Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6O9p14SkIRWNFVoTN3YA8bIiYQY.roa
File:                     6O9p14SkIRWNFVoTN3YA8bIiYQY.roa (raw, json)
Hash identifier:          /lGKMZHs2bmuwQAJDPfoVpN9WamDdWppw4WGm6Vk9jA=
Subject key identifier:   E8:EF:69:D7:84:A4:21:15:8D:15:5A:13:37:76:00:F1:B2:22:61:06
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06AF
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6O9p14SkIRWNFVoTN3YA8bIiYQY.roa
Signing time:             Tue 31 Mar 2026 07:28:24 +0000
ROA not before:           Tue 31 Mar 2026 07:28:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        61.211.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E8EF69D784A421158D155A13377600F1B2226106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:80:33:60:65:2b:b5:b0:0e:0b:64:d1:97:
                    79:07:50:61:46:7d:59:c0:e8:4a:f4:d2:32:d9:33:
                    32:d1:35:23:e1:04:2d:f6:6f:44:16:54:66:a0:79:
                    85:47:e6:1f:5e:79:46:f6:5d:43:9c:16:9a:f6:f1:
                    6f:36:1e:c9:7b:8c:ce:01:c1:1f:be:0c:49:a2:8b:
                    0e:e3:2b:82:da:f3:a3:83:a4:ee:1f:27:57:23:64:
                    5b:10:93:2e:0a:c2:c7:fc:ce:f5:95:d8:3a:9b:ca:
                    1d:56:d2:8b:1c:74:48:d2:0f:41:db:e3:73:e1:13:
                    16:29:b2:11:93:31:15:d3:1c:44:b0:5e:5a:6a:5b:
                    b7:7b:d5:e5:9e:23:8f:47:54:ae:b8:b8:72:95:f2:
                    f7:88:fc:24:be:e8:22:78:e5:e8:0e:dd:bd:ba:3d:
                    48:4f:1b:5e:e3:42:76:d6:1a:92:90:ba:8c:00:2d:
                    2f:0d:e7:86:66:24:66:2e:2e:80:ac:e1:8c:2e:1f:
                    05:07:2b:44:23:03:ac:86:82:2f:7c:05:30:8d:eb:
                    1e:5b:3e:28:8c:35:ef:d1:ae:42:ce:54:cd:1f:35:
                    ff:1f:29:97:00:b6:5e:dc:c2:64:6a:dc:c3:bf:35:
                    f7:5e:0a:76:c6:6a:4a:9b:48:79:38:e3:b2:30:dc:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:69:D7:84:A4:21:15:8D:15:5A:13:37:76:00:F1:B2:22:61:06
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6O9p14SkIRWNFVoTN3YA8bIiYQY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:43:d0:41:9a:82:bb:cb:a7:84:58:3c:12:c1:fc:ca:36:6e:
         1a:0d:e0:e3:4d:05:49:8d:c5:77:57:f4:ae:a8:45:95:c7:56:
         be:1e:f4:a3:97:d6:76:28:9b:74:57:8a:82:0a:1d:57:13:db:
         34:76:a6:61:61:39:42:3b:ab:95:69:57:a3:67:4d:10:40:ed:
         91:b8:f0:88:3e:a3:d1:d4:2d:1c:ab:a1:63:1f:d0:96:5f:3e:
         1b:6b:ee:54:f8:3c:36:86:ce:6b:02:38:80:8f:ed:3a:f2:fe:
         6e:a4:75:49:9a:53:89:d3:94:d2:2b:ab:3d:3e:37:94:0b:b6:
         47:8f:eb:59:73:27:a7:12:fe:26:b8:0d:b3:b7:1b:51:76:4f:
         f4:b4:c3:d4:87:5b:70:a5:53:60:fe:4b:b2:2d:d5:b9:1c:72:
         13:d1:72:d6:b1:24:ad:26:32:ca:18:ee:73:65:71:3a:13:12:
         57:f4:82:c1:a2:52:45:20:60:c8:dc:55:a4:22:0f:ac:67:f7:
         06:35:7e:2d:0c:b3:21:7a:97:ec:6b:32:78:da:a0:e4:9a:41:
         b3:90:0a:9c:e9:f2:da:b6:4c:2f:f7:81:22:e7:24:b0:22:f4:
         8a:72:59:9c:69:b3:1d:9c:1a:0f:b8:2e:50:e6:16:9f:cb:44:
         53:0d:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:32:53 2026 by rpki-client