Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/DCp_RPQQREKinHHDGsM4sDAgn3w.roa
File:                     DCp_RPQQREKinHHDGsM4sDAgn3w.roa (raw, json)
Hash identifier:          OZzpW+wvT/ugXBZdn9hcaN0y8oYQTQG76VVJ99IRSog=
Subject key identifier:   0C:2A:7F:44:F4:10:44:42:A2:9C:71:C3:1A:C3:38:B0:30:20:9F:7C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       068A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DCp_RPQQREKinHHDGsM4sDAgn3w.roa
Signing time:             Tue 31 Mar 2026 07:28:05 +0000
ROA not before:           Tue 31 Mar 2026 07:28:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C2A7F44F4104442A29C71C31AC338B030209F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:fb:d6:a6:35:6b:35:fe:0e:83:4f:43:6f:
                    87:4d:94:6b:4b:47:93:93:a4:b6:78:23:29:e3:1c:
                    cd:ee:05:58:83:27:89:fe:46:c4:57:be:05:80:bd:
                    cb:fe:a2:5f:67:1c:a7:89:6d:3f:b3:97:49:db:ad:
                    13:ce:aa:e5:02:2e:c1:ff:8f:ba:b7:b1:eb:25:80:
                    ff:2c:60:de:79:f0:e0:ee:d2:fa:af:f1:d3:2a:80:
                    43:6f:81:06:21:7f:f5:a4:0f:53:9b:46:d8:aa:28:
                    16:7e:d7:6b:62:50:02:d3:b7:50:27:d3:72:46:d4:
                    ef:59:c1:b3:12:7a:be:12:bc:93:87:cc:04:79:9d:
                    c7:53:4d:0d:92:91:ab:7d:e6:63:83:82:b0:a2:f6:
                    07:4e:69:5a:70:d2:4c:1d:be:fb:c6:26:68:2c:67:
                    ce:a8:71:8e:43:a3:0e:71:92:80:aa:0d:98:ca:b6:
                    74:df:03:84:09:ca:ce:04:7c:c8:f3:6b:3f:c5:00:
                    1c:d5:9d:8c:d7:52:8e:ca:5e:52:1c:5e:4f:6f:9e:
                    89:e9:9d:4a:81:63:1e:b9:3f:84:6d:06:fa:d8:79:
                    46:27:b1:42:54:fb:2c:76:16:80:37:dd:39:d8:75:
                    cb:00:17:1d:45:f9:33:a4:00:2c:17:07:91:32:f6:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2A:7F:44:F4:10:44:42:A2:9C:71:C3:1A:C3:38:B0:30:20:9F:7C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DCp_RPQQREKinHHDGsM4sDAgn3w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         06:74:e3:fc:20:a0:79:79:03:fc:55:da:6c:08:e2:d5:19:ea:
         c4:29:c8:ec:29:72:42:0b:96:53:12:7a:b2:a2:2c:c4:6e:b4:
         47:ca:e9:d3:f6:46:dd:e1:0f:23:6e:5c:68:e5:37:05:34:53:
         b1:3e:5a:85:1b:83:a1:49:40:a9:c2:17:1a:d4:db:1d:45:45:
         fa:5b:48:bf:a7:73:51:dd:a3:2c:d8:e3:a4:d0:91:e8:b9:82:
         87:da:72:d4:74:6d:d2:19:51:43:cf:c1:fc:01:37:38:42:64:
         d8:e4:9c:a5:1e:44:c2:46:64:62:38:11:06:fb:15:e7:39:d9:
         e3:d1:ae:02:3f:68:34:67:08:89:00:5b:e0:0e:73:99:24:18:
         52:90:e9:46:91:83:1e:26:7c:6b:bd:86:f6:6f:01:82:13:92:
         88:69:7a:f7:03:c4:64:14:3c:87:75:1e:7f:42:74:03:e8:66:
         8b:ec:f1:5d:df:64:57:d9:ff:9b:3d:59:9e:0e:e1:97:30:c5:
         b6:54:5a:6b:a2:e5:8e:26:1c:38:18:31:c7:1e:63:d2:9f:e9:
         b5:f3:7e:7f:2f:e5:35:7b:b4:b8:23:70:18:53:04:c8:51:41:
         10:5c:a4:46:b7:e1:27:24:a1:a3:86:98:6c:51:a1:21:39:79:
         24:0d:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:28 2026 by rpki-client