Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/cjQIc_vJ_sjuiY0qgFXLcw16a1o.roa
File:                     cjQIc_vJ_sjuiY0qgFXLcw16a1o.roa (raw, json)
Hash identifier:          0tmoJt0j+Ekjws3HBI8HF2L/Zz6vnyF/yz7/D1dBLNM=
Subject key identifier:   72:34:08:73:FB:C9:FE:C8:EE:89:8D:2A:80:55:CB:73:0D:7A:6B:5A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0640
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/cjQIc_vJ_sjuiY0qgFXLcw16a1o.roa
Signing time:             Tue 31 Mar 2026 07:27:27 +0000
ROA not before:           Tue 31 Mar 2026 07:27:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        180.233.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=72340873FBC9FEC8EE898D2A8055CB730D7A6B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:97:c1:8f:c2:ae:88:23:c6:9b:c0:52:78:
                    20:03:ed:8a:19:05:6b:8a:61:b2:7b:fb:73:e5:24:
                    29:61:03:d3:9c:7c:e8:d2:61:36:90:5f:91:75:9f:
                    c1:43:07:e9:c7:a4:71:9b:41:33:20:12:09:0f:27:
                    39:b1:58:bb:93:ce:c3:be:49:1f:9b:eb:fe:4f:d7:
                    55:d5:e7:37:3d:c8:08:a9:f1:6a:31:c1:f3:07:7a:
                    94:db:e3:a0:c1:e6:d3:14:5f:7f:72:b5:d4:52:d1:
                    0b:52:f4:6f:8b:b8:ef:94:a2:c8:5a:39:b3:28:4a:
                    52:d2:bf:74:03:f1:3d:82:5b:2a:97:79:36:c6:64:
                    8f:f4:54:5b:a8:74:74:a5:57:d4:6f:b4:68:f3:1c:
                    c3:6d:27:9c:7b:5f:f5:d9:c8:b9:68:24:f6:c4:45:
                    d9:40:4d:f1:89:61:65:1a:a9:34:69:fd:7d:19:7c:
                    0a:10:01:e2:05:9a:ab:bd:8a:dd:a3:7f:d6:cf:73:
                    f7:b8:61:1f:c6:3e:00:66:d9:91:4d:c3:fd:c1:87:
                    09:a3:3f:f6:70:6f:8e:16:ce:e5:a9:10:07:1e:5c:
                    82:27:a4:e6:56:c2:b6:94:f5:21:db:17:cd:9c:83:
                    fd:c4:1e:be:f2:1d:8d:6c:69:21:1a:d0:17:ac:9d:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:34:08:73:FB:C9:FE:C8:EE:89:8D:2A:80:55:CB:73:0D:7A:6B:5A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/cjQIc_vJ_sjuiY0qgFXLcw16a1o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.233.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:08:dc:e4:af:94:ac:3d:9b:28:e4:5b:64:ba:26:64:85:84:
         8a:8b:d3:5f:1f:0a:d7:33:52:6a:da:b8:d5:ca:87:53:1c:04:
         57:cd:82:be:6c:4f:f9:9a:c7:d3:d5:58:8b:e5:0d:c3:e8:1d:
         34:61:24:39:30:d8:69:30:89:68:1d:a2:fa:1a:5e:83:30:6a:
         6d:66:b0:0a:bd:85:47:56:5c:d9:4a:66:3b:9e:69:e8:be:52:
         f5:29:72:cd:15:32:2a:1e:ae:db:b4:2b:91:50:1d:53:a2:3f:
         24:2b:98:11:1c:74:8e:21:86:90:41:6e:40:16:1b:a1:76:09:
         d8:39:45:4f:3b:a1:44:76:f8:79:76:18:a3:d0:66:9e:bb:8d:
         a8:0e:9e:3e:99:a7:64:66:e8:e2:ef:e5:bc:be:3b:d3:1b:62:
         e1:42:0a:8c:fa:cb:9c:43:56:77:12:d4:ff:88:53:1b:c1:5a:
         59:1d:eb:56:df:07:9d:bc:67:fb:d8:63:a6:e5:d2:66:91:86:
         0c:37:c3:5c:11:db:63:cf:3b:0f:25:e1:3b:68:3d:83:00:ac:
         38:30:df:d8:69:bf:29:d3:aa:7f:43:c3:08:0b:86:2d:c0:41:
         04:ed:36:68:bb:49:0f:92:3c:a3:55:e7:11:76:41:dd:5a:09:
         e8:10:b4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:45 2026 by rpki-client