Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30424/BLzEgs3D5_bO2Wx9J07XGqZU4dw.roa
File:                     BLzEgs3D5_bO2Wx9J07XGqZU4dw.roa (raw, json)
Hash identifier:          c8cbqanXUBdx/+dzKcuUMMJvoTjRHZhHBz+UM7GuhaA=
Subject key identifier:   04:BC:C4:82:CD:C3:E7:F6:CE:D9:6C:7D:27:4E:D7:1A:A6:54:E1:DC
Certificate issuer:       /CN=452C90B8EB6AA8142ADC8038EE66B271638D1059
Certificate serial:       13
Authority key identifier: 45:2C:90:B8:EB:6A:A8:14:2A:DC:80:38:EE:66:B2:71:63:8D:10:59
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/BLzEgs3D5_bO2Wx9J07XGqZU4dw.roa
Signing time:             Tue 17 Mar 2026 05:21:29 +0000
ROA not before:           Tue 17 Mar 2026 05:21:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63805
IP address blocks:        2401:1b20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452C90B8EB6AA8142ADC8038EE66B271638D1059
        Validity
            Not Before: Mar 17 05:21:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=04BCC482CDC3E7F6CED96C7D274ED71AA654E1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:65:f0:92:6a:f4:2e:85:84:70:5f:5b:73:
                    b9:62:e1:82:db:20:37:fc:ef:33:2b:9d:f2:56:2e:
                    3c:c4:46:7c:ef:a5:f0:18:35:16:2f:0f:37:7a:41:
                    e1:74:20:c4:55:74:28:5b:b9:51:17:d8:b9:15:35:
                    60:d6:ce:b5:cf:2c:27:c3:e0:3f:39:69:0a:47:d7:
                    8b:f3:69:52:94:58:bc:0a:b3:6e:4a:28:5d:ba:43:
                    89:ef:cb:a2:54:aa:11:86:4f:ec:59:78:c3:8b:06:
                    b5:c4:aa:43:91:ab:13:69:d8:00:6b:ce:6b:3c:78:
                    ce:c1:7e:f9:bd:12:19:d2:08:34:93:be:3f:a1:93:
                    5c:1f:af:05:83:e1:22:e5:c5:dc:16:4e:6f:09:c0:
                    f1:85:9e:cd:e6:d8:57:2a:e3:1f:65:47:53:50:37:
                    2a:cf:64:05:f9:da:b3:19:5e:2b:32:20:95:d0:d7:
                    8f:3c:11:99:ea:e9:c0:06:96:fd:df:ba:70:e7:c8:
                    66:4c:83:0e:08:2b:6e:d7:e0:46:bb:42:5f:81:4a:
                    02:7d:79:80:1a:28:0d:c8:73:a4:68:19:41:a4:7b:
                    74:0d:43:ef:5b:be:df:5a:f9:2f:86:a7:78:83:82:
                    fb:f4:bc:f6:27:79:19:6a:6b:b7:7c:78:ff:c2:f6:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BC:C4:82:CD:C3:E7:F6:CE:D9:6C:7D:27:4E:D7:1A:A6:54:E1:DC
            X509v3 Authority Key Identifier:
                keyid:45:2C:90:B8:EB:6A:A8:14:2A:DC:80:38:EE:66:B2:71:63:8D:10:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/BLzEgs3D5_bO2Wx9J07XGqZU4dw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:4f:26:6c:14:ff:53:d9:0d:bc:e0:e1:7b:2e:0e:f9:ba:
         9d:6e:d1:20:7f:d2:95:e1:b8:82:49:6b:b6:a3:ca:27:a9:16:
         b3:23:21:b5:bf:4c:68:17:85:25:da:6d:8b:3c:ec:bf:8f:19:
         90:47:06:c3:eb:66:1b:18:9b:9c:11:51:d4:92:c8:a5:3e:55:
         3c:25:ae:f2:9e:fc:02:53:db:d2:14:ba:f4:16:f3:38:62:a1:
         85:ee:46:bb:ee:11:3c:78:0d:13:31:2c:8f:cc:25:73:34:f9:
         c6:8c:ce:b5:ff:74:2d:a4:0c:73:cf:95:ca:80:d5:2f:8a:c2:
         7d:8f:ef:86:8c:01:8a:3b:fe:e0:08:c8:fe:f7:d4:9a:07:a2:
         fc:f2:a5:8e:a4:8c:eb:3a:69:21:ff:e0:84:ec:8e:a1:96:98:
         e4:0f:2a:35:f7:69:9c:68:10:1a:ea:0e:9c:e8:89:9a:da:97:
         45:a8:c4:de:b9:00:24:64:5d:fe:f4:0a:ba:83:61:8e:db:b9:
         b1:22:a8:fd:1a:04:0c:33:b9:80:93:c1:eb:3c:6d:fb:91:0a:
         f3:62:f5:1f:ac:df:e9:e4:7d:ae:a4:d5:6a:47:e2:e0:7f:64:
         72:a0:b3:e8:d0:11:79:67:0a:7a:cc:11:20:17:26:a5:5d:f3:
         9d:71:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:27:24 2026 by rpki-client