Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/UaO3YGn56rlKfhc8ELYiaSCO4Cw.roa
File:                     UaO3YGn56rlKfhc8ELYiaSCO4Cw.roa (raw, json)
Hash identifier:          5ZhaM4BnJ6b9GPQ5nBCvQZR+4PoPiEu+guZKCK4Syfs=
Subject key identifier:   51:A3:B7:60:69:F9:EA:B9:4A:7E:17:3C:10:B6:22:69:20:8E:E0:2C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06A1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/UaO3YGn56rlKfhc8ELYiaSCO4Cw.roa
Signing time:             Tue 31 Mar 2026 07:28:18 +0000
ROA not before:           Tue 31 Mar 2026 07:28:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        59.85.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697 (0x6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=51A3B76069F9EAB94A7E173C10B62269208EE02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:c9:ae:b2:b9:d8:90:ba:5f:f1:83:2b:21:
                    6f:29:b4:e4:b8:0b:40:09:1e:e2:4a:1b:5d:d2:93:
                    e1:43:bd:be:3b:6e:7d:bf:29:c4:99:d4:5b:ab:be:
                    fb:4e:68:03:e1:5f:01:70:98:da:4b:0e:09:84:a8:
                    d3:a5:79:b4:80:28:71:55:5c:5d:5d:be:ff:65:c4:
                    c0:eb:ca:70:3a:27:55:cd:28:fc:db:4d:94:13:b7:
                    91:81:69:15:f9:05:b4:02:cf:e3:f6:02:ef:fe:73:
                    fd:21:fa:78:98:ba:06:69:b7:53:18:c9:30:99:6c:
                    94:b9:03:be:b4:f9:81:3c:30:81:ce:12:a4:ba:92:
                    6f:19:00:e1:ba:cd:bc:d2:6c:7d:0f:ab:38:76:d6:
                    4a:59:20:a3:cb:a7:13:85:0c:ea:8d:88:bb:62:16:
                    0d:cb:ae:09:82:fc:36:ec:03:53:56:3c:4e:09:90:
                    47:2d:21:9f:c2:8b:86:a5:05:00:a5:c9:d1:56:f0:
                    71:8b:08:9d:fe:5e:d4:4d:2a:2e:b2:07:ec:64:d7:
                    5f:f1:64:f3:a4:e0:be:3d:fb:d5:fc:6b:cc:42:4d:
                    cd:38:c2:d3:39:8c:7b:2e:53:23:f8:f7:c2:9b:7f:
                    d2:7e:ed:6f:e4:9e:16:31:e3:cf:8c:1e:0c:47:7a:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:B7:60:69:F9:EA:B9:4A:7E:17:3C:10:B6:22:69:20:8E:E0:2C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/UaO3YGn56rlKfhc8ELYiaSCO4Cw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:2b:27:80:5b:d6:96:7a:3e:ca:cd:d9:75:3a:3e:e0:46:
         77:47:e9:c7:2d:97:11:87:d4:73:8a:6b:53:e5:c5:7e:7c:64:
         78:3e:fa:19:db:fd:a6:1a:8a:7d:52:05:6a:6d:1f:65:ce:f4:
         69:65:59:23:8d:7d:c3:22:e9:0f:02:13:a4:d2:30:08:67:78:
         2d:f5:81:85:61:e7:94:12:a5:2c:ab:88:5b:e6:a3:9e:13:a2:
         15:6a:26:e7:83:13:50:3f:cb:59:75:9f:57:5b:eb:d2:7e:49:
         ba:41:2c:cd:71:bf:9d:41:0d:1a:dd:b1:2d:b6:7c:89:29:8b:
         e7:4e:34:da:34:cc:df:6a:34:a8:26:49:00:71:80:ba:a9:62:
         74:df:da:2d:c0:a0:96:a1:4e:0e:9f:23:ff:c5:6f:63:69:57:
         9c:09:9f:fc:90:88:3e:ef:00:97:46:77:ba:17:b8:1c:e6:7d:
         6a:c3:83:84:6c:55:f3:06:db:d7:08:73:4c:1a:8f:45:89:1e:
         4e:ba:1c:0a:7e:b0:85:db:24:80:d6:4f:22:d7:a9:eb:db:0b:
         ea:23:ba:fd:88:47:aa:f7:90:de:db:8c:d9:66:e0:e3:dc:d7:
         82:60:cd:f7:0b:13:38:64:47:77:4c:dd:d6:da:71:87:93:83:
         c1:b4:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:02 2026 by rpki-client