Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/PBGyJPtLoppUAiGh4BjWSGpHRzo.roa
File:                     PBGyJPtLoppUAiGh4BjWSGpHRzo.roa (raw, json)
Hash identifier:          TViZY5fuqRTSGHGjmick3MIM/hhGeu73V4KGXwSG9vs=
Subject key identifier:   3C:11:B2:24:FB:4B:A2:9A:54:02:21:A1:E0:18:D6:48:6A:47:47:3A
Certificate issuer:       /CN=AEEB992E910DD690365E5E9B86B6ED210578721C
Certificate serial:       2B
Authority key identifier: AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/PBGyJPtLoppUAiGh4BjWSGpHRzo.roa
Signing time:             Tue 31 Mar 2026 08:34:57 +0000
ROA not before:           Tue 31 Mar 2026 08:34:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24255
IP address blocks:        64.33.0.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEEB992E910DD690365E5E9B86B6ED210578721C
        Validity
            Not Before: Mar 31 08:34:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3C11B224FB4BA29A540221A1E018D6486A47473A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:7b:cb:20:73:05:a3:96:43:35:b6:14:46:
                    96:ca:bc:36:68:f2:85:37:7f:0f:cd:51:f0:d1:5f:
                    ff:91:dd:0d:29:3e:33:20:de:82:59:a0:a1:dc:6b:
                    3b:76:d8:af:08:71:5c:a5:de:ae:0e:4a:cb:25:0f:
                    d9:55:1c:07:7b:06:f8:b3:a5:8b:3d:c3:f9:ea:50:
                    2d:e0:67:fb:27:94:74:e6:55:37:d4:58:f9:99:a8:
                    66:df:7b:91:39:ea:d1:4a:a9:4b:e0:3e:8a:5f:6b:
                    ab:90:ab:67:2a:a5:48:77:c6:01:0c:06:4a:0c:01:
                    5c:8d:a6:df:fb:bf:64:da:00:b9:6f:84:21:f5:d5:
                    1f:86:5e:ee:ee:f9:fe:bc:59:c8:b2:59:40:b2:a0:
                    44:ab:4a:93:62:ac:8a:ab:1d:e9:93:6b:2e:a1:e8:
                    5f:07:40:ce:46:0a:3e:7f:41:3e:9d:de:35:b6:1e:
                    b9:66:4a:85:b4:f4:6f:59:32:4a:c0:ed:99:80:8c:
                    99:1f:f2:0a:03:08:2e:b1:19:e3:33:61:b3:cf:0e:
                    e3:22:f4:0f:69:21:46:d1:ff:70:b0:9f:65:5e:10:
                    ea:94:f8:68:7b:4f:a7:f6:4a:71:a2:b3:4c:82:10:
                    6c:f1:ed:da:42:41:df:b8:15:46:c6:ee:56:81:58:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:11:B2:24:FB:4B:A2:9A:54:02:21:A1:E0:18:D6:48:6A:47:47:3A
            X509v3 Authority Key Identifier:
                keyid:AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/PBGyJPtLoppUAiGh4BjWSGpHRzo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:6c:b3:5c:c6:ed:65:3e:c0:8d:75:7d:bc:8a:2a:a8:2b:
         70:72:e8:f9:fc:6d:52:d9:a1:55:fc:db:8a:15:3d:68:a1:a2:
         88:09:6f:96:41:65:51:0e:7d:9d:a0:e6:bf:87:af:eb:39:fe:
         91:40:44:66:af:cf:a8:7a:34:7f:71:80:87:f7:81:61:1e:ef:
         1b:1b:eb:56:37:90:19:e6:3e:79:a5:c9:31:4a:5b:48:bc:71:
         33:b4:6f:66:43:c5:55:72:b0:9a:bd:97:89:c3:aa:14:54:af:
         74:81:11:9a:c6:0a:fd:9c:23:b2:00:50:66:ce:2e:b9:08:e1:
         91:02:18:ae:63:31:85:ee:77:cc:fb:0d:f6:5f:32:ef:c0:28:
         c2:b4:f6:70:fc:f6:3e:45:59:da:19:da:9c:ed:5e:0a:84:ad:
         5f:14:f2:c8:e5:74:18:78:26:d8:f7:07:39:43:e9:ef:39:45:
         f9:ab:2c:56:be:91:31:2e:fd:4a:10:b1:43:a0:34:47:d1:2a:
         e5:76:fe:25:e1:88:72:fe:b6:06:b7:2d:25:fd:ca:c5:84:44:
         6d:f5:ac:e9:ea:a7:ac:8a:a7:a4:10:ec:ec:49:49:50:39:17:
         61:7f:42:42:b5:b4:15:b8:43:3e:02:00:5c:15:96:04:45:81:
         3f:38:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:07 2026 by rpki-client