Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/iSmG6zcqsKDZZVKz8cLnArRzZxg.roa
File:                     iSmG6zcqsKDZZVKz8cLnArRzZxg.roa (raw, json)
Hash identifier:          kLathAlxL8HrJxQHq5nE6X0QMHegSCDZV7bxOoEQrUs=
Subject key identifier:   89:29:86:EB:37:2A:B0:A0:D9:65:52:B3:F1:C2:E7:02:B4:73:67:18
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0674
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iSmG6zcqsKDZZVKz8cLnArRzZxg.roa
Signing time:             Tue 31 Mar 2026 07:27:53 +0000
ROA not before:           Tue 31 Mar 2026 07:27:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        59.85.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=892986EB372AB0A0D96552B3F1C2E702B4736718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:8d:fe:9d:b8:9e:88:38:08:b4:8f:f0:4a:
                    cf:b1:0b:86:9e:cd:ac:26:45:03:62:5e:d3:ef:e3:
                    21:fd:81:28:7b:43:ab:65:d0:d4:fd:7f:98:6c:d4:
                    09:97:e1:8b:8e:ef:eb:ce:0d:8a:d8:80:ac:fe:64:
                    60:f8:43:79:3a:dd:2b:c2:d8:c1:1c:ad:20:97:47:
                    33:5a:81:29:c5:28:c1:fb:ed:e2:39:b6:65:6e:b8:
                    7f:93:e6:41:fa:a3:2d:4c:89:22:ad:31:c3:f2:8e:
                    de:b1:2c:15:bb:81:e1:98:fa:51:db:04:1f:a8:e2:
                    ad:c1:3d:a2:36:1e:3e:30:9b:bd:b9:f2:ea:83:e5:
                    f9:2a:80:d6:1e:91:49:06:2b:fd:0e:60:6e:66:96:
                    c0:55:f4:35:13:c9:f3:f7:d5:d0:a5:9c:d0:7d:e0:
                    72:58:fd:1f:b2:26:9b:d8:2a:af:ae:0d:ff:d1:28:
                    36:00:cc:92:2f:39:58:e3:3a:f5:c5:e2:ff:2a:8c:
                    83:9e:ee:45:e9:95:d0:79:0b:9d:9b:2c:c6:c0:cf:
                    a7:ff:f9:db:09:49:10:e3:66:09:c9:76:58:25:22:
                    8c:c4:b8:75:7b:b7:c3:54:4d:6c:17:fe:1b:7b:35:
                    2b:63:a9:99:9b:5b:77:2e:89:69:27:7d:c3:2a:17:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:29:86:EB:37:2A:B0:A0:D9:65:52:B3:F1:C2:E7:02:B4:73:67:18
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iSmG6zcqsKDZZVKz8cLnArRzZxg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:48:c3:43:83:7d:46:b8:ef:92:19:05:8a:74:4a:03:5e:43:
         2e:c2:7a:36:df:e3:ac:81:aa:2a:53:2d:74:7a:0b:88:ec:dd:
         f6:3c:66:dd:1b:a2:28:fe:d2:b1:65:09:04:bc:16:cf:37:55:
         b3:ab:d2:16:b8:2a:a7:17:0c:fb:7e:75:89:92:9c:25:cf:5f:
         42:18:05:2a:7a:b6:64:3e:02:46:77:3e:0b:7f:5f:59:fc:bd:
         fa:7c:a0:ab:7a:ea:d6:b5:e4:9d:8a:26:17:a6:bd:d0:da:4b:
         86:39:fe:87:ba:aa:be:21:a6:d8:f3:c1:47:dd:f1:54:de:3d:
         94:83:c4:2d:25:3e:92:11:c2:03:08:5a:d5:0d:01:1d:f5:5e:
         21:69:31:ad:f8:f8:15:5a:00:ca:6b:1c:0e:e0:ce:57:fd:bb:
         d6:fc:f6:5b:33:ef:f3:b4:f1:87:51:c5:12:3d:7c:81:aa:0f:
         85:22:6a:f4:15:61:bd:d4:00:9b:79:85:b9:fb:6e:c1:d3:ca:
         06:ae:69:2e:16:36:af:f1:30:a3:47:02:e4:14:95:d7:33:c0:
         f5:ac:94:11:35:f2:7e:b5:21:80:4e:a0:17:21:e8:f9:56:90:
         de:ef:97:0c:8a:65:0f:99:7c:e2:20:8a:b3:15:11:ab:dc:a9:
         d8:78:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:29 2026 by rpki-client