Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/9_G4poIvVmlIuTBKLtiRYIOE0ow.roa
File:                     9_G4poIvVmlIuTBKLtiRYIOE0ow.roa (raw, json)
Hash identifier:          iPXNsVCdsHTHZR4fN2Csvtqapnctxgk9+p8/ML+rCGQ=
Subject key identifier:   F7:F1:B8:A6:82:2F:56:69:48:B9:30:4A:2E:D8:91:60:83:84:D2:8C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       066B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9_G4poIvVmlIuTBKLtiRYIOE0ow.roa
Signing time:             Tue 31 Mar 2026 07:27:49 +0000
ROA not before:           Tue 31 Mar 2026 07:27:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        116.68.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643 (0x66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F7F1B8A6822F566948B9304A2ED891608384D28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:fd:eb:e1:1a:17:19:98:2a:e8:2d:09:9b:
                    4f:ac:a4:91:ec:dc:e1:bd:86:c4:92:75:9c:a3:d2:
                    2d:96:d7:cc:c1:93:42:46:b1:a7:fc:7e:0f:a8:e1:
                    d4:36:29:81:29:39:d5:2f:38:dc:35:b1:70:b5:94:
                    ad:64:87:ec:b0:ee:de:37:91:1a:97:34:42:85:a9:
                    e2:c2:5f:b7:c2:3b:82:f1:38:dc:53:4d:9f:f7:7a:
                    5a:6b:6b:8b:c6:cc:bc:c1:80:60:b4:ef:22:a0:ac:
                    aa:74:4e:e5:48:4a:50:c8:63:95:e2:5a:00:5f:db:
                    42:f7:4d:d7:38:d3:59:43:52:6f:56:2d:0b:a5:c8:
                    53:45:14:8d:c2:49:57:b3:15:fe:05:7d:ed:06:55:
                    f7:1f:01:86:be:5c:f9:da:0f:eb:59:b3:fa:1c:89:
                    b7:44:0f:4d:42:a8:1f:57:e9:bc:b5:71:20:2d:a8:
                    fb:23:e9:e6:5c:fc:fe:4b:6f:7a:d0:0b:28:59:a0:
                    97:86:74:8f:52:84:1a:63:8d:b4:85:4e:22:8a:16:
                    9a:02:d9:bc:dc:b7:44:71:80:76:d2:17:cc:17:8c:
                    b2:9f:53:54:34:a2:3c:17:92:b0:7c:be:29:96:6d:
                    8d:fd:19:d6:3b:d3:ed:46:5a:f4:b5:ee:6c:15:53:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F1:B8:A6:82:2F:56:69:48:B9:30:4A:2E:D8:91:60:83:84:D2:8C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9_G4poIvVmlIuTBKLtiRYIOE0ow.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:01:76:f9:3b:18:37:e1:ed:7e:f0:b6:43:5f:ce:da:00:d0:
         92:21:02:35:3c:b4:d2:1b:1a:fe:e8:4b:df:68:0b:f3:96:1c:
         7f:6d:2f:f3:37:a7:9c:38:31:f2:b0:bd:40:d4:55:8a:62:65:
         f0:43:6c:9a:18:e1:4e:79:44:4f:07:67:4d:71:96:82:8b:f1:
         7f:9f:93:4e:4d:95:98:f5:f5:14:52:86:97:3c:39:cd:4a:75:
         74:66:1d:08:bd:63:ea:c9:0f:3d:4e:ec:54:c0:46:1a:1a:ee:
         d7:92:29:d6:1a:db:54:06:2a:9e:af:fa:65:9d:54:c5:d4:b5:
         a9:f7:de:8b:9b:aa:5b:fc:ff:1e:00:73:a1:c0:c3:93:a6:ee:
         53:43:a7:a3:53:e5:a8:82:f6:08:e9:81:e5:dc:1d:34:f5:a2:
         f1:4b:2e:b4:d8:e7:b8:bd:fd:5c:4f:72:43:c0:70:d3:06:c1:
         81:b6:8c:65:d8:2c:f5:97:bc:89:e8:1d:92:9f:1f:9a:17:25:
         4d:f1:b2:5a:7e:f0:d9:a9:66:4b:45:3f:16:01:34:93:50:a0:
         da:e1:21:54:16:aa:b9:9c:56:88:4f:6d:18:ec:40:78:a8:0a:
         3a:07:d1:81:31:16:ce:53:de:a5:e5:5b:fb:32:e2:e4:b7:73:
         7e:98:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:43 2026 by rpki-client