Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/VTD0BdG5vgcJruauaCXn_gpwNso.roa
File:                     VTD0BdG5vgcJruauaCXn_gpwNso.roa (raw, json)
Hash identifier:          kkblC4gGH2jTtIJGqa81cl14Ngbi8rrvKLGCeXPsg4U=
Subject key identifier:   55:30:F4:05:D1:B9:BE:07:09:AE:E6:AE:68:25:E7:FE:0A:70:36:CA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06B4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/VTD0BdG5vgcJruauaCXn_gpwNso.roa
Signing time:             Tue 31 Mar 2026 07:28:27 +0000
ROA not before:           Tue 31 Mar 2026 07:28:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5530F405D1B9BE0709AEE6AE6825E7FE0A7036CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:e7:81:0d:56:bc:61:cf:f1:65:bb:aa:66:
                    39:e7:53:1f:b6:da:cc:23:e1:6b:5b:f1:a9:dd:57:
                    6c:e4:9a:53:e1:dd:a3:07:2c:ab:9e:62:2d:47:58:
                    1b:fd:b8:1b:17:29:4c:aa:23:4e:b7:c4:52:6a:51:
                    28:e6:33:53:35:aa:49:a7:8d:4a:75:56:c7:94:22:
                    20:eb:a9:8d:92:e1:26:f0:31:28:52:8d:c3:80:3f:
                    71:c0:14:32:7c:6e:7e:df:60:54:fc:87:f2:45:f1:
                    fd:ba:4a:9f:5f:61:cb:6f:e3:2f:62:83:4f:e6:4f:
                    31:3e:85:7e:2b:af:6f:b4:c4:f7:8f:58:c0:dc:76:
                    2d:64:09:0f:dd:30:5f:c3:99:e3:90:6d:9f:74:7d:
                    18:3e:95:df:43:cb:e6:5d:f8:42:50:ae:db:73:12:
                    9d:c7:25:a5:aa:ac:e5:60:01:99:1b:13:bb:04:87:
                    0a:04:2c:4e:d5:ac:5f:35:3b:7c:85:f3:53:28:0c:
                    31:6e:de:81:5a:aa:c3:c7:33:6a:ec:c6:f2:c9:68:
                    35:9a:29:4b:9a:be:a0:db:cb:70:7d:34:92:77:24:
                    85:c4:f1:66:42:59:75:36:e4:63:26:c1:9e:d2:87:
                    7e:75:0a:3c:8a:18:2a:56:db:6a:d3:3d:85:19:01:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:F4:05:D1:B9:BE:07:09:AE:E6:AE:68:25:E7:FE:0A:70:36:CA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/VTD0BdG5vgcJruauaCXn_gpwNso.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:d3:71:34:63:b3:06:7d:32:ff:15:a9:6d:b2:2c:c6:0c:29:
         e0:fe:7a:a8:e5:06:08:1d:92:d6:65:c3:bb:b0:18:69:af:01:
         f3:e6:6d:62:df:36:e0:02:37:0e:ba:34:01:17:be:df:23:c6:
         09:b4:c7:6c:61:da:83:a6:b8:18:21:4d:88:54:32:2d:d5:69:
         63:44:f0:c2:fe:67:d0:0b:78:be:d4:c3:de:5f:79:09:f3:d0:
         00:9a:4e:64:7b:32:58:fc:ac:47:4d:83:6b:10:9a:bf:d4:43:
         4a:8f:44:8b:14:34:8c:1f:1c:32:4a:86:7b:45:5c:cf:52:a0:
         d7:de:c3:54:87:63:cb:ff:be:9a:93:15:82:d2:06:93:82:95:
         f5:6e:c3:29:54:de:4d:2c:2a:c4:9b:63:e7:87:5c:fa:3a:3b:
         e2:7f:8b:04:40:e7:ee:c6:a7:d4:8e:21:94:12:15:b7:b3:c6:
         ba:03:cf:6b:9f:0d:82:99:62:29:66:64:82:e0:9b:70:ef:ba:
         f7:4c:3e:c4:df:5b:63:fa:83:c2:49:a4:92:01:b1:a7:62:11:
         22:d4:3f:aa:76:ca:4d:cd:68:51:c2:fb:a7:97:16:f1:96:a4:
         c2:b4:16:f7:ea:5f:1f:ed:1d:36:5d:70:2e:f3:7a:7f:e8:6c:
         bb:b5:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:22 2026 by rpki-client