Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/pFIFg0A9sBP51kqcskdH_HMKnFE.roa
File:                     pFIFg0A9sBP51kqcskdH_HMKnFE.roa (raw, json)
Hash identifier:          f41H2uAjXD1p3m3vlLSbrYfl4/MWaZ8RxcJsrdwiwV4=
Subject key identifier:   A4:52:05:83:40:3D:B0:13:F9:D6:4A:9C:B2:47:47:FC:73:0A:9C:51
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0692
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/pFIFg0A9sBP51kqcskdH_HMKnFE.roa
Signing time:             Tue 31 Mar 2026 07:28:10 +0000
ROA not before:           Tue 31 Mar 2026 07:28:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        118.151.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1682 (0x692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A4520583403DB013F9D64A9CB24747FC730A9C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:5a:04:3f:e1:4d:10:09:6c:5b:3b:11:cf:
                    4f:39:37:81:be:e9:62:ee:f1:d6:df:4a:88:1f:4b:
                    cd:7b:5c:56:ea:dc:f1:c7:ae:3e:db:38:dd:c1:9f:
                    0d:06:0a:0d:04:76:5a:35:82:50:88:72:07:92:81:
                    61:fd:9e:ea:ce:3d:23:75:77:a1:12:28:78:4d:23:
                    12:81:99:b9:e8:74:fe:2b:d8:b5:94:0a:52:30:85:
                    55:72:bf:f4:fd:7f:83:bd:1f:07:02:78:c3:b4:ac:
                    4c:c5:66:cc:0c:fd:1e:c8:87:83:75:72:95:e8:4b:
                    21:8c:38:e3:ed:c6:2d:20:a3:bb:3b:a5:60:3f:53:
                    1f:c0:1e:28:56:b5:48:e9:6e:57:8a:0a:43:f9:fa:
                    85:e8:b6:3c:0e:a6:f3:07:d7:fa:c5:36:ff:d5:26:
                    2b:a6:be:83:8f:33:71:da:01:79:a3:e2:26:e4:6f:
                    5b:5e:c1:36:8a:d9:96:24:92:07:3b:8e:42:83:cf:
                    20:73:0e:7a:1c:41:e0:28:e3:47:eb:b6:87:4b:64:
                    98:ba:50:ae:fb:86:77:00:66:c3:ec:d3:45:bb:18:
                    42:5e:2b:75:55:19:ce:c4:ea:81:a7:87:e4:e9:71:
                    68:97:1e:9a:be:7f:7b:29:d6:02:d4:87:08:eb:8c:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:05:83:40:3D:B0:13:F9:D6:4A:9C:B2:47:47:FC:73:0A:9C:51
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/pFIFg0A9sBP51kqcskdH_HMKnFE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:95:2b:fc:0a:8f:03:08:b8:ae:fe:8d:72:7f:59:84:66:36:
         4b:79:ee:8d:4e:ff:0c:53:1a:28:d9:20:fc:a0:c3:a0:0c:89:
         b9:e0:11:81:50:fe:e8:4d:2f:e6:9d:45:d8:ec:c7:58:23:5a:
         8d:30:83:79:c0:6e:c0:e0:bc:85:21:e7:87:42:b6:e3:40:39:
         be:14:e3:ab:fc:07:0b:90:dd:2a:62:98:80:e9:73:40:07:80:
         73:ce:e0:d2:a9:e2:7d:33:21:88:ff:87:e9:e1:be:16:47:f1:
         2f:72:07:f6:61:0a:b8:07:da:0e:6a:92:31:a0:14:20:30:25:
         97:65:8c:e7:7f:a2:70:8c:de:90:b3:ec:fc:78:3b:a4:9f:4d:
         81:05:ce:10:f9:b2:d0:44:aa:f6:3b:ed:39:f2:71:97:1e:66:
         d9:72:72:08:af:bc:60:f0:59:af:19:30:19:14:e6:3b:76:8f:
         8a:a6:8d:35:54:64:d9:85:81:80:e8:f4:d8:34:9c:6d:d2:bc:
         91:ef:b0:30:5e:dc:bd:90:b3:1a:6e:6b:22:b4:fd:b0:40:bc:
         73:fa:a0:b4:3e:b6:31:f6:5a:cc:7e:e3:a3:33:33:49:01:24:
         19:99:09:ee:eb:ad:fb:ad:63:ef:a7:47:25:37:a0:29:e4:89:
         8c:18:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:53:21 2026 by rpki-client