Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Wu0U1uwvUdDLzWKo6qjtAMA5jHc.roa
File:                     Wu0U1uwvUdDLzWKo6qjtAMA5jHc.roa (raw, json)
Hash identifier:          Vxl7F9r6lFaTyq7kVeRHwt61/gYZ2pcK8rMdmvy00PU=
Subject key identifier:   5A:ED:14:D6:EC:2F:51:D0:CB:CD:62:A8:EA:A8:ED:00:C0:39:8C:77
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0668
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Wu0U1uwvUdDLzWKo6qjtAMA5jHc.roa
Signing time:             Tue 31 Mar 2026 07:27:47 +0000
ROA not before:           Tue 31 Mar 2026 07:27:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5AED14D6EC2F51D0CBCD62A8EAA8ED00C0398C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:58:5c:2a:a5:4a:22:3d:28:cc:b3:61:1a:
                    ce:85:d3:d1:af:29:01:84:80:02:e2:72:c0:9c:7d:
                    e2:a7:85:8e:59:91:57:a3:85:6f:45:49:75:62:ab:
                    ec:1b:67:38:69:6b:d9:05:6f:e7:13:db:62:ff:16:
                    12:07:77:e5:7d:68:a1:5e:55:77:72:a0:96:d9:83:
                    75:35:2d:40:af:e8:75:c4:c5:c0:d8:5b:97:10:5c:
                    1c:2f:ed:60:ee:a7:a1:75:6d:4d:23:fa:65:d7:0e:
                    b7:62:1f:aa:ea:99:a1:3b:48:b5:f1:48:9a:e0:99:
                    5c:5d:51:60:90:74:52:66:dd:ea:64:a6:34:70:15:
                    a0:73:67:e1:4e:34:01:91:c2:da:e0:4c:d9:a6:ae:
                    f7:26:6f:2d:cb:56:74:63:9a:46:86:5c:ce:ae:35:
                    ab:f2:eb:9e:99:9e:cd:bf:2a:b9:f7:f3:c0:bc:67:
                    f6:ab:1b:23:bd:b1:91:45:78:e1:7b:f4:72:5c:56:
                    2e:f8:42:70:cf:7a:a3:07:7d:4f:95:74:8b:71:c2:
                    18:14:47:a5:62:da:2b:f0:36:b6:99:26:42:a7:d6:
                    ae:cc:2e:8e:37:ab:8b:86:56:25:8e:85:fe:c2:4d:
                    af:47:56:fd:94:2f:69:d4:d6:03:27:7f:4d:50:cf:
                    5b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:14:D6:EC:2F:51:D0:CB:CD:62:A8:EA:A8:ED:00:C0:39:8C:77
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Wu0U1uwvUdDLzWKo6qjtAMA5jHc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:f7:1d:77:a3:d5:69:81:c7:d9:22:0b:1e:f6:3c:87:b9:
         04:38:90:1c:c2:40:f9:3f:7b:f0:20:ed:eb:8c:48:19:e1:7e:
         ec:a3:f9:17:91:b5:89:a7:4b:72:8a:41:72:a3:17:24:9c:6d:
         33:8e:d2:f9:22:1a:b9:44:51:a5:5d:22:23:a6:ab:07:c1:f0:
         59:05:73:ce:b5:38:9c:88:61:d7:e9:41:01:ed:3c:30:7a:9c:
         e0:a4:0b:10:ba:99:60:38:cf:58:2d:e1:b2:04:b8:b6:2e:c5:
         f9:cc:0a:8d:0b:10:07:26:c1:63:2f:c6:fe:5d:1e:88:a4:4a:
         8b:88:1f:ba:50:a1:86:02:38:1a:c2:1d:34:c6:2e:05:49:8c:
         0e:98:98:98:15:a4:9d:c6:06:0a:1a:e8:34:8f:2a:a8:6b:9c:
         c1:1c:95:16:dc:66:d5:c1:43:37:87:8d:38:fd:f5:3c:f5:a7:
         0d:98:d8:4d:39:cb:bc:b3:05:54:f6:8d:a7:92:4f:2d:f3:68:
         47:a2:87:20:b3:b7:8c:ca:15:9a:28:44:78:fe:93:e0:c9:9d:
         2e:04:4d:87:3b:fb:89:3b:b9:33:96:77:50:75:bf:9b:a9:16:
         a4:d4:58:7a:d4:ec:bc:84:95:68:53:1a:50:9c:7d:ca:81:ee:
         75:a1:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:17 2026 by rpki-client