Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PBm2hxSdBqnkMq-YJc04UGTKs1I.roa
File:                     PBm2hxSdBqnkMq-YJc04UGTKs1I.roa (raw, json)
Hash identifier:          YrfW7M8Hywj5y19eUADYcbUJkWdMVvIBKAHav2dYWuc=
Subject key identifier:   3C:19:B6:87:14:9D:06:A9:E4:32:AF:98:25:CD:38:50:64:CA:B3:52
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0689
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PBm2hxSdBqnkMq-YJc04UGTKs1I.roa
Signing time:             Tue 31 Mar 2026 07:28:04 +0000
ROA not before:           Tue 31 Mar 2026 07:28:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        61.206.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3C19B687149D06A9E432AF9825CD385064CAB352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:4f:37:17:07:45:0f:da:c8:b7:e0:70:cf:
                    2f:2f:32:ca:18:c2:f8:c8:39:20:72:f7:39:88:44:
                    2c:2c:a5:99:0e:8d:ac:86:16:e1:f5:30:e6:65:1f:
                    60:36:85:81:0b:7a:00:fb:52:e5:cf:4d:70:91:45:
                    6c:98:c8:54:bf:2d:39:78:15:ff:5c:7c:e0:a9:e9:
                    a1:96:ca:55:75:f7:fb:fd:b0:29:87:e6:10:f7:79:
                    20:73:cf:b4:b2:5c:29:03:99:e7:9f:e3:eb:35:6f:
                    ed:91:41:75:02:aa:c6:cc:35:5a:ea:39:fc:80:9f:
                    8e:a4:a9:ec:74:fe:e0:20:a3:1f:6f:2d:05:5d:ea:
                    e6:25:1b:1b:2d:95:d2:e7:61:17:90:94:6a:30:22:
                    6f:87:61:b7:9d:49:6a:2c:3b:7c:65:e7:ac:25:3b:
                    18:cb:7a:20:1b:41:1c:87:7e:2a:9d:9b:66:92:9a:
                    cf:c4:c8:c1:a9:8b:f6:84:ed:02:86:87:5d:a9:f5:
                    43:77:11:02:83:e5:58:33:7f:1f:17:d9:fb:48:f3:
                    e8:4a:35:7a:2a:3f:b8:53:74:73:42:e3:fc:61:3b:
                    58:29:47:5a:16:d5:95:d5:34:01:ce:2f:de:3b:44:
                    ca:e1:49:35:2e:5b:f7:dd:5e:65:71:80:50:36:04:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:B6:87:14:9D:06:A9:E4:32:AF:98:25:CD:38:50:64:CA:B3:52
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PBm2hxSdBqnkMq-YJc04UGTKs1I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:3e:a9:24:e3:f6:68:5f:55:59:dc:5e:4c:74:c4:bb:8a:
         de:a1:81:35:f1:95:30:b3:63:b7:42:9c:b6:8e:60:28:4c:3b:
         41:68:a4:dd:3c:5c:5d:4f:05:b7:d7:97:c6:fb:02:66:5a:6a:
         af:63:f3:36:57:ca:5c:c0:6f:c8:c0:75:33:46:8d:45:ae:d1:
         9b:06:da:cc:1d:b6:e2:6f:90:fe:4b:6d:d3:b3:47:95:39:8a:
         cb:76:d1:74:22:db:33:7b:fc:1c:68:a2:0c:6d:c1:c1:0b:e9:
         5f:b4:82:bd:28:4f:89:fc:8c:ff:20:93:7f:c2:aa:a9:0e:89:
         8b:6d:3a:11:13:e5:55:b4:40:24:c8:af:71:1d:df:b4:3a:fc:
         50:1f:46:8d:4b:bd:f6:16:4f:93:30:45:84:8e:c3:23:4c:10:
         cc:c7:c8:95:ce:96:b0:53:59:91:04:1e:1b:e8:0a:bc:be:4b:
         e4:37:43:cb:10:b4:88:19:67:dd:ce:13:34:22:7d:51:3b:59:
         e6:8f:a7:26:e4:a3:a0:f6:bc:19:c4:bf:3e:71:c7:e9:96:76:
         37:99:44:a0:8c:eb:6a:3e:88:bb:65:65:eb:c3:74:d9:73:21:
         72:49:26:de:e6:d4:fc:43:3d:88:41:53:c4:22:54:7a:99:79:
         0d:e0:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:21 2026 by rpki-client