Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/IC5JgSbSeu4f4GO2W2iU2xXmFkE.roa
File:                     IC5JgSbSeu4f4GO2W2iU2xXmFkE.roa (raw, json)
Hash identifier:          oi2v83RkzuXgcF7P1Ah1bDmqoyxrwsuoF7KYxdNEavc=
Subject key identifier:   20:2E:49:81:26:D2:7A:EE:1F:E0:63:B6:5B:68:94:DB:15:E6:16:41
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       064A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IC5JgSbSeu4f4GO2W2iU2xXmFkE.roa
Signing time:             Tue 31 Mar 2026 07:27:32 +0000
ROA not before:           Tue 31 Mar 2026 07:27:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=202E498126D27AEE1FE063B65B6894DB15E61641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:77:2b:5f:6b:fb:85:96:8f:69:95:e4:5a:
                    ae:2a:9f:9f:e1:e6:33:24:d5:94:11:42:8a:85:a6:
                    89:39:13:4f:20:25:88:7a:2d:c2:76:a2:30:48:a0:
                    cb:94:0e:bc:8c:48:d4:a4:f3:a0:70:e3:48:15:c9:
                    b3:96:ee:15:cd:a8:cc:a2:e0:14:a2:e1:44:80:cb:
                    e2:f3:b2:a3:2e:08:91:54:ab:1f:6e:e7:19:ca:9f:
                    3e:26:5e:48:fc:81:a1:76:f7:d1:d2:c3:57:70:40:
                    fe:6b:e3:62:c0:06:16:ce:dd:2c:b8:4f:28:9a:00:
                    69:db:03:3d:f7:ba:4a:9c:26:21:e6:5b:6f:39:66:
                    26:63:61:f4:ca:d8:ec:2d:10:6b:8f:59:db:ba:af:
                    4a:91:8b:0d:64:bd:c0:44:c9:8f:4f:8d:60:0a:bc:
                    5c:1d:1d:a4:93:3d:34:40:6e:4d:39:dc:9f:f4:d3:
                    88:c7:01:74:a7:f4:75:d6:d2:83:13:82:16:e3:c5:
                    3b:7e:7b:58:7a:c5:c5:4f:2c:4f:1b:22:43:e8:e8:
                    cc:fa:d7:79:dd:7a:5d:3b:95:a5:22:49:72:cc:0b:
                    c9:2a:91:14:5b:e8:e9:b2:67:4d:44:fb:1c:26:ed:
                    fa:66:75:af:01:69:c0:ad:6c:18:80:dc:bf:de:5f:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2E:49:81:26:D2:7A:EE:1F:E0:63:B6:5B:68:94:DB:15:E6:16:41
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IC5JgSbSeu4f4GO2W2iU2xXmFkE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:b2:a6:ce:18:fd:71:d7:5d:80:59:70:76:d0:a6:43:ad:
         93:b3:22:e7:79:86:1d:53:87:de:a3:4a:4d:8a:b6:0f:05:44:
         81:b1:83:9e:57:35:93:94:8c:b9:fc:ac:8d:e9:b2:7e:51:44:
         f9:98:12:f0:44:93:dd:f6:47:8b:4a:61:ff:f6:2b:99:a6:dd:
         c1:8b:65:50:51:eb:7d:c5:7c:6b:74:3a:b0:dd:f1:4e:d1:5c:
         18:f1:90:ba:48:dc:6c:f5:44:f0:ed:40:47:74:ae:51:1d:1a:
         1d:6f:05:44:e0:86:14:f4:57:9e:98:4a:71:9c:c3:23:e2:b8:
         c9:9d:5f:2b:ca:6a:3b:bd:1c:8f:91:10:22:d5:c1:a0:0d:52:
         7a:a3:3f:32:a5:33:63:0f:55:d1:4b:f8:3d:77:bb:83:15:ef:
         38:6c:f9:1e:f8:64:4d:78:e1:02:62:2a:e3:21:d4:e4:f7:a0:
         00:65:38:47:a8:31:0a:3c:3e:7f:a4:50:b1:2f:ae:ab:16:0b:
         4c:dc:45:f0:64:c3:38:89:97:98:a4:40:00:a8:95:50:e3:ff:
         21:09:59:a5:66:51:20:4f:86:85:a3:c5:c5:41:ad:14:5a:45:
         db:90:b9:b8:df:af:af:21:f2:45:31:a7:6c:8f:bc:5c:f2:46:
         d7:11:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:38 2026 by rpki-client