Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/GVyT99VwqntM8Q1OFTX_erK2tdM.roa
File:                     GVyT99VwqntM8Q1OFTX_erK2tdM.roa (raw, json)
Hash identifier:          4LMUwn9jMHapWby6qcqmpdRMbuytdP47uMjZNcdVpGc=
Subject key identifier:   19:5C:93:F7:D5:70:AA:7B:4C:F1:0D:4E:15:35:FF:7A:B2:B6:B5:D3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       067F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/GVyT99VwqntM8Q1OFTX_erK2tdM.roa
Signing time:             Tue 31 Mar 2026 07:27:58 +0000
ROA not before:           Tue 31 Mar 2026 07:27:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=195C93F7D570AA7B4CF10D4E1535FF7AB2B6B5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:d8:72:3b:0d:de:23:e6:d2:18:03:04:c6:
                    57:9f:42:f2:e4:dc:87:e5:92:b7:20:1c:16:ca:f4:
                    bc:e5:d5:a3:c5:c3:ab:45:70:eb:bc:6c:41:27:77:
                    39:09:8e:ef:a8:20:8e:40:30:f9:2b:21:9f:27:dc:
                    5a:26:51:4c:70:1a:98:e5:65:7b:17:d0:8e:b1:68:
                    5d:56:77:d8:57:8b:89:e3:87:f8:bf:d7:35:1d:91:
                    e9:70:e3:34:68:9a:dc:8e:9c:2f:8f:8c:f1:40:59:
                    31:80:3b:ee:6b:f0:5d:00:66:94:53:05:c0:37:d7:
                    b9:4e:f5:41:e4:73:d4:fd:d1:5a:fd:f1:e8:0b:7f:
                    86:cc:7e:9f:b0:b7:63:a7:88:12:5a:f7:38:86:18:
                    14:e3:51:22:8c:6c:2e:dd:3c:ba:2f:18:d2:f4:a2:
                    a7:75:cf:0f:45:be:d9:00:b1:75:28:74:93:08:56:
                    7b:fc:80:a7:00:06:4a:8a:b2:0f:fd:e6:c8:d5:01:
                    d1:e2:49:19:d1:89:31:f9:d5:9b:39:59:60:ca:34:
                    4b:59:78:09:01:b9:26:48:91:24:5b:80:0f:08:e3:
                    8c:6b:3b:21:c4:1d:f5:b2:6d:4d:9e:97:ff:b7:d7:
                    63:d5:34:25:f9:3f:d7:af:44:d0:a5:0c:fb:81:67:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:93:F7:D5:70:AA:7B:4C:F1:0D:4E:15:35:FF:7A:B2:B6:B5:D3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/GVyT99VwqntM8Q1OFTX_erK2tdM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:2d:fd:6b:81:ad:8d:1b:b0:b9:16:26:fc:b5:ed:e1:c0:
         ec:cc:3b:77:2d:0c:5f:81:a7:f5:45:a7:b8:16:4d:cd:09:31:
         2b:6a:a8:6b:1a:cd:4c:3d:55:24:41:8a:4b:b6:a4:12:e5:ca:
         2c:ec:ef:bd:46:b7:d6:e0:fb:39:fd:be:45:60:80:32:92:e8:
         e3:11:dd:7f:de:a0:1b:bd:a9:1b:d7:fb:b7:b8:5e:86:7e:0a:
         d1:62:b1:32:52:aa:37:76:7d:24:d4:98:74:98:d9:19:92:bc:
         c6:87:82:97:e8:70:65:c2:b3:f7:fe:7b:dd:ca:12:9f:f7:3e:
         0d:6f:29:97:d6:17:7e:cd:0c:84:44:a1:07:69:44:70:eb:e2:
         de:a9:99:4b:eb:45:13:3f:58:1b:9c:c3:11:fd:0a:69:1e:f5:
         a4:ca:c8:83:bb:27:c0:e4:7d:12:01:0a:f9:f4:90:ca:1b:aa:
         c6:84:fb:28:93:61:ac:df:ca:4f:a4:e8:57:87:4a:f2:d4:96:
         3d:c0:ea:a6:0a:78:48:48:9a:9c:a7:75:20:4b:05:6e:5e:08:
         33:a5:08:96:11:43:c3:ad:84:22:82:1f:2c:78:21:69:b3:9c:
         0b:63:47:91:b1:f0:81:b5:fa:03:b7:fe:3c:1b:40:98:e4:29:
         b5:db:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:40 2026 by rpki-client