Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/G3SH0czDIebxXkT2k5kb0p5H9co.roa
File:                     G3SH0czDIebxXkT2k5kb0p5H9co.roa (raw, json)
Hash identifier:          9CafH9w5BtGGSISFheN2VWXi+03xkp6Q+Ost0FNjJLs=
Subject key identifier:   1B:74:87:D1:CC:C3:21:E6:F1:5E:44:F6:93:99:1B:D2:9E:47:F5:CA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0661
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/G3SH0czDIebxXkT2k5kb0p5H9co.roa
Signing time:             Tue 31 Mar 2026 07:27:43 +0000
ROA not before:           Tue 31 Mar 2026 07:27:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B7487D1CCC321E6F15E44F693991BD29E47F5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:01:f5:b7:6f:a8:cb:22:d2:2b:11:87:e3:c6:
                    5b:39:cd:e8:17:b9:99:65:97:07:21:d6:c5:73:2a:
                    56:f6:7d:dd:eb:bb:1e:e9:b0:c9:3d:65:bc:a7:07:
                    03:38:67:c7:b6:b8:7b:53:39:d5:36:84:7e:68:36:
                    b0:85:12:da:be:8a:37:12:ea:1f:2b:51:9f:a7:3e:
                    14:8f:44:8e:36:b5:de:05:ec:dc:53:cf:41:bf:70:
                    f9:e7:1f:08:42:10:b3:69:5b:b9:5f:bc:5b:b0:5c:
                    03:19:ff:63:7c:af:96:56:84:97:1c:54:d5:29:ea:
                    53:c8:74:c5:7b:69:5a:c6:92:e8:48:dd:7f:dd:cf:
                    04:09:4e:f8:d5:30:2e:53:e3:06:40:19:54:68:89:
                    b6:41:42:40:97:d3:98:c4:53:59:d4:ab:76:f1:ff:
                    d2:30:1a:25:06:3e:a5:04:e6:2e:59:56:86:e4:f0:
                    38:89:25:24:1c:9d:40:a6:11:6f:fe:5f:6a:0a:49:
                    3c:a4:11:33:98:bf:97:68:89:2b:f7:3e:4c:17:63:
                    d9:03:0d:6a:fe:c1:16:07:1c:a5:4e:2a:85:28:90:
                    ce:90:47:27:90:d8:c6:98:10:32:82:3d:a8:c7:65:
                    aa:71:ac:42:18:ca:2f:af:66:1e:4c:fb:f3:62:9f:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:74:87:D1:CC:C3:21:E6:F1:5E:44:F6:93:99:1B:D2:9E:47:F5:CA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/G3SH0czDIebxXkT2k5kb0p5H9co.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:92:fc:b4:cd:59:03:ca:2c:92:da:8e:cc:a7:a7:91:3a:bb:
         59:7f:2a:8e:98:8f:f8:a6:84:4b:3b:a4:29:d5:60:c2:d5:5c:
         42:a5:c7:da:b6:b9:f6:ce:b2:42:27:af:44:f1:38:e7:fd:55:
         e6:19:55:d0:9d:d5:0d:e9:a5:02:3b:b7:e8:fb:92:a9:ac:45:
         93:ad:99:47:6f:9e:63:7b:67:06:d3:a7:09:5b:8c:af:16:6d:
         3a:a7:0a:2d:b5:58:49:8b:12:97:ae:6d:26:ef:2e:70:29:86:
         06:35:9e:99:da:01:a9:e6:f0:06:72:4a:6f:34:9d:c2:a1:30:
         ed:3a:9b:03:76:ec:53:cf:6e:b5:1a:4c:a8:c1:4a:83:0f:b1:
         72:ea:77:06:a3:7b:c1:18:0f:3c:6c:b6:35:32:50:22:bc:c5:
         f1:e4:41:86:1f:f9:f7:60:b1:eb:3e:c1:1f:77:ea:1f:cb:71:
         ab:e2:80:e5:c7:89:a4:0e:df:1a:0e:a1:79:64:5b:1e:c8:ba:
         f7:6b:06:53:8d:b3:8d:f4:51:93:0a:0a:b9:a3:15:c5:c8:4d:
         d3:4b:70:97:49:d2:b4:bf:b6:9c:bb:b6:26:2e:b9:98:9c:9d:
         c0:24:5f:7a:49:b7:2b:d6:42:ff:2d:1b:76:48:04:76:b5:1a:
         c3:6b:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:29 2026 by rpki-client