Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/r7dssIlN3-9wnIgTzp-6xFBO8Bw.roa
File:                     r7dssIlN3-9wnIgTzp-6xFBO8Bw.roa (raw, json)
Hash identifier:          S2ffH6GzhuLGbrzyyJNCJmGJGQSazRS8frfh/5Sd9dw=
Subject key identifier:   AF:B7:6C:B0:89:4D:DF:EF:70:9C:88:13:CE:9F:BA:C4:50:4E:F0:1C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       064B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/r7dssIlN3-9wnIgTzp-6xFBO8Bw.roa
Signing time:             Tue 31 Mar 2026 07:27:32 +0000
ROA not before:           Tue 31 Mar 2026 07:27:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        112.140.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:27:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AFB76CB0894DDFEF709C8813CE9FBAC4504EF01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:23:d1:5f:d9:6c:23:de:90:d6:86:1b:e5:
                    94:4c:3f:08:cc:73:ed:ab:18:a8:96:79:fe:6d:25:
                    25:46:fc:99:0d:f9:ab:39:28:12:48:d7:e7:c9:a4:
                    26:f6:80:f8:99:ab:4c:bd:d2:01:4e:b7:4b:91:38:
                    6c:50:31:f0:69:00:7c:c6:37:ce:58:6a:63:29:0c:
                    fc:b1:71:b1:27:43:a7:67:fb:38:2c:9f:a6:77:e0:
                    68:77:b7:3c:fa:02:9f:11:1a:72:03:4e:65:57:64:
                    a4:fd:e9:65:21:ce:10:13:8a:17:eb:f1:b0:36:17:
                    3c:8d:c6:ac:09:ed:01:d6:9d:80:d4:41:1d:5f:86:
                    f6:52:81:a8:24:39:90:84:1b:0c:f3:ed:ed:9d:0a:
                    ad:fb:d6:92:6a:ae:67:ff:81:e1:65:cc:58:8b:84:
                    a1:d6:35:d9:83:4e:29:fe:1b:d8:1d:a9:f7:e7:dc:
                    ad:d7:19:d5:cb:ed:59:c3:dd:c0:49:11:72:f2:1e:
                    a5:74:d4:ec:52:ff:de:25:d7:de:38:f0:85:47:2c:
                    21:59:b6:4d:b3:cc:d7:5f:3c:4c:7c:c1:65:f5:d0:
                    af:ab:3d:52:83:92:9b:94:f9:d9:e3:45:29:28:31:
                    ec:a3:d8:04:4b:8b:52:49:bf:a5:3f:bb:81:cc:5d:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B7:6C:B0:89:4D:DF:EF:70:9C:88:13:CE:9F:BA:C4:50:4E:F0:1C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/r7dssIlN3-9wnIgTzp-6xFBO8Bw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:e6:36:40:79:44:7e:9a:54:02:e0:61:bd:7a:4b:4e:d8:ac:
         04:49:54:51:36:ac:13:76:3c:44:7e:f0:d6:1f:38:04:8d:3a:
         bc:47:42:36:fd:5d:7b:89:3d:63:75:26:c2:33:e8:5b:48:68:
         75:34:f5:b4:3a:5a:9f:a4:90:93:93:7a:06:2d:6a:10:0a:15:
         35:5e:3b:8a:de:36:54:f1:4b:54:20:f9:da:42:2c:0b:5e:0e:
         e0:ba:04:1e:8b:e1:09:b5:ad:00:2e:45:05:4c:17:8d:ad:b6:
         4e:da:b8:5f:97:50:8b:54:17:ef:ac:5e:33:79:3c:7c:ae:13:
         46:3d:f7:8b:ae:f1:c8:80:64:e9:9d:a3:c3:6e:3e:a3:68:42:
         bf:3d:1b:7b:0b:ed:46:15:7f:a9:d1:58:f8:79:b8:d3:d2:0d:
         05:c3:3b:cc:cb:57:21:45:90:87:a6:34:5c:da:2c:85:b2:c9:
         49:22:74:45:32:67:60:d2:55:f8:62:ed:52:74:d9:f7:6e:69:
         bd:0f:83:b0:68:78:ca:51:15:1c:d4:b5:c6:fd:37:d7:c3:8c:
         fb:f0:0e:25:5d:84:1f:b3:29:ab:6f:c1:c5:4a:64:b0:da:98:
         24:47:1d:6c:e9:32:96:b5:95:3a:ba:d7:74:55:09:75:57:57:
         0d:b0:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:57:02 2026 by rpki-client