Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/q9_LUlPCHiXj2QbF7knN2XlP4I8.roa
File:                     q9_LUlPCHiXj2QbF7knN2XlP4I8.roa (raw, json)
Hash identifier:          xLXXyrr8t6pnmp7R8J1zvvWq9vout46S4lQxvweUPl8=
Subject key identifier:   AB:DF:CB:52:53:C2:1E:25:E3:D9:06:C5:EE:49:CD:D9:79:4F:E0:8F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0697
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/q9_LUlPCHiXj2QbF7knN2XlP4I8.roa
Signing time:             Tue 31 Mar 2026 07:28:13 +0000
ROA not before:           Tue 31 Mar 2026 07:28:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        59.85.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ABDFCB5253C21E25E3D906C5EE49CDD9794FE08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:31:c3:8b:4c:bc:1b:c9:c4:7b:12:8f:d7:
                    65:0b:14:5d:18:73:00:15:0b:6d:11:b2:c7:88:58:
                    af:88:2c:8a:a1:69:82:b2:bf:31:e8:42:65:1d:12:
                    23:5c:d8:d3:4b:ae:7b:dd:5b:15:a0:66:aa:8b:4a:
                    01:b7:8b:1d:9a:cb:e8:21:85:40:e7:7a:49:44:14:
                    62:d1:9b:5b:f6:25:37:0a:48:a4:7d:f9:59:f0:7f:
                    e5:42:b6:1e:4a:b7:fe:83:85:02:c9:5b:44:63:bf:
                    8a:d7:47:4d:ff:25:67:48:95:35:78:90:a4:d1:43:
                    1b:18:54:12:bd:39:d1:8d:6c:a2:48:77:d6:01:a6:
                    6d:d2:37:97:1c:3a:75:b1:05:c1:04:36:ba:53:75:
                    9d:a5:ae:d8:e5:50:5b:db:23:8f:09:b2:1d:7e:d4:
                    b4:85:a4:e7:9b:a2:31:36:41:f5:e4:f1:53:f9:00:
                    37:44:26:29:b2:0d:ae:80:be:8c:30:cc:a0:92:e4:
                    64:aa:10:0c:03:97:35:64:6f:1c:e9:a3:6d:54:10:
                    28:87:db:b6:4a:63:7e:17:ab:ab:66:6b:e2:f7:f6:
                    1c:6d:9e:2a:e1:66:7e:46:2b:fe:2d:24:e0:69:f4:
                    73:ec:5f:e4:5f:b3:5b:9a:8a:72:43:e5:c4:09:3d:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:CB:52:53:C2:1E:25:E3:D9:06:C5:EE:49:CD:D9:79:4F:E0:8F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/q9_LUlPCHiXj2QbF7knN2XlP4I8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:ea:9a:30:e7:c3:bc:5d:cc:7d:5f:71:15:dc:48:90:d8:a7:
         1c:20:d6:30:a0:b2:54:94:db:71:19:2b:06:41:60:50:c7:8e:
         a3:b4:47:f3:48:f0:de:73:08:89:47:0f:41:6a:7f:43:05:8c:
         f0:ff:7b:ed:49:2d:ea:ac:10:ec:5c:ab:11:de:75:9f:d0:ac:
         15:c5:2e:95:18:e4:49:0b:d6:9a:7f:62:fe:f5:5c:35:ad:fa:
         55:12:fe:18:06:dc:32:82:b7:b4:48:f8:ea:72:26:00:39:e5:
         fd:1e:d8:24:bf:db:20:e8:e6:37:2a:ec:97:43:e5:85:71:01:
         7e:3f:55:b8:e1:8a:01:cb:57:10:ba:71:bd:98:c6:97:40:42:
         61:69:7d:18:d3:20:bb:1b:82:60:0e:38:4e:fc:95:84:b5:b7:
         e3:66:4f:49:6e:98:d8:01:45:bc:5f:8d:b8:a6:ed:d8:52:08:
         2f:b1:b5:36:44:4d:38:19:43:f2:50:76:c4:e3:da:9e:e4:76:
         05:56:28:f1:0d:ea:86:bd:46:e5:47:bf:d7:24:3e:21:0a:77:
         5d:f7:54:9d:9e:63:f4:08:e9:b1:35:2e:49:9b:ad:e8:aa:75:
         f3:fb:f0:0b:03:82:55:8c:92:d3:35:83:0b:3b:9c:ba:a4:53:
         7b:09:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:36 2026 by rpki-client