Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/lAICVGLbPE5olFHjiAUdfu0OdUs.roa
File:                     lAICVGLbPE5olFHjiAUdfu0OdUs.roa (raw, json)
Hash identifier:          ix5Lqxb7+DE9XAhR+zFOks4Yxz/T8Cw4B2X5keBsAgQ=
Subject key identifier:   94:02:02:54:62:DB:3C:4E:68:94:51:E3:88:05:1D:7E:ED:0E:75:4B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0676
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lAICVGLbPE5olFHjiAUdfu0OdUs.roa
Signing time:             Tue 31 Mar 2026 07:27:55 +0000
ROA not before:           Tue 31 Mar 2026 07:27:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        42.124.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9402025462DB3C4E689451E388051D7EED0E754B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:13:59:c6:c2:dc:1a:d1:09:c5:88:8a:78:
                    3f:8c:74:38:f7:f7:0e:62:b0:16:d4:f8:0a:6b:3a:
                    cc:56:46:35:c4:78:cb:54:c0:10:74:0f:6d:d1:98:
                    f5:0c:4b:1f:81:85:f1:0b:b4:cc:a3:63:5e:43:de:
                    12:8c:38:5d:60:e2:70:26:25:06:20:d2:d8:7e:df:
                    42:a2:1e:83:8a:df:90:0f:69:d4:b8:8b:1f:17:a7:
                    b1:00:39:c3:0d:6b:4a:2d:8e:87:db:ba:aa:01:ad:
                    f7:bd:a8:92:44:71:e1:5b:d5:a7:62:79:6f:b9:6a:
                    c4:3a:28:a4:6f:76:f1:b8:88:96:b4:9a:b4:44:94:
                    9f:97:7e:4d:4a:3f:70:15:bb:7e:4d:40:ac:ca:79:
                    51:43:1a:8a:29:d9:d4:23:b8:e6:4f:e4:a2:7b:df:
                    f6:55:a6:ba:d9:b7:e4:b9:ea:6a:ab:38:4a:b8:b1:
                    62:be:ef:93:7e:a8:76:e9:83:70:8e:d4:8c:89:67:
                    cc:09:60:04:1e:6c:8b:59:17:b7:ae:e8:65:e4:15:
                    f0:02:11:86:0c:9a:a2:50:56:a2:8b:67:63:53:dc:
                    2a:83:e5:95:17:4c:35:13:7e:2d:23:27:56:d0:09:
                    9c:7d:dd:76:c8:60:12:9b:65:e6:4b:a2:0e:fb:72:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:02:02:54:62:DB:3C:4E:68:94:51:E3:88:05:1D:7E:ED:0E:75:4B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lAICVGLbPE5olFHjiAUdfu0OdUs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:a4:c2:f7:8a:70:6a:4f:7e:ff:dd:7d:ff:fb:31:b9:10:
         3f:c5:9d:8e:70:44:2e:01:68:6d:f5:df:cb:22:6c:f9:2f:b1:
         aa:d3:4f:1e:79:f7:20:66:7a:c5:06:76:47:ca:7a:1e:0e:27:
         42:c8:2e:cc:8e:7e:cf:db:ac:79:98:c0:46:26:06:87:a8:1c:
         77:46:d1:7e:03:33:97:b6:99:0b:0c:43:a2:b1:cb:04:fb:46:
         11:f7:6c:f2:48:cf:e9:65:02:54:07:13:f9:c6:45:4d:ac:a2:
         63:82:41:ed:84:72:ae:94:c5:5e:67:58:00:81:15:d2:5f:95:
         00:ad:b5:0c:ad:c3:78:73:f7:d3:b2:5b:21:00:ff:fb:c8:9f:
         1d:a4:8d:38:e3:94:91:15:75:1a:e3:94:cc:81:45:0b:ae:2b:
         e8:d2:18:18:06:99:10:1b:20:95:c6:c5:e9:ee:f5:b9:f5:e7:
         f4:1f:85:3b:79:40:34:a2:bf:04:d1:a8:03:39:4e:cf:1e:e4:
         11:05:94:84:78:58:6e:b4:c2:e1:1f:f0:82:67:a6:37:43:dc:
         a8:7f:ee:c2:ad:be:56:75:a4:c9:05:cf:5a:7f:3e:46:9e:97:
         35:f5:fc:4e:c3:35:60:e0:de:bb:59:8d:05:34:ed:7f:4a:8f:
         7d:49:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:48 2026 by rpki-client