Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/30YI_czszNHI9PQ-TVCTH3iOdLY.roa
File:                     30YI_czszNHI9PQ-TVCTH3iOdLY.roa (raw, json)
Hash identifier:          obbguTA9jEeDpMWogw+itCyWW7jIFyYCh59+4KruX5c=
Subject key identifier:   DF:46:08:FD:CC:EC:CC:D1:C8:F4:F4:3E:4D:50:93:1F:78:8E:74:B6
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06B2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/30YI_czszNHI9PQ-TVCTH3iOdLY.roa
Signing time:             Tue 31 Mar 2026 07:28:26 +0000
ROA not before:           Tue 31 Mar 2026 07:28:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF4608FDCCECCCD1C8F4F43E4D50931F788E74B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:fb:d0:5d:16:7c:18:48:8f:ca:40:ed:ec:
                    2c:a5:e1:51:14:66:65:5b:d5:57:5b:d7:e6:db:d9:
                    04:ff:20:66:1f:b7:a4:0e:fa:89:40:b4:57:8a:e2:
                    70:ef:2f:21:98:08:c7:9e:b2:46:45:b7:10:02:8b:
                    08:c0:d7:4e:9c:b9:70:b7:4e:c2:0e:ac:0e:c0:a3:
                    66:eb:ad:da:3b:4e:7b:9e:ce:25:17:ec:30:39:51:
                    91:97:cd:4c:6c:21:8a:0f:6d:32:9b:08:09:bc:6c:
                    c0:97:4c:4e:fc:ce:3c:5d:b4:58:bc:68:2f:8b:f9:
                    96:dc:61:61:57:91:82:4f:ff:c2:ec:16:e8:ee:48:
                    d4:66:f8:5a:f9:af:d8:f2:d0:b4:00:e2:62:65:1e:
                    2e:0f:5b:ec:a9:7c:7e:f7:15:df:28:81:40:53:ee:
                    77:d8:dc:bf:d3:37:fc:e3:51:49:c8:12:65:7d:78:
                    eb:4e:03:f1:0c:b2:44:6d:cc:24:49:f3:7c:8f:20:
                    b9:43:25:a6:8f:0a:5f:48:6e:a9:9c:7b:91:26:66:
                    2a:43:cd:c4:4a:e8:02:3b:5a:ea:eb:76:a0:fe:ef:
                    f5:47:81:61:91:82:15:d8:1f:ed:8c:2f:be:19:db:
                    97:02:a3:8b:1d:f7:1e:ea:e0:89:8f:8b:f7:8c:a0:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:08:FD:CC:EC:CC:D1:C8:F4:F4:3E:4D:50:93:1F:78:8E:74:B6
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/30YI_czszNHI9PQ-TVCTH3iOdLY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:d6:e0:f4:f0:42:5f:a4:62:5a:89:bf:ba:76:70:ad:51:
         c8:34:de:ac:50:b1:5a:13:52:50:04:35:e3:7b:ef:f2:3a:e9:
         97:4d:dc:62:84:c9:ca:3f:c2:ac:96:53:06:22:2e:92:ae:81:
         a5:b1:5d:c5:e5:96:e4:ca:ad:54:bc:c7:06:12:10:13:da:25:
         33:ec:2c:ff:26:be:66:61:d5:16:dd:3b:19:ad:94:02:c8:c1:
         60:e1:b4:14:3c:01:8c:d8:ac:3a:92:0f:7a:bd:b5:34:9b:dc:
         50:1a:1d:68:a0:76:a0:63:b7:56:fa:a6:5a:87:e6:39:a2:61:
         df:96:17:fc:86:8e:86:42:ef:58:86:5a:b1:ba:2f:89:e3:39:
         f8:6f:e4:48:c1:66:79:d0:39:9a:1a:1b:00:78:39:11:c9:e5:
         75:f2:27:59:4b:a8:b9:96:0c:3d:27:6c:f4:a1:3e:06:03:23:
         ef:3e:58:ba:8e:fe:60:48:1d:39:72:05:d6:74:2a:0e:fe:25:
         c4:b6:96:74:09:19:75:da:68:ef:e1:3c:6b:a9:7e:ab:0e:ed:
         53:52:08:4c:99:7e:26:e7:e2:c2:28:9f:37:22:d7:aa:ff:56:
         66:be:91:9d:6b:ef:87:56:77:a9:f9:74:cc:44:10:bc:2b:5d:
         af:c6:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:55 2026 by rpki-client