Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MiEDAiLJqaVQEIwtD92R1ZsvecU.roa
File:                     MiEDAiLJqaVQEIwtD92R1ZsvecU.roa (raw, json)
Hash identifier:          Uk6AepyuQhP3Afg53m3CqF63S4pbZIP9qrtA3MsAhv4=
Subject key identifier:   32:21:03:02:22:C9:A9:A5:50:10:8C:2D:0F:DD:91:D5:9B:2F:79:C5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       065A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MiEDAiLJqaVQEIwtD92R1ZsvecU.roa
Signing time:             Tue 31 Mar 2026 07:27:39 +0000
ROA not before:           Tue 31 Mar 2026 07:27:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        61.200.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3221030222C9A9A550108C2D0FDD91D59B2F79C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:18:14:f2:ce:70:d6:13:df:59:74:e1:e4:
                    af:df:83:ac:40:99:c9:30:ac:d0:51:23:e3:ca:91:
                    4e:a0:41:fa:3a:81:93:35:e3:22:99:87:18:24:11:
                    13:90:ff:01:48:4d:44:04:a5:ef:96:f8:6e:af:5c:
                    fa:04:85:b7:42:7b:cf:ad:a3:a1:74:10:6a:a8:70:
                    87:ab:23:91:c7:4e:66:3d:28:42:da:f8:cc:ce:67:
                    d9:fe:9a:8c:59:f2:5d:df:6b:c1:0f:f9:cf:9d:40:
                    71:b2:db:b1:64:62:9c:2b:45:db:8c:cb:6a:7c:8d:
                    c5:4f:92:d0:d5:cc:ee:a4:e8:38:b3:8e:48:73:a6:
                    63:7e:9e:95:b0:00:92:0c:85:52:0f:76:ff:9b:b2:
                    5e:b5:6b:03:f0:d7:9d:83:a5:61:1f:c5:43:cc:ed:
                    f8:dd:80:72:12:dd:29:a4:79:59:8a:56:26:70:14:
                    7e:59:86:ce:3e:3c:f1:99:9d:ca:ac:b4:76:4b:d4:
                    c1:61:c6:a4:b1:8e:2b:52:46:02:e5:e5:3a:4b:65:
                    06:f8:a5:fd:11:2c:f6:94:ae:d5:03:26:93:57:fe:
                    4f:07:d1:97:e7:2d:47:f9:ec:fe:f3:a3:04:27:d3:
                    bc:c5:cc:f8:ea:6a:f7:ea:5a:12:38:f4:e4:de:a6:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:21:03:02:22:C9:A9:A5:50:10:8C:2D:0F:DD:91:D5:9B:2F:79:C5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MiEDAiLJqaVQEIwtD92R1ZsvecU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:26:aa:ac:4b:5c:2a:ed:1b:5b:6d:8a:0c:c0:9f:72:a3:
         59:d0:b1:dc:da:00:e5:8e:2c:fe:67:e8:ab:ba:ed:ad:21:75:
         7e:6f:b9:e6:0e:78:10:9d:dc:5b:31:45:32:e3:89:9d:19:4b:
         36:95:0c:07:02:90:32:f1:3c:45:b6:50:a0:4d:0d:f6:2c:69:
         2b:18:03:70:f8:0e:6f:7b:e7:d4:73:08:26:71:46:b0:29:dc:
         02:b3:59:58:14:e5:6f:1f:33:df:35:35:c0:5e:5e:38:2b:b9:
         e2:70:95:c3:d3:3e:bd:ea:66:51:26:2d:de:b3:c6:39:7f:aa:
         46:69:8b:24:47:a8:db:e6:c3:3c:e8:9e:f7:50:2f:43:95:f5:
         a8:1f:62:fd:d5:5c:f3:e2:1c:a4:ba:87:7f:36:a5:7f:d5:b1:
         c0:b2:f6:a1:29:8d:f1:d7:1e:d9:37:19:b0:84:5a:17:1f:30:
         7a:17:fa:da:f8:91:6a:c1:db:fe:d7:9c:a0:17:b9:9b:e0:dd:
         df:9a:46:0f:a6:67:bf:4d:6f:a2:e1:2d:5a:9b:16:b4:ad:90:
         f0:8f:75:1d:a5:21:8d:25:a2:8d:61:1e:c8:66:f0:b5:01:97:
         f8:60:2e:01:fa:a9:9c:91:c4:d3:bf:90:63:ab:6e:8b:5a:4d:
         14:c5:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:53:23 2026 by rpki-client