Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/B19EqVZGmftnAsYWzbXrhlv7Ed0.roa
File:                     B19EqVZGmftnAsYWzbXrhlv7Ed0.roa (raw, json)
Hash identifier:          uiOvUob3m4wVkhP8JgLL2hfRBEAOytFmzsD8+SyDI4Q=
Subject key identifier:   07:5F:44:A9:56:46:99:FB:67:02:C6:16:CD:B5:EB:86:5B:FB:11:DD
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       064F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/B19EqVZGmftnAsYWzbXrhlv7Ed0.roa
Signing time:             Tue 31 Mar 2026 07:27:35 +0000
ROA not before:           Tue 31 Mar 2026 07:27:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=075F44A9564699FB6702C616CDB5EB865BFB11DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:b0:bc:6c:89:51:7a:67:ab:34:96:a2:24:
                    59:1e:1c:32:dc:a6:0a:53:bc:7a:52:e9:ae:bd:f3:
                    81:28:0d:9e:20:76:81:bf:64:01:ce:e5:3e:9e:c5:
                    7b:87:17:26:24:16:08:a2:10:c6:d8:7b:46:0d:6d:
                    20:97:6f:9e:d9:6d:cb:e7:75:1b:f7:c8:67:a6:41:
                    f9:ff:ac:2f:64:c0:b8:a2:1e:97:1c:93:01:b0:1c:
                    72:e6:23:9b:04:60:ad:7a:46:f7:12:5c:57:3e:83:
                    8b:23:c9:06:c6:7d:bf:da:0d:1f:c8:8e:22:6e:c1:
                    ca:27:4f:13:38:e8:4d:6f:fc:59:aa:41:46:24:60:
                    f7:74:6c:9c:59:b0:24:38:d3:9f:36:6c:30:ea:6a:
                    ea:3e:4f:3a:3a:f5:71:46:57:b5:7e:b6:4d:a6:29:
                    f0:1f:8d:da:72:95:5e:bc:56:fa:9f:3d:80:eb:12:
                    c0:62:34:da:00:c7:21:78:5e:7c:74:91:d1:53:51:
                    6d:00:4c:58:2f:c0:ff:5b:fa:4a:d4:31:16:51:45:
                    44:b3:d0:29:75:a3:9c:81:fc:17:c8:23:e4:29:25:
                    4b:01:6c:ce:ea:61:64:46:39:ca:9c:9b:74:a7:13:
                    be:92:9a:1a:70:0a:d8:71:c0:fe:1a:a8:f2:bc:7f:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5F:44:A9:56:46:99:FB:67:02:C6:16:CD:B5:EB:86:5B:FB:11:DD
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/B19EqVZGmftnAsYWzbXrhlv7Ed0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b6:24:e8:a6:8d:aa:89:44:46:0a:d1:ee:44:af:6b:3f:6c:56:
         96:29:7a:7f:ab:e9:48:5c:13:19:f8:01:76:f1:7b:66:9e:86:
         37:6c:45:76:e9:8b:ba:19:ef:b1:cc:6b:2c:b1:85:fc:dd:8a:
         df:76:e5:67:e2:29:05:80:4d:ab:00:4e:90:e9:07:b4:6a:04:
         c1:69:09:8d:94:15:9f:c3:fe:21:a8:95:9c:1f:d6:97:e9:8b:
         5d:0d:fa:8b:a1:4c:02:b4:44:c9:88:39:56:c6:44:49:35:81:
         43:25:55:ff:82:40:7d:49:91:29:1f:b0:5c:41:21:e1:9f:d9:
         49:4d:bc:c2:e8:b6:a7:10:88:55:fc:53:9b:85:fa:78:23:66:
         c2:f3:08:c0:34:f9:4e:af:b2:c5:d5:3a:e6:8b:5b:16:69:10:
         a3:8b:06:e8:bf:5b:7d:e2:f1:22:85:58:ec:51:2c:03:bf:e9:
         3e:fe:01:82:c2:88:7b:b6:b8:a4:2c:9a:3f:1c:15:58:00:30:
         f0:39:b6:97:8d:e7:b5:e9:d3:08:4c:26:52:9c:a8:82:85:0d:
         88:e6:e7:ba:d2:da:87:98:0f:1e:4f:db:98:e9:f1:fb:48:75:
         69:08:2d:90:bc:6b:95:39:cd:4d:16:80:a0:68:0b:47:ef:7f:
         77:0d:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:31 2026 by rpki-client