Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/QDoG2O-yfOesnc4cIMJufcO9Rbs.roa
File:                     QDoG2O-yfOesnc4cIMJufcO9Rbs.roa (raw, json)
Hash identifier:          86y3uj3Cx7Sw6GZnLUuy/GintAFhK3k37FXwuCwqPmE=
Subject key identifier:   40:3A:06:D8:EF:B2:7C:E7:AC:9D:CE:1C:20:C2:6E:7D:C3:BD:45:BB
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       065C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QDoG2O-yfOesnc4cIMJufcO9Rbs.roa
Signing time:             Tue 31 Mar 2026 07:27:40 +0000
ROA not before:           Tue 31 Mar 2026 07:27:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        120.136.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=403A06D8EFB27CE7AC9DCE1C20C26E7DC3BD45BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:7f:4e:74:5b:3b:cb:2a:ee:f5:34:3c:03:
                    ac:8b:de:23:3d:ee:cb:ed:22:e7:24:b0:ff:7f:ad:
                    96:e6:8d:0d:0d:0f:2b:f8:91:16:9f:b8:3a:95:f4:
                    7e:dd:fe:a8:c3:ce:0e:55:ea:2b:4e:59:c8:aa:a7:
                    aa:db:23:32:e9:44:da:57:3b:90:db:d7:86:44:7e:
                    eb:8b:e1:0b:d4:99:b3:99:7e:92:3e:80:d7:c6:95:
                    e9:2d:93:34:dc:ca:e1:37:e6:85:fb:94:af:a7:aa:
                    33:a4:44:9b:44:2a:bd:fb:a3:30:f0:c1:5b:ed:34:
                    1e:f6:8c:e5:55:1b:33:b4:c9:04:4e:99:0d:da:9a:
                    c0:5f:23:d8:cc:ad:0a:7e:0b:6c:f1:33:c4:c2:76:
                    2c:dc:55:5a:e8:60:a8:7a:ae:99:c0:a2:8b:b7:c4:
                    11:46:b5:6a:dc:3c:85:62:42:48:48:be:83:db:65:
                    6a:99:9b:98:e8:9b:43:21:e9:47:9a:f6:fd:20:ca:
                    79:47:9f:d9:37:73:45:d1:ff:d3:5e:f8:9a:f8:67:
                    d9:64:dc:b6:6c:27:4c:af:c3:68:ba:71:ae:0e:1e:
                    41:16:21:63:ef:50:ea:e3:8d:5a:49:bd:41:01:29:
                    d3:3d:06:c2:08:fd:8c:ec:6f:cd:58:b2:bc:1a:ba:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3A:06:D8:EF:B2:7C:E7:AC:9D:CE:1C:20:C2:6E:7D:C3:BD:45:BB
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QDoG2O-yfOesnc4cIMJufcO9Rbs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.136.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c2:ae:68:80:c4:f5:55:cf:bb:16:82:b3:66:e9:11:d5:6b:40:
         d9:c3:54:0a:7e:a6:9e:94:c5:f7:67:e8:cc:ff:a7:d5:f4:ec:
         3e:cf:33:4f:bf:35:9e:5c:ac:09:9e:6f:2e:cc:20:ed:ae:f5:
         e4:73:89:a6:27:39:49:ba:a6:1b:3e:8c:ac:ec:f0:8c:d7:cc:
         df:a8:9f:99:d2:14:82:7a:fa:ab:cd:e1:ef:69:8f:2d:dc:55:
         10:e8:f8:49:e6:c4:99:80:a8:2e:16:fd:07:c1:5f:ff:82:6e:
         ac:1f:9a:d9:cc:04:2d:a3:0a:23:5e:5b:6f:be:66:7a:72:c7:
         f9:e7:11:8b:0e:ce:1c:96:b9:bb:e2:8d:58:7c:f3:8b:5c:d3:
         c3:b3:55:70:1b:01:eb:97:5b:d9:03:3f:12:23:78:09:d3:7d:
         23:a5:d5:b3:3c:3b:ab:e3:6b:69:ea:a1:08:36:9b:57:69:4a:
         ba:55:50:d1:8c:47:1b:4f:8b:85:e3:be:3e:f8:75:1d:e4:69:
         93:c5:73:f9:12:a8:16:ae:16:d3:c2:2a:66:1e:02:ec:cc:c5:
         8a:13:bb:9a:24:07:03:e4:e8:cf:e2:37:87:25:36:53:f8:f8:
         69:62:e0:dd:ea:23:b9:3e:c7:17:5f:52:31:53:7f:e1:33:d6:
         03:1e:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:53:21 2026 by rpki-client