Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MYGIx4B5xU3ivX3AriYr8iMXMSQ.roa
File:                     MYGIx4B5xU3ivX3AriYr8iMXMSQ.roa (raw, json)
Hash identifier:          5VBQf5FJ1hngRaUv/FRzRH56bg3HNKhqIxiX+OfnlP4=
Subject key identifier:   31:81:88:C7:80:79:C5:4D:E2:BD:7D:C0:AE:26:2B:F2:23:17:31:24
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0673
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MYGIx4B5xU3ivX3AriYr8iMXMSQ.roa
Signing time:             Tue 31 Mar 2026 07:27:53 +0000
ROA not before:           Tue 31 Mar 2026 07:27:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        112.137.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=318188C78079C54DE2BD7DC0AE262BF223173124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:50:ab:1b:09:68:be:15:c9:67:26:86:9f:
                    58:e6:41:65:7a:87:07:c2:36:70:87:f2:e6:b6:89:
                    3a:cd:b8:48:96:ca:d3:73:94:c6:d0:94:c5:56:49:
                    86:80:9d:d7:14:07:c1:4b:73:98:4c:ee:46:05:c4:
                    e5:27:f2:e8:83:9b:7e:81:9e:0a:f6:eb:fc:8b:4b:
                    65:cd:71:94:b2:a9:0b:1c:5c:c1:c9:3f:af:8b:03:
                    cd:e3:df:ae:d3:f5:09:20:5d:c1:ac:e7:47:27:07:
                    0e:7e:73:06:6a:be:9e:f6:34:56:63:4f:83:6f:f6:
                    58:db:09:44:bb:1b:2a:36:e6:7b:0a:2f:b9:bc:e9:
                    a5:b0:b1:4b:c3:87:25:b2:b7:03:6e:aa:5f:29:77:
                    3c:52:a3:ad:05:59:ff:e3:3f:8a:6e:7c:3c:ef:3d:
                    cb:30:5c:cc:d3:c0:b0:7f:3c:d8:fa:8e:9a:5e:2e:
                    7c:d6:0a:01:ff:bb:d2:37:0e:e8:cc:36:52:67:c3:
                    51:b8:57:9d:38:4b:88:5d:67:72:9e:f3:3b:02:35:
                    59:65:be:f7:ad:30:6b:ae:1c:06:a9:b6:5e:22:ed:
                    ae:fe:e7:dd:a9:95:aa:71:01:04:9c:7b:56:c7:32:
                    66:72:4a:f6:30:89:1d:f1:97:c3:db:ea:15:8d:69:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:88:C7:80:79:C5:4D:E2:BD:7D:C0:AE:26:2B:F2:23:17:31:24
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MYGIx4B5xU3ivX3AriYr8iMXMSQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:ab:24:81:41:92:07:bb:b1:6c:39:d4:ae:96:e8:dc:04:83:
         3f:a5:23:5d:83:ea:38:d0:16:cc:2f:19:7e:c2:c8:ba:42:3b:
         61:09:ad:4d:1c:39:7d:81:a0:74:52:6c:39:fa:ab:ac:d7:8f:
         bf:93:77:f2:0a:1d:91:0e:05:f0:79:c4:05:ad:a6:cc:95:22:
         f9:66:07:d5:5e:d6:3c:60:72:c1:ed:99:28:18:27:32:df:fe:
         ce:5e:03:d1:8e:25:03:7b:73:ef:51:47:c8:d3:b3:bf:f8:2c:
         ed:e6:e3:7f:88:8e:0f:45:8e:8f:5e:d3:84:94:57:13:46:5c:
         49:85:82:6f:f1:e5:5b:f1:98:3a:51:03:e4:f5:16:40:79:85:
         7e:c7:36:f8:b8:08:d7:e5:fd:ec:8a:7f:b0:28:a8:13:30:dd:
         bc:11:ca:21:9c:65:9d:0c:f1:33:3d:28:56:f6:b4:46:ae:fc:
         70:95:0a:c0:bc:80:db:83:f7:0c:79:97:ce:6a:a3:12:be:18:
         f4:85:35:4e:d1:4f:ed:8c:a1:3d:9d:dd:8c:90:bf:48:ba:51:
         7c:74:34:bc:e9:b9:c9:fd:6b:46:b1:c4:45:fb:2c:c6:6b:7f:
         95:37:12:74:ee:76:c9:6c:96:e0:d8:72:32:56:f3:18:a5:d1:
         e8:00:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:50 2026 by rpki-client