Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/BRzdTMArs1BNZFbm0mH60qyrKtM.roa
File:                     BRzdTMArs1BNZFbm0mH60qyrKtM.roa (raw, json)
Hash identifier:          WmlBGNAamBs2OEQL3iVWCzQZimmDnzjz2CteCV3sxzM=
Subject key identifier:   05:1C:DD:4C:C0:2B:B3:50:4D:64:56:E6:D2:61:FA:D2:AC:AB:2A:D3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0669
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BRzdTMArs1BNZFbm0mH60qyrKtM.roa
Signing time:             Tue 31 Mar 2026 07:27:48 +0000
ROA not before:           Tue 31 Mar 2026 07:27:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        111.67.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=051CDD4CC02BB3504D6456E6D261FAD2ACAB2AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:e4:0c:9b:f0:1b:67:67:da:62:45:f3:f4:
                    d5:25:ab:2c:a4:a2:15:ba:fc:e2:9a:d4:77:07:64:
                    d0:49:1a:a7:17:db:53:f0:48:77:ac:69:1d:b2:7b:
                    c5:fb:6e:fa:ec:77:b3:41:e7:d8:5c:25:a7:7d:a7:
                    75:87:70:be:7a:c7:81:20:f1:30:5c:00:70:09:80:
                    0d:d6:a3:68:05:c2:6b:55:a7:c1:1c:58:80:1d:51:
                    c4:2c:e7:f3:bc:c0:c0:b5:96:bf:8f:80:42:fd:23:
                    f0:6a:0c:b9:22:0b:9b:fa:7e:ce:7a:02:68:92:c5:
                    35:be:6b:78:a3:9b:fb:0f:5b:5e:52:6a:e5:14:93:
                    1c:8a:bc:02:76:1a:26:4d:8d:94:64:ee:12:79:07:
                    80:b3:3b:3a:66:99:ab:db:c5:a3:cf:a6:ca:45:b5:
                    94:ed:c5:f6:ba:23:de:21:e8:5e:36:d9:fd:eb:20:
                    e3:ab:0d:6a:83:e4:81:0c:60:27:08:ac:fd:28:2a:
                    6d:67:02:e7:69:dc:d2:50:9a:8b:fc:a1:fa:95:d9:
                    ee:b9:70:f2:48:cb:70:73:65:c4:61:c4:49:67:ac:
                    b2:dc:80:63:a0:04:5d:f7:57:e7:76:08:04:d2:76:
                    7e:22:c0:8b:f8:5a:86:89:81:cc:d9:8a:d1:7e:14:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:DD:4C:C0:2B:B3:50:4D:64:56:E6:D2:61:FA:D2:AC:AB:2A:D3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BRzdTMArs1BNZFbm0mH60qyrKtM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:e3:62:1f:2b:05:06:94:b3:be:27:87:8a:ac:d3:24:b3:34:
         d7:8c:41:c6:20:64:54:c8:e2:30:30:e6:65:51:b7:88:91:25:
         b9:ca:60:da:7a:30:92:8f:9a:8c:b9:11:dc:e2:f5:ca:b1:cf:
         6c:78:9e:4c:a3:06:38:3f:04:a4:db:50:98:d5:68:6f:6b:1e:
         68:ac:69:72:22:45:ab:95:52:04:20:a9:9d:8e:4d:1d:cc:a0:
         08:91:c1:dd:bd:62:03:06:d6:1c:16:67:3f:40:18:cd:77:42:
         f6:f9:6f:f7:5e:85:d1:f9:b7:a1:ff:29:a8:2b:fd:13:2a:40:
         3a:46:37:f1:ea:bb:29:29:1c:21:d9:8d:f2:d2:69:c1:16:a2:
         95:8b:13:3a:10:7e:e1:fd:9c:d8:5b:06:43:dd:77:e1:6a:c9:
         66:04:5e:81:51:95:7b:34:7f:6f:7a:1b:a1:b6:db:d8:f9:d0:
         88:2e:be:a8:87:21:78:60:ed:10:49:b4:4c:ef:b2:43:c7:ca:
         a3:d9:a0:0f:8d:a6:0a:90:f8:93:f5:a9:63:83:41:7a:45:f8:
         13:5d:64:7e:e1:73:85:4b:cf:11:67:10:b3:32:1a:27:b2:bb:
         a3:6c:a9:81:65:a4:13:2b:15:e5:a5:5a:a7:3c:cd:7d:fa:14:
         a1:dc:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:43 2026 by rpki-client