Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/bhb3c8zYdYsP_GfzjeDRqAcalx4.roa
File:                     bhb3c8zYdYsP_GfzjeDRqAcalx4.roa (raw, json)
Hash identifier:          6yGN+bpO0KN7LVuWizOuFGN+/E5FetDcVzGDFuWSQGQ=
Subject key identifier:   6E:16:F7:73:CC:D8:75:8B:0F:FC:67:F3:8D:E0:D1:A8:07:1A:97:1E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0658
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bhb3c8zYdYsP_GfzjeDRqAcalx4.roa
Signing time:             Tue 31 Mar 2026 07:27:38 +0000
ROA not before:           Tue 31 Mar 2026 07:27:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        182.21.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6E16F773CCD8758B0FFC67F38DE0D1A8071A971E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:46:6b:32:5a:9b:f5:15:6d:21:35:ba:f7:
                    c6:28:07:04:7c:71:b3:27:a1:17:63:61:0d:14:97:
                    a3:72:24:bf:03:da:07:9f:f3:b2:af:49:e2:7f:f3:
                    fd:10:8b:57:55:2b:56:a5:29:84:85:45:d8:a9:03:
                    2e:9e:46:de:4d:b1:e1:88:18:82:37:17:f1:16:e5:
                    49:93:28:5e:ea:1c:3e:87:ce:2b:e6:14:ad:04:92:
                    64:10:48:eb:e2:b7:06:81:9c:17:9a:d9:f2:e7:fd:
                    73:e6:cd:40:5c:1f:af:e8:49:6f:29:35:5b:6d:cd:
                    49:b5:53:70:ed:fb:8f:3e:6a:bf:97:f0:bd:d0:f2:
                    b8:20:12:26:ad:52:05:7c:fd:48:c6:37:ae:ac:f1:
                    56:50:1d:41:00:07:63:33:ad:bf:b2:68:fd:76:ea:
                    e3:1d:c3:f0:2a:50:49:c5:5d:1d:be:c8:a6:55:01:
                    86:49:26:e6:eb:8d:03:2c:af:db:9a:89:69:4f:bf:
                    c9:59:ff:88:db:e4:ff:b7:89:3c:63:9b:56:ab:91:
                    68:6c:51:08:24:46:77:72:3a:d0:31:3f:7f:f9:3c:
                    63:a2:6c:d4:2f:bd:0d:11:91:33:73:9b:51:ad:f3:
                    eb:f7:7f:bb:8f:db:13:9e:1a:bd:a2:fd:12:2f:5b:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:F7:73:CC:D8:75:8B:0F:FC:67:F3:8D:E0:D1:A8:07:1A:97:1E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bhb3c8zYdYsP_GfzjeDRqAcalx4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.21.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:ee:52:aa:9d:48:de:8d:58:4e:4e:75:fb:06:1c:16:05:
         96:a3:d6:05:74:87:02:c0:da:72:99:6b:d9:52:20:cd:fd:4d:
         02:32:d6:65:6f:97:78:b7:e4:77:18:bd:d9:8f:0b:9e:09:a0:
         e9:8e:04:7f:78:40:dd:45:3b:02:fb:c1:ce:d9:fa:9f:b4:49:
         0a:40:57:41:4a:5f:b0:20:2a:9b:57:f8:ae:aa:2d:52:d0:55:
         3a:05:0c:07:18:86:f8:35:a8:e5:a4:ed:f8:72:71:ab:f5:34:
         0f:23:d4:e4:62:f0:95:21:fa:2a:c5:85:5f:5c:e2:27:2b:0a:
         72:27:53:f1:03:a7:bb:63:61:27:fa:8a:d0:64:ba:2d:ef:9d:
         94:3c:24:17:e0:43:fc:2c:60:6a:5d:07:23:de:92:c7:f6:2e:
         db:29:a5:27:8a:ac:83:f0:28:a3:0f:8e:b8:3a:72:7c:c5:35:
         f9:3c:e4:0c:89:d7:5e:82:a5:cf:82:b3:55:42:4f:74:88:2d:
         2e:4d:49:7f:72:d9:9b:ba:7b:14:16:1e:23:2d:55:9a:23:b1:
         f3:cc:14:3f:c9:5d:a5:bc:37:fc:f5:53:bf:ad:c7:62:ba:2a:
         33:b1:b8:6f:8d:2e:12:38:f8:4e:65:fb:51:d3:cc:7c:98:d3:
         8d:a9:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:24 2026 by rpki-client