Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/4x2hfR1EuwJkWP6WQgBcdqf7z_g.roa
File:                     4x2hfR1EuwJkWP6WQgBcdqf7z_g.roa (raw, json)
Hash identifier:          F6uSdLbzDYY7W6PaOyr23bTicdCdfB2CuwxDY3noLQY=
Subject key identifier:   E3:1D:A1:7D:1D:44:BB:02:64:58:FE:96:42:00:5C:76:A7:FB:CF:F8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0671
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4x2hfR1EuwJkWP6WQgBcdqf7z_g.roa
Signing time:             Tue 31 Mar 2026 07:27:51 +0000
ROA not before:           Tue 31 Mar 2026 07:27:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        112.140.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E31DA17D1D44BB026458FE9642005C76A7FBCFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:00:e4:f0:00:6e:b1:cd:71:b6:03:03:66:
                    ad:4c:91:b3:6d:a7:34:9e:6e:b2:fb:54:38:fd:69:
                    c9:8a:8c:4c:fd:22:e0:e0:2f:6c:92:b7:d0:0a:2c:
                    5e:e5:c4:c5:8b:d4:bc:51:42:ec:c0:c8:be:73:01:
                    b9:33:1b:8a:98:0f:ba:ad:82:3d:dd:e7:fa:c5:23:
                    3f:1a:b8:49:06:25:5d:7d:37:64:49:18:35:23:47:
                    1d:0c:86:bc:eb:6e:07:cf:e2:09:fe:81:35:38:97:
                    91:b6:1a:80:3a:a4:79:c5:fb:e2:28:f5:b2:59:85:
                    5c:12:90:ef:b4:b2:f8:ee:dc:30:ea:3d:0e:1f:9e:
                    5c:f5:14:18:aa:b7:8d:53:6b:ba:6f:e7:d9:f6:ff:
                    61:72:24:f6:fd:67:10:8e:8f:00:0d:eb:40:8f:08:
                    fa:14:c6:94:f9:2c:49:8e:60:b1:8b:a5:37:cd:3e:
                    49:44:6f:82:c5:63:25:0c:7c:8b:9c:93:56:33:cf:
                    a8:e6:ae:ad:45:31:5d:6d:d6:13:f7:da:5a:cd:81:
                    16:1f:65:24:b3:51:f4:7a:74:8c:0b:d9:21:ad:71:
                    e3:a8:46:88:a7:b2:fa:69:25:d4:04:91:14:32:15:
                    03:f0:18:c3:80:a5:f8:53:e0:28:ef:b3:d8:cf:5a:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1D:A1:7D:1D:44:BB:02:64:58:FE:96:42:00:5C:76:A7:FB:CF:F8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4x2hfR1EuwJkWP6WQgBcdqf7z_g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:4f:0a:85:3a:5e:f8:ac:d7:b2:f0:2b:38:3a:f9:89:f8:f8:
         b8:ed:64:bc:c6:9a:83:2b:59:54:23:29:4c:1e:6e:9e:4a:ac:
         df:47:73:fb:d0:d3:06:33:ef:77:c4:a1:ce:d2:09:c9:5b:56:
         3a:9f:07:ca:5d:49:f9:e8:52:72:12:24:93:23:88:1b:f6:51:
         1e:cb:cb:fb:66:f7:e7:20:14:da:31:ec:6a:21:37:36:26:c0:
         f8:7c:fa:35:49:15:7b:fc:52:0b:a6:c1:a7:96:8f:db:80:4c:
         65:bb:01:c0:fd:c3:2d:ed:7f:65:ab:0b:40:9c:c3:dd:dd:10:
         96:8a:e2:52:d0:02:af:20:5e:67:e9:aa:b2:07:99:cb:f2:4c:
         bb:b2:f8:3e:20:6c:e6:59:95:79:82:14:e5:4a:bf:ee:88:6e:
         f1:15:ad:94:fa:e7:6e:7e:3e:3d:02:f3:6f:df:4a:51:77:f2:
         bb:bd:7a:5c:14:54:f9:ae:d4:f6:9c:36:34:dc:a7:c1:42:82:
         6e:d3:2a:e5:3d:45:39:e0:21:a4:3f:73:c6:b3:ae:fc:50:13:
         8b:74:8e:86:0b:ef:e1:2c:f9:2d:21:3e:a1:7e:79:3b:20:e9:
         6f:87:70:03:7f:19:34:53:f3:64:58:21:a0:8e:57:9b:a8:16:
         d9:d1:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:34 2026 by rpki-client