Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/jiPRf_NTC4nFP2XAqOgKw9sFlpQ.roa
File:                     jiPRf_NTC4nFP2XAqOgKw9sFlpQ.roa (raw, json)
Hash identifier:          ZCshnTKqyfOao+agx37tkbHFFrdK43AWCJm2Vp0nXlM=
Subject key identifier:   8E:23:D1:7F:F3:53:0B:89:C5:3F:65:C0:A8:E8:0A:C3:DB:05:96:94
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06B0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jiPRf_NTC4nFP2XAqOgKw9sFlpQ.roa
Signing time:             Tue 31 Mar 2026 07:28:25 +0000
ROA not before:           Tue 31 Mar 2026 07:28:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8E23D17FF3530B89C53F65C0A8E80AC3DB059694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:9c:21:76:95:fd:7f:0f:ce:f8:dd:b6:1c:
                    35:a6:50:fd:c0:6d:6d:f6:29:12:9b:3c:02:f8:01:
                    4e:f9:b8:91:ee:47:12:70:37:9e:62:97:98:72:6b:
                    1c:98:48:2c:f9:fe:18:e3:7f:47:17:56:40:6b:fc:
                    d4:64:a0:02:d6:b4:ab:ee:85:41:52:0e:49:8b:8f:
                    fa:29:05:6c:42:fe:77:b9:63:a5:f7:36:f0:fb:38:
                    7a:e9:4d:83:16:c6:61:2d:af:70:d1:92:ef:5b:ea:
                    dd:88:10:3d:b7:29:85:81:47:13:63:ef:55:85:1e:
                    04:16:07:21:13:c3:a4:08:ab:8c:fb:19:d7:ae:14:
                    85:ca:2c:ee:38:a0:f5:bf:5f:f7:13:b2:10:1a:b7:
                    ea:e1:1a:c4:d8:6e:7a:17:55:4e:d5:60:27:3b:85:
                    12:45:46:98:37:c5:a1:00:fd:94:e6:ca:b7:65:3c:
                    b5:99:83:ab:13:11:87:96:4c:a4:c3:e2:5b:a1:28:
                    80:f3:b0:f2:5a:75:a7:31:13:f7:cf:73:9c:76:cc:
                    70:07:bb:57:83:ab:fc:a2:6b:35:05:31:aa:dc:68:
                    43:4f:b7:c3:ba:42:90:f0:42:b2:04:73:ee:41:ba:
                    8f:8a:08:2e:4a:9b:e0:6d:92:5c:02:9f:d1:ba:6f:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:23:D1:7F:F3:53:0B:89:C5:3F:65:C0:A8:E8:0A:C3:DB:05:96:94
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jiPRf_NTC4nFP2XAqOgKw9sFlpQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:3e:ad:1f:19:5d:a9:4e:70:03:45:db:ca:6c:37:b1:10:
         99:1a:1d:58:39:fd:e3:ea:94:79:78:7b:4b:1a:6c:05:af:2b:
         19:44:55:2c:32:3f:73:b9:52:b6:7c:4b:6a:e4:28:07:15:b7:
         77:92:08:5a:58:17:a8:65:1d:26:6e:1f:67:bc:2b:90:13:41:
         15:4b:82:3e:a6:8b:7b:58:8d:8a:91:6c:e7:86:11:2a:9e:9e:
         e2:d6:bf:96:aa:00:9d:1c:88:02:82:cb:24:27:e6:e7:78:d9:
         a0:ae:9f:f5:03:37:41:b8:2a:e6:88:92:64:d9:43:63:45:40:
         09:1e:f9:bb:b5:f2:14:9c:b3:c0:27:52:12:93:7e:43:05:19:
         68:eb:9e:83:1c:18:b7:d4:cd:cc:6a:36:9a:a7:3c:52:0a:db:
         dc:f7:82:b7:85:32:71:60:4f:37:e7:6b:d8:eb:c7:7b:e2:e3:
         a8:5e:9e:36:c8:94:62:d9:0b:12:dc:e1:a3:e0:cc:0e:a8:76:
         de:8f:47:2c:70:60:4d:54:7e:b6:10:c8:ed:b1:3c:00:63:0e:
         92:93:84:7c:1e:53:1a:cc:13:e2:25:6e:91:fe:6d:40:1c:00:
         dc:be:2d:9c:fa:7b:20:4a:94:78:12:84:8a:65:24:e2:de:c2:
         80:1a:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:49 2026 by rpki-client