Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/AIr_W6AnZQHqFSFU3c9uBrrMoQs.roa
File:                     AIr_W6AnZQHqFSFU3c9uBrrMoQs.roa (raw, json)
Hash identifier:          lweLbHpj5P1olWVnB9J73TJ2WFg9/fzVicaHcoOm4sw=
Subject key identifier:   00:8A:FF:5B:A0:27:65:01:EA:15:21:54:DD:CF:6E:06:BA:CC:A1:0B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       065B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AIr_W6AnZQHqFSFU3c9uBrrMoQs.roa
Signing time:             Tue 31 Mar 2026 07:27:40 +0000
ROA not before:           Tue 31 Mar 2026 07:27:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        42.127.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=008AFF5BA0276501EA152154DDCF6E06BACCA10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:c7:85:d9:4d:09:05:7e:ba:8d:37:41:0d:
                    aa:11:37:ae:6d:90:9b:c5:3a:fc:53:04:87:82:54:
                    f5:7b:68:61:7e:95:78:11:51:85:24:31:fe:11:e7:
                    49:1e:bf:50:66:74:08:8c:67:25:13:d5:bf:80:5f:
                    82:bd:1a:79:33:30:cb:b5:b7:a5:49:98:53:3f:f8:
                    18:fc:e3:df:8c:20:25:75:c4:29:26:53:52:d8:91:
                    e7:ca:08:c6:96:0b:06:52:99:1e:d0:97:da:76:78:
                    20:13:9a:54:98:9b:ff:db:1c:46:55:dd:52:70:47:
                    f2:1f:10:99:b3:cf:a8:c8:0b:45:bd:af:ed:ec:d8:
                    c9:18:9c:f1:c5:aa:f5:64:62:14:aa:6b:5b:b0:18:
                    0c:4f:7c:b9:91:c0:1b:8b:a2:88:1a:2b:2c:2d:ce:
                    ba:b2:e5:12:ce:7d:68:4d:f8:97:c6:cf:15:01:46:
                    5a:ce:a6:8b:7c:21:0c:4f:26:30:5a:11:95:d9:1b:
                    79:c2:f5:27:8f:cd:14:bd:44:c8:f2:6f:76:f5:e7:
                    30:b3:0c:70:d5:72:4f:db:7e:0b:68:67:d4:92:22:
                    a8:5f:5a:9c:b9:18:a7:c2:9e:22:76:8f:41:77:27:
                    e0:9c:f2:0f:5a:90:77:e8:32:92:50:12:35:3b:24:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:FF:5B:A0:27:65:01:EA:15:21:54:DD:CF:6E:06:BA:CC:A1:0B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AIr_W6AnZQHqFSFU3c9uBrrMoQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:4f:84:52:b5:ca:00:75:1e:06:76:74:99:3b:59:ab:d7:c8:
         78:41:17:03:c5:83:8e:d6:ec:f8:ca:eb:ad:e4:10:b1:d5:cf:
         53:a9:43:d9:37:69:40:de:91:f1:55:01:b3:3e:51:61:aa:8a:
         e8:e8:c3:b6:79:8c:1e:15:56:33:a9:10:14:76:c2:99:48:1e:
         dd:f3:45:d1:d2:02:24:8e:38:a9:86:54:d8:b3:3e:f0:49:48:
         10:c2:92:3e:63:7f:87:dc:45:ba:8e:f9:d3:bb:44:67:c4:cc:
         c4:0f:22:e1:b9:de:db:39:38:83:bb:3f:7a:3f:02:11:cf:0a:
         5a:11:6b:f3:15:32:a9:5e:04:a9:55:94:ca:49:f4:85:21:74:
         73:5c:91:61:26:6a:0f:a1:e8:4f:22:8d:70:33:43:36:2d:67:
         bc:93:35:cb:8b:db:89:28:e8:d2:ff:76:a5:ed:47:32:af:05:
         50:f9:b6:4b:b2:d7:ee:7b:d3:a4:5f:ed:2e:ee:39:34:4f:e0:
         78:ae:5b:a3:c3:84:1d:c0:23:c1:e7:7e:a3:6c:db:95:4c:7e:
         ea:2c:16:f0:ad:4f:95:4a:f4:02:b8:b3:28:cd:8a:54:73:dd:
         10:ae:31:7d:2f:55:a7:04:4a:1f:63:a2:5f:75:0a:75:53:a3:
         5c:20:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:41 2026 by rpki-client