:83:
                    a2:69:cf:da:62:cc:f9:1e:a7:83:7a:20:62:d4:b1:
                    96:c8:83:91:e6:8c:ec:75:77:3f:13:0f:cb:1a:f1:
                    a4:05:bf:d3:93:0d:2a:bd:15:73:0a:e6:ca:6e:1e:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:64:5B:D2:3D:E7:1D:34:02:A0:F8:67:3B:F8:EB:0C:74:90:C3:7B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2WRb0j3nHTQCoPhnO_jrDHSQw3s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:88:d0:af:a2:e1:d5:7f:ec:54:e6:76:c4:8f:1b:9d:a4:d8:
         56:cc:33:56:fd:c0:f8:9a:ec:9a:e6:cd:50:58:54:bb:ef:25:
         0b:b2:1d:82:b6:e6:4e:b5:d0:92:01:0e:c7:85:f8:3e:d6:3a:
         13:66:4a:d9:e7:90:38:c3:7c:75:39:78:0a:bd:b8:b6:ed:6d:
         45:75:50:d5:07:9f:66:f3:a0:3e:ec:27:1f:34:15:4a:5f:e5:
         31:47:46:79:af:8d:3c:d4:24:b8:f2:53:9b:a7:d7:32:29:c5:
         0f:e0:53:8a:d4:bb:e3:3b:18:46:4f:8c:ad:3e:af:ea:eb:f4:
         74:1a:d9:16:b2:5a:0e:27:3b:b4:43:77:82:58:d4:8d:65:52:
         05:11:10:5c:f2:88:e9:3a:3d:c6:a6:ee:c9:15:36:a0:0c:18:
         ae:fe:5f:93:e5:a9:52:41:48:77:6f:9d:49:83:dc:d5:f1:2d:
         10:a1:3d:3f:66:fe:de:2c:19:65:08:cd:3e:32:48:a8:ac:92:
         56:34:1f:9e:d8:39:86:af:30:9a:3c:e0:2b:aa:3e:73:ad:68:
         7b:6f:5c:56:6b:4d:fd:1e:e9:1f:43:d2:d0:3d:59:05:97:06:
         22:50:af:79:df:46:9e:c4:13:f7:53:ea:98:b1:68:b4:6e:17:
         f6:30:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:10 2026 by rpki-client