Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/_nwR5iPY9WAarwhLlaM-D5bxCzE.roa
File:                     _nwR5iPY9WAarwhLlaM-D5bxCzE.roa (raw, json)
Hash identifier:          QOpN1U/Yz7v71Em0FmUGbOFg6nJ4qEmdCNfkGVoUnHQ=
Subject key identifier:   FE:7C:11:E6:23:D8:F5:60:1A:AF:08:4B:95:A3:3E:0F:96:F1:0B:31
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0680
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_nwR5iPY9WAarwhLlaM-D5bxCzE.roa
Signing time:             Tue 31 Mar 2026 07:27:59 +0000
ROA not before:           Tue 31 Mar 2026 07:27:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        218.219.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FE7C11E623D8F5601AAF084B95A33E0F96F10B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:78:f5:56:0a:5c:e8:ab:24:20:f5:b1:db:
                    1a:07:92:17:eb:75:44:c1:1c:bb:88:b2:e5:6c:8a:
                    df:9e:87:f6:9d:81:66:03:06:d7:8a:ba:eb:64:7a:
                    01:64:89:10:99:2c:cc:a3:28:57:ed:64:d7:22:8b:
                    a8:36:6e:77:5f:ee:63:29:33:07:fe:d1:1e:c8:3b:
                    29:c4:3e:81:df:76:4b:53:88:c8:04:e4:a7:f5:dc:
                    06:8f:d4:10:a5:03:9a:fc:ab:00:96:ef:13:fa:51:
                    3f:f3:26:dd:ad:3c:0d:1c:ad:3b:f9:43:5f:66:1d:
                    cf:b2:e4:9f:05:2a:1f:d5:0f:52:22:c5:24:6d:df:
                    ba:40:06:78:ac:45:88:a3:65:3a:ae:a3:39:f9:27:
                    c8:df:6a:45:81:b5:5c:ed:03:a8:c6:ac:71:9f:b8:
                    1e:1b:c7:cc:c9:15:aa:15:2e:56:e9:b2:7e:33:b2:
                    4d:e3:67:2b:7d:61:fa:05:81:6f:e1:f8:0c:44:df:
                    62:bd:27:57:51:3c:79:04:6a:12:5a:a5:57:39:98:
                    8a:67:99:a3:8c:81:ad:9f:c4:be:8d:17:59:98:9e:
                    9d:5d:72:37:36:79:8c:82:f0:7d:dd:a7:78:92:e5:
                    c5:bc:ed:b8:0e:75:c6:d3:89:33:5d:18:be:c4:0f:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:11:E6:23:D8:F5:60:1A:AF:08:4B:95:A3:3E:0F:96:F1:0B:31
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_nwR5iPY9WAarwhLlaM-D5bxCzE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:44:e9:53:8d:88:be:74:bd:f3:62:48:e4:98:57:23:0a:a5:
         de:96:71:1e:cf:3c:80:e1:e9:df:3c:9f:25:cf:be:26:cc:b4:
         7e:2e:aa:bb:d2:9b:22:8e:68:81:7d:51:d5:6a:97:fb:7a:f5:
         5b:82:86:82:f2:c2:c0:c2:fd:2d:8d:ab:ff:bf:29:5f:d6:c1:
         4f:e9:43:2f:a2:50:af:81:9a:03:b0:5f:6a:b9:47:2c:e7:f2:
         23:f0:2a:25:de:68:ba:7a:f8:82:e4:d5:01:ae:02:b6:5a:41:
         ce:2d:fe:3d:70:4e:1e:6e:0b:a8:10:77:69:bb:97:ee:31:d8:
         43:db:43:68:3f:22:56:91:cd:a8:2f:85:77:20:3b:61:60:d9:
         dc:12:53:da:3e:fa:f2:0e:7c:b7:67:7e:0d:a8:4e:2c:46:e8:
         42:39:81:5a:1e:35:5b:a6:fa:f0:21:87:0e:81:58:20:93:83:
         e6:c9:d7:47:f2:dc:71:96:14:a6:f2:42:7e:8d:4e:3f:7e:16:
         0b:3c:c2:d1:66:8f:0c:43:85:25:4f:a8:50:12:23:4c:29:e7:
         4e:bd:5c:fc:c2:0d:3e:14:9f:b2:57:35:d3:4b:67:72:37:8d:
         8a:63:18:fd:92:83:f4:69:7a:43:3d:85:6b:4b:99:64:da:fa:
         91:61:d2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:46 2026 by rpki-client