Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/E6X6tp6OqSqhmnjxRJ5uSoLO0rU.roa
File:                     E6X6tp6OqSqhmnjxRJ5uSoLO0rU.roa (raw, json)
Hash identifier:          hpVAFQGuaFPksxAp8AoNBGrew0yQ1ao3DQdt9PlC2wM=
Subject key identifier:   13:A5:FA:B6:9E:8E:A9:2A:A1:9A:78:F1:44:9E:6E:4A:82:CE:D2:B5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06BF
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/E6X6tp6OqSqhmnjxRJ5uSoLO0rU.roa
Signing time:             Tue 31 Mar 2026 07:28:31 +0000
ROA not before:           Tue 31 Mar 2026 07:28:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        202.226.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727 (0x6bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=13A5FAB69E8EA92AA19A78F1449E6E4A82CED2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:5e:fa:00:25:7b:47:2d:5c:8e:aa:8b:ba:
                    7c:60:99:bf:4f:31:b8:db:41:02:fb:2a:15:2c:82:
                    cb:76:b7:a8:16:61:c2:39:ef:f6:73:b0:0e:ea:a6:
                    8b:dc:26:e9:e0:c2:fe:45:a4:6c:d4:d7:dd:fd:4d:
                    2f:ef:2c:bb:6d:0b:07:d0:a0:37:88:bd:3f:d3:95:
                    48:c1:4d:ea:c2:2a:4d:3a:48:30:1d:0f:32:3f:31:
                    b3:e8:4f:58:d1:bf:98:a4:4a:3c:92:25:80:cc:ef:
                    96:fe:c4:20:33:8c:87:b6:8a:60:d7:95:91:9c:e7:
                    5d:a7:f0:4e:ff:36:25:84:ea:2d:b9:98:13:26:2e:
                    61:7b:95:0c:46:f1:62:90:e0:8e:63:03:36:1b:be:
                    e4:48:34:d7:9c:2f:a7:a4:a5:9f:13:96:67:05:42:
                    7c:ec:65:cd:da:fc:95:63:cf:6e:aa:07:19:41:ce:
                    ee:86:95:d2:79:3b:22:9a:a0:42:ce:98:f7:3c:10:
                    84:7d:dc:2c:19:48:19:d3:de:87:0d:e2:cf:82:a8:
                    93:58:56:f2:de:4c:f1:f9:b2:08:7f:d7:04:98:80:
                    eb:5f:54:8e:f9:6f:4f:0e:34:11:3e:77:74:8f:0d:
                    81:3a:3a:7e:85:9f:b3:0d:94:8f:93:d1:f0:3a:e2:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A5:FA:B6:9E:8E:A9:2A:A1:9A:78:F1:44:9E:6E:4A:82:CE:D2:B5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/E6X6tp6OqSqhmnjxRJ5uSoLO0rU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5f:01:0a:58:89:3f:9c:5f:49:ed:57:f5:4b:d6:4c:11:86:
         3f:34:81:f9:ff:8e:bd:21:b5:e0:68:e1:e2:23:fb:97:7d:2e:
         60:90:6c:a2:87:27:e9:9c:4f:cd:9e:ec:9a:6f:8a:f5:32:93:
         a2:a2:89:57:fb:98:9d:81:22:c0:c5:58:9f:77:7a:34:78:49:
         87:7b:06:0b:b3:07:03:7c:22:aa:d7:59:73:9e:ef:46:67:08:
         c2:bf:5e:a3:4b:e6:c6:bd:8c:62:1d:3f:f9:8f:e9:d9:8b:dc:
         9e:1f:b2:ff:81:30:2b:7e:25:1e:b3:0d:2a:13:5a:dc:89:d1:
         bc:88:5d:3a:b1:09:8d:a2:58:cb:57:32:40:07:dd:87:4f:62:
         6f:8c:8a:75:68:46:ca:d7:fd:b8:a3:d8:57:54:67:1e:59:b7:
         1b:63:30:36:e0:d3:af:4b:7c:17:b5:68:90:28:cd:98:73:48:
         1b:29:55:bd:48:06:50:35:76:ce:74:8e:5c:37:6c:96:2e:8c:
         fc:9d:9f:3d:d0:bf:c2:2c:ed:d0:37:6d:18:75:cc:38:8b:3b:
         4c:b9:bb:28:e4:5b:a0:64:61:8b:b4:89:9e:bc:f6:02:dd:30:
         bb:1e:f9:ee:51:a3:74:8d:17:df:2a:56:04:e9:a4:19:52:18:
         3c:ee:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:42 2026 by rpki-client