Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/igvaJRA-G3yd6pdTA-fgSi9QnJc.roa
File:                     igvaJRA-G3yd6pdTA-fgSi9QnJc.roa (raw, json)
Hash identifier:          K9E9qFz/kUjvYGUZBB+AbFAIfgwoRixb1uRMx863BAU=
Subject key identifier:   8A:0B:DA:25:10:3E:1B:7C:9D:EA:97:53:03:E7:E0:4A:2F:50:9C:97
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06B6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/igvaJRA-G3yd6pdTA-fgSi9QnJc.roa
Signing time:             Tue 31 Mar 2026 07:28:27 +0000
ROA not before:           Tue 31 Mar 2026 07:28:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        116.68.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8A0BDA25103E1B7C9DEA975303E7E04A2F509C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:6f:36:2b:5f:ba:2a:90:bb:d1:18:92:3b:
                    a9:07:01:e8:3f:46:91:79:8e:85:ec:3a:29:a8:3e:
                    d6:9a:1c:c9:35:50:69:ce:5c:d4:9c:dd:4c:d6:c1:
                    32:85:e6:a2:7b:04:c1:b7:4a:d6:0d:d5:34:e3:fa:
                    06:f4:fb:b5:7b:f4:d2:92:45:1a:18:88:2e:79:9f:
                    28:9a:0a:d2:e0:45:e7:a4:8d:fb:c4:64:0e:ea:17:
                    6f:72:75:fb:3b:4a:3f:e9:65:b0:05:9a:b9:91:f2:
                    19:cb:ca:0c:a8:d5:dd:27:28:a5:ad:91:05:21:74:
                    30:44:b2:2d:a1:53:bd:90:dc:f7:19:c4:62:3f:83:
                    70:2e:9a:6d:42:4a:79:a9:62:d2:e1:82:3e:6c:3d:
                    3a:92:7e:6c:16:31:f0:8a:84:ba:1b:fb:16:c7:fe:
                    11:17:82:0e:7d:a1:e1:f8:41:2f:e3:81:06:1d:d7:
                    c7:82:18:34:af:87:f0:19:15:ff:51:47:67:03:f6:
                    06:c5:c5:26:fe:5c:1b:28:77:e2:57:13:bb:b6:7d:
                    92:d3:cd:d7:38:fc:10:37:98:b9:ee:e9:e9:5a:92:
                    d5:ea:77:39:24:3f:e5:a4:4a:76:17:b5:0f:2c:9a:
                    1f:b7:c7:63:55:ff:c1:f7:ac:0c:63:fa:9a:a6:bf:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:DA:25:10:3E:1B:7C:9D:EA:97:53:03:E7:E0:4A:2F:50:9C:97
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/igvaJRA-G3yd6pdTA-fgSi9QnJc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:14:c0:1f:f9:8d:1a:5a:51:3f:bd:87:73:8c:2a:66:bb:
         34:8d:17:e4:7f:51:e1:c5:34:b3:75:bc:68:ea:f7:be:8a:f8:
         00:23:15:aa:4e:f3:87:7d:7b:4d:78:01:f2:ac:21:85:0e:1c:
         57:9c:33:20:7c:5f:c8:e9:ae:c5:8e:25:92:2a:5b:10:cb:be:
         dd:ff:e3:01:b3:b2:fa:bd:5d:3f:76:fe:9c:56:7a:19:4a:d3:
         53:13:08:91:26:28:e3:00:59:aa:8a:fe:cc:ad:5f:46:2e:5c:
         a0:74:c2:42:27:3c:60:93:24:0a:e1:dd:60:39:ae:20:a5:fa:
         2e:55:7a:66:ce:d7:7d:80:04:75:ea:82:a2:7c:27:dc:13:7e:
         54:3f:98:0a:1a:28:44:6a:d9:ea:b2:64:44:06:6f:36:d2:ba:
         8b:16:e4:0d:ea:cc:e3:2e:8a:ca:3a:67:f7:65:f4:3e:01:06:
         84:88:21:52:32:c3:c5:ae:76:8e:c1:31:a4:13:f2:c2:cd:88:
         23:68:7a:e6:c7:8d:e5:c1:19:e4:d0:6c:3e:fe:f6:49:c0:4f:
         f9:08:47:85:cd:af:b4:45:9e:a1:1c:b6:50:8b:b8:58:20:1d:
         3f:1a:0e:1c:e6:2a:12:c4:9c:3c:fb:e8:4a:23:55:ce:6e:84:
         dc:b8:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:52 2026 by rpki-client