Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Bt4ofC0cj8vy_aoSUAnBXxxEMKQ.roa
File:                     Bt4ofC0cj8vy_aoSUAnBXxxEMKQ.roa (raw, json)
Hash identifier:          fOrGrLjmtOdoFgBLrqd90QiaeSNKjhk7wyYYK3Jqf28=
Subject key identifier:   06:DE:28:7C:2D:1C:8F:CB:F2:FD:AA:12:50:09:C1:5F:1C:44:30:A4
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       068E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Bt4ofC0cj8vy_aoSUAnBXxxEMKQ.roa
Signing time:             Tue 31 Mar 2026 07:28:08 +0000
ROA not before:           Tue 31 Mar 2026 07:28:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        219.126.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=06DE287C2D1C8FCBF2FDAA125009C15F1C4430A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:9d:07:06:2e:d4:51:a2:c0:df:a4:78:a4:
                    e4:8a:fa:85:ed:71:ca:0f:b1:7d:02:8d:8a:04:2f:
                    0e:3a:08:01:60:e1:bf:20:eb:b5:7c:4a:a0:65:20:
                    ea:5c:e7:34:0a:09:86:c1:3b:60:46:55:39:83:d5:
                    69:48:fe:7c:bb:c7:21:e6:b1:c8:84:47:46:46:75:
                    f6:e5:16:46:a5:b7:20:cb:8d:81:d9:f3:c7:88:50:
                    f3:d6:db:91:1e:bf:92:70:c2:1b:49:47:1d:dc:59:
                    af:9e:08:cc:cd:9f:f1:fe:b0:90:23:40:c7:b9:3b:
                    e8:1e:50:4a:dd:9a:64:18:68:82:81:7b:d1:16:04:
                    b9:e2:24:71:52:74:d9:7f:04:4b:25:86:d6:9c:cb:
                    22:7e:7d:56:4e:60:81:aa:a3:30:4a:32:ae:5f:a5:
                    62:55:1b:ca:3b:60:5e:55:5a:85:de:f6:1d:1e:18:
                    bc:ec:3d:04:1c:54:0e:38:f7:47:e1:a0:da:56:31:
                    10:b4:3a:16:c8:3b:9c:f2:ab:97:de:fa:3e:08:93:
                    1d:a9:92:6f:29:c1:84:39:ba:d4:fd:72:4a:0b:f8:
                    17:c0:9f:84:37:1e:93:c8:aa:87:d1:4a:e4:e5:b0:
                    5e:58:46:ce:0a:a8:e1:ec:7f:54:58:4d:48:16:53:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DE:28:7C:2D:1C:8F:CB:F2:FD:AA:12:50:09:C1:5F:1C:44:30:A4
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Bt4ofC0cj8vy_aoSUAnBXxxEMKQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:57:f0:07:13:70:b8:78:1b:fe:7b:77:3e:6d:a3:d8:c0:57:
         66:31:94:0a:9d:e4:34:65:67:4e:18:85:14:0c:74:87:ed:ec:
         4d:e0:0c:43:81:81:de:1e:dc:7b:79:3f:84:3f:6f:c0:1e:f0:
         92:2f:40:33:c9:a1:1c:23:7c:62:b1:af:c5:5f:87:25:be:e6:
         c6:69:41:8f:d1:c8:da:81:52:b8:9d:db:6c:25:04:78:03:1a:
         69:0e:b2:fc:0b:2b:b0:46:ea:c0:51:39:35:44:72:b8:74:bf:
         70:92:2c:94:cc:5b:83:29:ee:34:73:c9:bd:41:64:0e:9b:f0:
         69:13:88:66:4a:38:3a:40:82:55:1f:64:af:0d:f6:a1:ff:ee:
         13:12:2e:2c:d5:4c:18:8b:ce:91:9a:3e:c4:1e:c7:7c:ff:0e:
         4d:a1:0e:77:57:76:de:13:9a:00:46:5a:9c:9f:a2:26:5f:05:
         ef:c8:a2:3a:00:2a:2d:e8:65:a7:31:81:e8:63:73:c3:e0:44:
         ad:02:ae:8b:ef:9b:02:25:c2:a3:02:58:f3:11:07:c0:89:1a:
         79:7b:19:4d:bc:27:ad:bb:1d:4f:2f:53:ef:48:ef:d4:4d:56:
         29:18:c7:5f:dd:2d:1a:fd:e3:b3:a5:66:ba:cb:f0:08:0a:63:
         3d:74:97:64
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI4MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2REUyODdDMkQxQzhG
Q0JGMkZEQUExMjUwMDlDMTVGMUM0NDMwQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwq50HBi7UUaLA36R4pOSK+oXtccoPsX0CjYoELw46CAFg4b8g
67V8SqBlIOpc5zQKCYbBO2BGVTmD1WlI/ny7xyHmsciER0ZGdfblFkaltyDLjYHZ
88eIUPPW25Eev5JwwhtJRx3cWa+eCMzNn/H+sJAjQMe5O+geUErdmmQYaIKBe9EW
BLniJHFSdNl/BEslhtacyyJ+fVZOYIGqozBKMq5fpWJVG8o7YF5VWoXe9h0eGLzs
PQQcVA4490fhoNpWMRC0OhbIO5zyq5fe+j4Ikx2pkm8pwYQ5utT9ckoL+BfAn4Q3
HpPIqofRSuTlsF5YRs4KqOHsf1RYTUgWU97FAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUBt4ofC0cj8vy/aoSUAnBXxxEMKQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L0J0NG9mQzBjajh2eV9hb1NVQW5CWHh4RU1LUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXbfkAwDQYJKoZIhvcNAQELBQADggEB
AEJX8AcTcLh4G/57dz5to9jAV2YxlAqd5DRlZ04YhRQMdIft7E3gDEOBgd4e3Ht5
P4Q/b8Ae8JIvQDPJoRwjfGKxr8VfhyW+5sZpQY/RyNqBUrid22wlBHgDGmkOsvwL
K7BG6sBROTVEcrh0v3CSLJTMW4Mp7jRzyb1BZA6b8GkTiGZKODpAglUfZK8N9qH/
7hMSLizVTBiLzpGaPsQex3z/Dk2hDndXdt4TmgBGWpyfoiZfBe/IojoAKi3oZacx
gehjc8PgRK0CrovvmwIlwqMCWPMRB8CJGnl7GU28J627HU8vU+9I79RNVikYx1/d
LRr947OlZrrL8AgKYz10l2Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:17 2026 by rpki-client