Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/NgzG4TAgPtcWJFPgQMKxj9oSSpA.roa
File:                     NgzG4TAgPtcWJFPgQMKxj9oSSpA.roa (raw, json)
Hash identifier:          ccCK84vL9ko7daXtpnQfbNJ7u/GKMNhZm1Hc3kA1T88=
Subject key identifier:   36:0C:C6:E1:30:20:3E:D7:16:24:53:E0:40:C2:B1:8F:DA:12:4A:90
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0643
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NgzG4TAgPtcWJFPgQMKxj9oSSpA.roa
Signing time:             Tue 31 Mar 2026 07:27:29 +0000
ROA not before:           Tue 31 Mar 2026 07:27:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=360CC6E130203ED7162453E040C2B18FDA124A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:da:cd:b6:4c:cf:9e:5a:b4:76:74:94:f5:36:
                    97:2a:5d:45:71:53:39:35:40:9a:12:82:0f:19:79:
                    fa:80:4c:37:39:9b:3d:fa:93:c4:9d:ca:06:3f:63:
                    b4:11:86:b9:71:8f:43:df:8d:02:09:bb:78:81:57:
                    7e:10:90:eb:68:b2:79:17:de:26:2e:7e:a5:fc:98:
                    8d:40:52:4a:7e:ce:bd:9f:c4:6b:fd:82:4e:2b:2e:
                    45:6c:e4:d9:dc:9f:f2:4d:a4:49:97:4f:d9:bf:90:
                    fa:4e:0b:39:5a:f4:7d:55:6d:1b:68:53:77:63:e0:
                    20:6c:3c:46:6c:92:3a:9d:b6:84:0c:d5:e0:7e:a1:
                    fb:df:49:1d:2e:5d:61:52:e3:2a:c9:04:0b:1d:f1:
                    e3:a9:57:6b:ad:95:1b:1b:85:6a:0b:2f:4a:54:a9:
                    f4:c6:4b:56:66:95:db:3c:34:8f:76:0b:21:1c:24:
                    f6:9a:10:59:3b:98:03:bf:c4:27:8a:25:bd:3a:6e:
                    68:46:db:20:e6:a8:8d:ba:ca:8d:5f:eb:5f:be:37:
                    2f:a0:2f:a3:57:da:c1:a8:b1:a1:6e:01:0d:47:02:
                    35:56:21:c6:bd:04:56:16:7f:f1:f0:42:87:a3:55:
                    f6:14:ff:b0:36:d6:7b:b5:1b:84:35:60:7b:d0:31:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:C6:E1:30:20:3E:D7:16:24:53:E0:40:C2:B1:8F:DA:12:4A:90
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NgzG4TAgPtcWJFPgQMKxj9oSSpA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:86:a7:fe:83:93:cf:94:d2:55:b2:2d:a2:ff:cc:fd:98:cc:
         fe:00:b2:08:77:d9:e9:59:90:9a:66:fd:52:b7:fb:2f:8c:32:
         ed:38:59:1d:90:f5:16:90:80:00:65:fe:b8:12:48:55:e2:cd:
         c4:98:64:9f:d5:37:f9:a6:9a:73:05:31:fb:fb:18:bd:74:86:
         b6:1d:5b:59:2c:52:86:a1:59:50:1a:e7:59:43:73:56:46:f8:
         67:6a:54:94:36:77:9e:f1:b1:fe:b4:68:cd:94:ef:6a:71:56:
         19:86:bf:01:2a:8d:9b:2c:03:db:43:d5:19:55:78:30:d9:5b:
         ab:6b:28:c6:a9:79:10:6b:24:10:7c:44:73:72:32:b9:9e:d9:
         40:76:5e:8d:b9:77:32:8d:f3:61:a9:d9:6e:4a:cf:23:2a:8a:
         7c:d9:d8:3b:fa:3c:0f:69:ea:56:92:b3:b8:56:75:0f:d7:3d:
         7d:ff:32:5b:67:9c:56:a1:fe:2c:37:20:b6:b4:04:3d:4a:b3:
         e2:0c:21:57:44:15:fc:66:86:11:ac:41:0f:9d:50:84:f7:3b:
         46:f1:43:d4:a8:1d:8d:75:6b:0a:c0:dd:b7:dc:c9:57:95:96:
         33:5b:be:12:f0:ad:f1:35:fd:fc:13:3d:40:87:62:8c:76:c6:
         af:38:d8:97
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI3MjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM2MENDNkUxMzAyMDNF
RDcxNjI0NTNFMDQwQzJCMThGREExMjRBOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr2s22TM+eWrR2dJT1NpcqXUVxUzk1QJoSgg8ZefqATDc5mz36
k8SdygY/Y7QRhrlxj0PfjQIJu3iBV34QkOtosnkX3iYufqX8mI1AUkp+zr2fxGv9
gk4rLkVs5Nncn/JNpEmXT9m/kPpOCzla9H1VbRtoU3dj4CBsPEZskjqdtoQM1eB+
ofvfSR0uXWFS4yrJBAsd8eOpV2utlRsbhWoLL0pUqfTGS1Zmlds8NI92CyEcJPaa
EFk7mAO/xCeKJb06bmhG2yDmqI26yo1f61++Ny+gL6NX2sGosaFuAQ1HAjVWIca9
BFYWf/HwQoejVfYU/7A21nu1G4Q1YHvQMWezAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUNgzG4TAgPtcWJFPgQMKxj9oSSpAwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L05nekc0VEFnUHRjV0pGUGdRTUt4ajlvU1NwQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAqffQwDQYJKoZIhvcNAQELBQADggEB
AJeGp/6Dk8+U0lWyLaL/zP2YzP4Asgh32elZkJpm/VK3+y+MMu04WR2Q9RaQgABl
/rgSSFXizcSYZJ/VN/mmmnMFMfv7GL10hrYdW1ksUoahWVAa51lDc1ZG+GdqVJQ2
d57xsf60aM2U72pxVhmGvwEqjZssA9tD1RlVeDDZW6trKMapeRBrJBB8RHNyMrme
2UB2Xo25dzKN82Gp2W5KzyMqinzZ2Dv6PA9p6laSs7hWdQ/XPX3/MltnnFah/iw3
ILa0BD1Ks+IMIVdEFfxmhhGsQQ+dUIT3O0bxQ9SoHY11awrA3bfcyVeVljNbvhLw
rfE1/fwTPUCHYox2xq842Jc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:13 2026 by rpki-client