Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/o_0Tl9eELtn_D_5dKMnu5ngeOMM.roa
File:                     o_0Tl9eELtn_D_5dKMnu5ngeOMM.roa (raw, json)
Hash identifier:          4EyfW9tY11TDlt2jV6HXi1uiifb4/6jAE3wAVyv5yQk=
Subject key identifier:   A3:FD:13:97:D7:84:2E:D9:FF:0F:FE:5D:28:C9:EE:E6:78:1E:38:C3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06A2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/o_0Tl9eELtn_D_5dKMnu5ngeOMM.roa
Signing time:             Tue 31 Mar 2026 07:28:18 +0000
ROA not before:           Tue 31 Mar 2026 07:28:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A3FD1397D7842ED9FF0FFE5D28C9EEE6781E38C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:7c:6a:3d:df:0b:33:13:b1:69:f1:31:64:
                    13:b8:ad:1e:0d:a1:af:e0:ca:d5:0e:ac:24:65:fc:
                    33:ac:a9:f2:3d:b4:ea:13:85:4f:ef:ee:8e:12:9c:
                    18:7b:54:4f:9a:b9:b8:2d:7b:15:34:f6:a0:a2:4e:
                    4e:7b:36:f0:85:06:e8:1d:fb:e2:de:22:58:79:22:
                    60:45:70:4d:7b:b4:ff:28:ca:18:b3:27:a4:f3:27:
                    e6:8b:2a:95:4b:4b:e5:1b:8b:83:6d:3c:77:94:89:
                    ed:5e:2f:bf:e0:80:a4:4c:21:8f:fe:b7:12:4e:9e:
                    4a:87:26:f9:a3:4e:30:70:c2:22:15:f8:46:b1:c8:
                    d4:3f:11:22:d4:77:96:03:45:af:ef:94:a9:66:2f:
                    e2:fb:e0:e6:9f:5c:19:ed:54:4b:11:e9:87:7e:c0:
                    f3:33:e7:d3:0d:66:81:62:d9:b1:3d:59:70:22:74:
                    6b:f6:bf:85:41:32:8b:a1:4b:d0:b4:b2:1e:41:c4:
                    ba:1f:b2:77:d8:b4:39:34:75:5c:17:48:96:e8:f4:
                    09:8f:d7:7d:59:f7:5c:1b:2e:c3:d7:1a:00:95:75:
                    cc:7e:11:7f:6c:74:4b:6a:14:ef:f0:ab:e7:65:fb:
                    6e:5c:d6:7d:89:ce:2d:cd:d2:89:81:30:01:8d:68:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FD:13:97:D7:84:2E:D9:FF:0F:FE:5D:28:C9:EE:E6:78:1E:38:C3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/o_0Tl9eELtn_D_5dKMnu5ngeOMM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:0c:b3:b9:a7:28:39:4a:c0:15:6e:a0:c1:25:16:7c:ce:
         09:c9:d0:c6:d0:9e:ed:de:16:f5:fa:57:c7:76:f0:64:54:3d:
         2f:3c:0e:4b:36:56:7b:11:33:bd:aa:c1:0a:a0:55:6b:81:15:
         f9:49:e7:bd:1d:d3:f7:82:0e:03:6f:63:66:b9:72:16:71:d3:
         18:dd:5a:6f:30:7c:ab:88:26:da:d5:b0:fc:56:f8:d3:4b:59:
         78:8b:84:43:45:0d:6f:49:69:a1:87:6e:81:7e:70:24:8b:8c:
         c8:84:ae:c4:71:4d:29:fb:b7:f1:3d:d0:95:b1:58:c9:b0:6a:
         83:d7:24:26:de:63:3a:c1:36:0b:0b:d1:2f:21:4a:b2:49:ab:
         88:65:8e:2b:5e:9b:97:88:1a:20:c7:bc:4b:0e:02:76:6d:d7:
         84:50:ba:74:8c:7b:0d:29:85:4e:4f:1e:0a:ed:6f:46:09:37:
         6d:ef:19:c9:00:f4:fa:a1:f6:96:5d:ae:e4:41:4d:8e:e4:65:
         24:30:ca:7b:15:06:31:b2:80:f2:a0:e2:e3:82:e1:26:4b:0f:
         9e:a0:21:ab:09:dd:ba:43:03:62:d3:c1:cb:6f:48:e9:62:38:
         a4:c6:5e:8f:22:79:47:37:a7:ee:bf:bd:b3:1d:ef:f0:ca:ae:
         9d:3e:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:31 2026 by rpki-client