Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/LtN2s3wnXQQoZZh_aw_CX2DiuQ4.roa
File:                     LtN2s3wnXQQoZZh_aw_CX2DiuQ4.roa (raw, json)
Hash identifier:          AMNbt6iJF0fq+9KoMglJI4++i+mmE5pJsChv81/X8DY=
Subject key identifier:   2E:D3:76:B3:7C:27:5D:04:28:65:98:7F:6B:0F:C2:5F:60:E2:B9:0E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06A5
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LtN2s3wnXQQoZZh_aw_CX2DiuQ4.roa
Signing time:             Tue 31 Mar 2026 07:28:19 +0000
ROA not before:           Tue 31 Mar 2026 07:28:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        219.124.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2ED376B37C275D042865987F6B0FC25F60E2B90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:71:b4:2c:8a:0c:ac:c6:ab:aa:c2:3a:42:29:
                    11:19:f5:d8:92:f4:03:89:be:dc:20:6e:24:86:1a:
                    85:b9:2e:1f:3a:18:87:a0:94:fd:e6:f1:17:97:50:
                    11:cc:7f:9b:5f:77:f1:63:f3:95:2d:a5:6c:4c:cf:
                    c3:f4:a0:aa:01:21:8b:64:75:08:84:19:71:87:60:
                    11:c4:3d:3e:36:2c:48:2a:27:2f:af:a8:88:2a:c5:
                    f2:43:16:ed:c4:69:dd:c9:e0:42:e7:93:7f:f7:72:
                    bb:46:7c:e5:a1:d3:b4:50:79:cb:10:a2:16:7e:b5:
                    a5:13:10:6b:a1:4a:cd:89:31:ec:79:dd:a5:cf:ae:
                    a1:2d:b7:04:e9:62:38:37:e1:6d:0a:b7:8e:14:ec:
                    66:fc:55:6b:eb:7a:39:b3:ff:55:bd:56:a2:5f:5d:
                    30:ac:1e:39:f6:8e:57:a2:9c:d1:18:94:c4:c8:bb:
                    f1:16:69:37:a7:6d:05:68:85:05:62:89:84:fa:37:
                    2f:a0:e0:d0:ab:12:21:dc:ce:36:14:ed:6a:ce:a4:
                    4c:1e:e1:8c:f4:65:dc:7e:0b:df:d4:7e:5e:44:98:
                    df:53:66:43:03:a5:14:0c:1e:9c:25:bd:d9:44:bf:
                    2e:d2:23:3b:26:24:68:07:89:d2:1d:a3:a8:53:42:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D3:76:B3:7C:27:5D:04:28:65:98:7F:6B:0F:C2:5F:60:E2:B9:0E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LtN2s3wnXQQoZZh_aw_CX2DiuQ4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:4c:a9:b7:5b:d2:5f:37:3d:24:fb:07:ac:7d:fa:a5:08:a8:
         94:7e:ae:2d:f7:f3:28:68:45:81:49:e2:de:a2:26:a3:68:bc:
         7c:9c:a4:d4:81:68:a6:e2:ac:e1:9a:01:53:26:db:9e:bf:bb:
         76:de:a5:33:68:ba:d9:b6:f2:45:4a:d2:fa:e9:db:e7:c5:bc:
         32:d7:4e:b0:80:b5:7c:e9:52:ab:52:39:80:77:fe:65:ca:ef:
         22:ad:8a:d0:63:81:89:dd:0c:3a:d4:9d:af:4a:35:ab:ad:fb:
         a0:0d:10:40:ec:b4:9f:f5:bf:6f:4a:73:2d:54:6b:59:b7:10:
         74:77:e9:dc:03:23:6b:6e:13:ae:11:c3:2e:26:cd:cc:fe:e3:
         42:74:1c:9a:70:b4:7b:ad:51:f1:dc:40:29:94:2a:aa:c1:1f:
         4f:93:19:b6:07:4b:d9:ec:87:d8:51:56:ee:67:74:d5:3d:e6:
         7a:29:3a:d2:4b:f0:f0:09:53:07:3b:ad:29:61:9d:a8:dc:fa:
         88:d4:3a:86:a6:23:6e:0f:a4:88:b6:b2:57:b7:e4:9e:a4:c5:
         d9:99:51:43:5d:c8:14:d8:99:af:ef:26:27:17:5a:0a:cf:17:
         9e:6c:55:e0:a6:e2:9b:b8:ac:ec:8a:41:92:be:d1:5d:29:e9:
         b1:6c:cc:af
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI4MTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFRDM3NkIzN0MyNzVE
MDQyODY1OTg3RjZCMEZDMjVGNjBFMkI5MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCacbQsigysxquqwjpCKREZ9diS9AOJvtwgbiSGGoW5Lh86GIeg
lP3m8ReXUBHMf5tfd/Fj85UtpWxMz8P0oKoBIYtkdQiEGXGHYBHEPT42LEgqJy+v
qIgqxfJDFu3Ead3J4ELnk3/3crtGfOWh07RQecsQohZ+taUTEGuhSs2JMex53aXP
rqEttwTpYjg34W0Kt44U7Gb8VWvrejmz/1W9VqJfXTCsHjn2jleinNEYlMTIu/EW
aTenbQVohQViiYT6Ny+g4NCrEiHczjYU7WrOpEwe4Yz0Zdx+C9/Ufl5EmN9TZkMD
pRQMHpwlvdlEvy7SIzsmJGgHidIdo6hTQoQ9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQULtN2s3wnXQQoZZh/aw/CX2DiuQ4wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L0x0TjJzM3duWFFRb1paaF9hd19DWDJEaXVRNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXbfIAwDQYJKoZIhvcNAQELBQADggEB
AARMqbdb0l83PST7B6x9+qUIqJR+ri338yhoRYFJ4t6iJqNovHycpNSBaKbirOGa
AVMm256/u3bepTNoutm28kVK0vrp2+fFvDLXTrCAtXzpUqtSOYB3/mXK7yKtitBj
gYndDDrUna9KNaut+6ANEEDstJ/1v29Kcy1Ua1m3EHR36dwDI2tuE64Rwy4mzcz+
40J0HJpwtHutUfHcQCmUKqrBH0+TGbYHS9nsh9hRVu5ndNU95nopOtJL8PAJUwc7
rSlhnajc+ojUOoamI24PpIi2sle35J6kxdmZUUNdyBTYma/vJicXWgrPF55sVeCm
4pu4rOyKQZK+0V0p6bFszK8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:43 2026 by rpki-client