Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/w5Ro2z7LCKklzs2x_jlEEFlNkjU.roa
File:                     w5Ro2z7LCKklzs2x_jlEEFlNkjU.roa (raw, json)
Hash identifier:          lJLwnbaA09xCQknsgSffFsSeHI7ixfxvrEat33yfXCI=
Subject key identifier:   C3:94:68:DB:3E:CB:08:A9:25:CE:CD:B1:FE:39:44:10:59:4D:92:35
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06AB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w5Ro2z7LCKklzs2x_jlEEFlNkjU.roa
Signing time:             Tue 31 Mar 2026 07:28:22 +0000
ROA not before:           Tue 31 Mar 2026 07:28:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        61.198.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C39468DB3ECB08A925CECDB1FE394410594D9235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:8d:b2:74:9f:d8:f0:a4:58:c7:39:77:7d:
                    28:f8:60:9d:40:c6:3a:f5:1d:d4:ac:84:9b:d3:ff:
                    7e:f7:0b:fd:0d:23:90:3d:da:6a:07:d2:92:bc:5a:
                    3d:02:17:f6:02:cf:1f:0e:7d:ec:82:10:7d:67:86:
                    9f:c7:3c:fa:bf:cf:7b:20:ad:7b:7d:3d:e8:e1:b0:
                    46:3a:2a:fe:25:67:da:07:a0:7e:55:17:5d:33:b5:
                    a3:12:9e:71:5c:95:57:0c:fd:6a:7a:4d:5c:f6:1c:
                    1e:58:59:55:57:3b:b1:e7:0c:ef:69:06:f5:c9:54:
                    02:9d:e6:81:55:7f:f2:ef:9c:d9:9d:b0:66:f0:f3:
                    e8:cb:13:bb:4e:99:f4:92:ce:cf:d6:d0:c9:4f:d7:
                    97:a5:85:a7:6b:5c:2a:29:4e:c3:6f:ad:7c:33:d1:
                    01:3f:fa:75:3e:96:a0:e2:fa:be:55:66:fb:85:52:
                    ea:7d:cd:7b:0e:d6:09:7a:e8:5d:31:01:13:48:e7:
                    f9:88:dd:7e:75:d1:f6:1c:4a:c9:c7:17:40:b3:b0:
                    95:8e:53:33:80:50:24:ab:c1:a6:16:66:e0:b0:cb:
                    73:5e:e7:22:2d:47:c7:4b:1f:74:27:57:4c:aa:69:
                    31:fb:6f:d9:54:1d:1e:49:2f:6f:82:90:c2:0a:02:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:68:DB:3E:CB:08:A9:25:CE:CD:B1:FE:39:44:10:59:4D:92:35
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w5Ro2z7LCKklzs2x_jlEEFlNkjU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:23:58:13:52:8d:82:29:b5:e1:b9:b8:6d:2f:f5:40:26:96:
         93:cd:b1:3e:7d:11:f2:a5:0d:0f:f1:1f:50:3d:e4:ee:92:0f:
         83:26:ad:b5:34:f2:1d:bb:32:7b:71:e5:ca:6c:d1:b4:85:b1:
         3e:92:b8:b7:f6:56:68:66:63:6d:99:30:ae:f1:4b:c7:d8:dd:
         53:0e:22:17:c3:b0:49:1e:e8:8d:28:b9:45:6e:98:96:0a:48:
         52:07:f1:dd:ff:5e:90:e6:41:8c:ec:9d:68:9c:bb:63:c1:06:
         9d:0d:78:02:fa:3f:e5:87:85:79:69:5e:3d:70:0c:19:4c:96:
         26:14:f8:f2:05:19:70:d9:88:c6:f4:5b:86:79:df:5a:fa:91:
         fd:5c:61:98:9d:7a:16:f4:53:8d:d4:13:07:d4:88:2f:93:f6:
         7a:f2:1a:01:c6:a9:f9:92:e9:be:34:44:f6:45:b2:f7:38:f5:
         8f:e9:f8:1e:98:87:75:8e:d7:d2:2c:58:dc:f0:d2:08:de:c7:
         f5:03:3b:b9:0d:a5:42:fa:f5:73:b3:b9:ca:14:8c:14:a3:27:
         eb:b8:59:ca:52:39:35:c0:0b:6d:fd:98:26:e3:54:08:4f:ed:
         0b:34:29:99:5a:24:7e:1f:3b:3a:86:24:cf:8a:70:67:e4:19:
         e5:16:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:34:34 2026 by rpki-client