Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZgLSNDRZnOk8DE0UypDT-uZzgXI.roa
File:                     ZgLSNDRZnOk8DE0UypDT-uZzgXI.roa (raw, json)
Hash identifier:          CXA8ujWkvstJ5mY4iV3ViTL4ZtRird/8Usq0eGTYEE4=
Subject key identifier:   66:02:D2:34:34:59:9C:E9:3C:0C:4D:14:CA:90:D3:FA:E6:73:81:72
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       067A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZgLSNDRZnOk8DE0UypDT-uZzgXI.roa
Signing time:             Tue 31 Mar 2026 07:27:56 +0000
ROA not before:           Tue 31 Mar 2026 07:27:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        116.254.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6602D23434599CE93C0C4D14CA90D3FAE6738172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:18:48:f0:b6:4b:9d:5c:d4:b1:bd:fc:ec:
                    0a:2f:a5:a9:00:62:96:03:db:ec:c0:77:a8:3e:6c:
                    6b:e8:c2:e2:c2:c7:b6:ae:99:36:90:46:69:35:99:
                    e1:8f:bb:52:0d:7b:46:7f:e9:14:29:7a:2a:e1:17:
                    27:54:7e:56:69:dc:ca:58:c9:7a:a2:94:da:98:13:
                    0f:0d:5e:81:39:57:ed:7f:ac:d0:63:17:cf:8c:22:
                    ff:0b:a7:09:ee:43:5f:98:cb:54:5f:20:cd:98:b5:
                    e5:a5:34:02:44:ad:23:d7:8c:40:6b:27:d7:6a:30:
                    e8:9c:5a:3d:56:41:31:85:13:de:ab:fe:23:8b:58:
                    46:ab:ff:a2:2a:4d:bd:9b:7d:91:22:ca:f8:7c:ca:
                    f0:78:11:da:73:88:73:7d:8c:ed:10:17:0a:1d:cb:
                    be:26:91:50:68:69:3e:2d:bb:d2:68:53:de:ad:ef:
                    6e:b5:7b:82:6b:61:34:f8:10:15:ee:3d:cc:3f:d1:
                    35:51:52:3a:dd:5b:f5:6a:e9:20:fb:27:ea:b5:2b:
                    b8:38:68:24:00:74:d0:ef:f4:e2:8a:e3:ba:4c:fb:
                    e6:40:55:15:d4:db:86:d3:67:61:3a:07:0e:47:b5:
                    73:99:6e:52:eb:83:f6:9e:60:6d:f8:f7:60:73:4a:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:02:D2:34:34:59:9C:E9:3C:0C:4D:14:CA:90:D3:FA:E6:73:81:72
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZgLSNDRZnOk8DE0UypDT-uZzgXI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:6f:2b:de:b8:35:e1:43:1d:55:20:f0:d5:25:44:99:2a:
         e3:39:16:b3:56:02:d3:ad:37:2b:71:32:93:13:6e:12:4e:f0:
         f7:b7:b9:f1:0f:cb:42:33:f6:62:01:6c:44:ad:ac:a2:c9:60:
         6a:81:4c:d1:d2:dd:87:b5:69:f2:1f:1a:ea:4a:22:da:c2:c0:
         cd:c8:03:1a:c1:37:fb:20:f5:41:2d:3e:d5:57:21:9d:26:1d:
         b8:98:7b:0d:e0:97:17:6c:68:2b:45:1c:ab:69:51:1a:b8:a7:
         15:55:c8:15:ef:a0:35:fd:da:ec:0f:40:b3:ce:6b:df:ff:f5:
         38:de:ca:34:ab:9e:68:51:00:11:bb:82:09:5b:6d:6c:8e:e7:
         35:95:1f:66:60:56:58:8d:4c:d2:70:7f:60:00:6d:11:bd:4b:
         09:2f:4f:e6:7d:d8:9b:05:2b:26:8b:5e:c6:ef:b8:a8:d4:f3:
         04:f6:26:80:13:d0:0a:89:6f:1a:d0:9c:c3:e6:dd:f2:52:15:
         a4:ab:e3:7e:c2:70:c3:67:ef:98:6a:6c:da:06:bf:35:7e:37:
         f9:3a:3c:17:aa:27:54:fd:37:99:6b:20:16:5e:e6:fd:30:18:
         21:97:f9:b5:1a:43:01:26:1a:92:2f:30:00:6a:9d:c7:56:20:
         6d:85:4c:a1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw
NzI3NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY2MDJEMjM0MzQ1OTlD
RTkzQzBDNEQxNENBOTBEM0ZBRTY3MzgxNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEThhI8LZLnVzUsb387AovpakAYpYD2+zAd6g+bGvowuLCx7au
mTaQRmk1meGPu1INe0Z/6RQpeirhFydUflZp3MpYyXqilNqYEw8NXoE5V+1/rNBj
F8+MIv8LpwnuQ1+Yy1RfIM2YteWlNAJErSPXjEBrJ9dqMOicWj1WQTGFE96r/iOL
WEar/6IqTb2bfZEiyvh8yvB4EdpziHN9jO0QFwody74mkVBoaT4tu9JoU96t7261
e4JrYTT4EBXuPcw/0TVRUjrdW/Vq6SD7J+q1K7g4aCQAdNDv9OKK47pM++ZAVRXU
24bTZ2E6Bw5HtXOZblLrg/aeYG3492BzSsHJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUZgLSNDRZnOk8DE0UypDT+uZzgXIwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L1pnTFNORFJabk9rOERFMFV5cERULXVaemdYSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ0/gAwDQYJKoZIhvcNAQELBQADggEB
AIo4byveuDXhQx1VIPDVJUSZKuM5FrNWAtOtNytxMpMTbhJO8Pe3ufEPy0Iz9mIB
bEStrKLJYGqBTNHS3Ye1afIfGupKItrCwM3IAxrBN/sg9UEtPtVXIZ0mHbiYew3g
lxdsaCtFHKtpURq4pxVVyBXvoDX92uwPQLPOa9//9TjeyjSrnmhRABG7gglbbWyO
5zWVH2ZgVliNTNJwf2AAbRG9SwkvT+Z92JsFKyaLXsbvuKjU8wT2JoAT0AqJbxrQ
nMPm3fJSFaSr437CcMNn75hqbNoGvzV+N/k6PBeqJ1T9N5lrIBZe5v0wGCGX+bUa
QwEmGpIvMABqncdWIG2FTKE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:41 2026 by rpki-client