Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PmZ5n9XreBFf0cbtyCqeDNEV19U.roa
File:                     PmZ5n9XreBFf0cbtyCqeDNEV19U.roa (raw, json)
Hash identifier:          ijRD/fpOgNOSsEFNPJcgYwezHvBosYbou+Woq2mMZUY=
Subject key identifier:   3E:66:79:9F:D5:EB:78:11:5F:D1:C6:ED:C8:2A:9E:0C:D1:15:D7:D5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06B3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PmZ5n9XreBFf0cbtyCqeDNEV19U.roa
Signing time:             Tue 31 Mar 2026 07:28:26 +0000
ROA not before:           Tue 31 Mar 2026 07:28:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        117.104.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3E66799FD5EB78115FD1C6EDC82A9E0CD115D7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:90:9b:6e:be:41:3d:13:94:13:50:84:c8:
                    67:d6:06:c2:31:a1:85:2b:db:d0:2a:7b:3a:26:6d:
                    49:37:5e:00:9b:ff:62:88:5b:e0:99:d6:15:8c:90:
                    d1:ff:c1:b1:a0:c2:1d:b0:ef:c0:b0:1a:51:af:8d:
                    e5:b5:3e:cf:2e:75:89:e1:ed:41:7d:cb:b4:e8:bd:
                    4a:77:c2:86:b9:94:0f:84:af:dd:a7:d5:80:78:02:
                    aa:5a:9d:89:c7:30:29:a4:b6:d4:16:f9:4c:42:fb:
                    67:f4:53:94:a0:4a:9b:5d:a9:86:b3:32:20:0d:1c:
                    94:4e:34:9f:9d:80:1a:eb:5a:c3:24:fd:01:81:ce:
                    7c:4e:7c:ca:8f:92:e0:db:e7:19:17:fe:db:80:db:
                    f2:73:46:94:ad:af:40:02:ad:62:a1:f4:30:31:05:
                    50:6f:2d:c1:a8:db:42:1a:cb:fd:37:80:c9:f5:89:
                    a8:f3:24:8a:24:33:ae:0a:35:09:ba:3f:68:6f:c6:
                    b9:e5:e0:7f:9c:5e:48:92:ca:d0:d5:d1:3a:94:c3:
                    95:b7:13:3e:6a:13:71:80:fe:67:bb:c1:4c:a7:16:
                    2d:dc:09:33:0b:50:f0:94:9e:8c:c6:c1:7d:15:b9:
                    1d:c2:f2:15:4d:55:43:f0:e7:e1:3b:d8:71:74:e2:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:79:9F:D5:EB:78:11:5F:D1:C6:ED:C8:2A:9E:0C:D1:15:D7:D5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PmZ5n9XreBFf0cbtyCqeDNEV19U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:b6:93:69:15:7e:5f:58:a1:b0:59:33:bd:ad:3e:ab:c5:a9:
         cf:97:77:83:9d:d6:94:ff:bf:ed:e1:10:99:22:c1:8f:00:f7:
         8b:73:f0:b9:95:18:a8:6f:42:fe:e9:54:fa:43:d5:59:b5:03:
         15:0a:84:16:ca:47:75:12:6e:23:d0:40:c0:6c:41:f4:4e:8d:
         d4:95:84:ba:21:bb:9a:ee:e8:ee:5a:ef:b5:0d:73:a2:4e:bd:
         da:e4:68:98:33:d0:ae:98:4e:db:02:4b:f7:42:d3:b6:9b:51:
         a6:45:52:52:d9:d0:19:0e:5c:af:62:7c:df:42:b9:db:14:f0:
         de:8a:ea:0a:b4:e1:ea:06:b2:7c:24:2f:74:b2:c2:26:8a:af:
         39:d7:f2:e7:b3:de:87:83:a2:6f:02:3e:d1:a6:c9:84:86:d5:
         4a:8a:7f:17:f3:2f:2e:46:ee:36:b5:0f:30:7e:d7:45:0d:d0:
         c4:88:9a:50:a1:ce:8d:77:a2:c3:03:e3:6d:a1:63:de:09:0e:
         b1:71:21:7a:02:6b:57:d1:71:6f:21:ac:98:10:c1:d2:0a:56:
         ca:53:e2:a5:ca:c1:bf:56:43:10:73:8d:2a:d0:ae:f4:9f:e6:
         d5:a4:b5:00:b2:5e:b4:7e:a0:de:ae:4f:6e:a6:2b:fc:98:1d:
         ad:42:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:22 2026 by rpki-client