Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/bgfQLSI21cilDc9w5e9mdgxIiu0.roa
File:                     bgfQLSI21cilDc9w5e9mdgxIiu0.roa (raw, json)
Hash identifier:          6KWHoxCUGBMrJaXIJd2jChiG+aZNdTW2RPuhXhYqa7s=
Subject key identifier:   6E:07:D0:2D:22:36:D5:C8:A5:0D:CF:70:E5:EF:66:76:0C:48:8A:ED
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       6A
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/bgfQLSI21cilDc9w5e9mdgxIiu0.roa
Signing time:             Tue 31 Mar 2026 08:15:39 +0000
ROA not before:           Tue 31 Mar 2026 08:15:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131934
IP address blocks:        118.27.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Mar 31 08:15:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6E07D02D2236D5C8A50DCF70E5EF66760C488AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:3b:da:e4:39:0a:78:d1:8f:02:5a:13:6a:
                    94:a6:e9:0d:a6:e4:08:d3:5f:39:8f:1f:ca:0c:ab:
                    36:bc:64:ed:a6:30:34:a3:96:1d:07:ef:61:5d:46:
                    f3:69:c4:e8:e1:f1:e4:0d:29:e6:14:f4:13:f8:c4:
                    6f:7c:49:1d:bd:5f:1f:54:0b:41:d7:6a:1f:78:98:
                    41:a2:24:86:c2:05:dd:4c:d8:2c:e2:14:ab:e0:26:
                    6b:d9:cc:fa:a0:be:1d:27:79:07:71:96:48:a9:89:
                    23:46:9c:c0:ed:23:7c:29:ac:44:49:2b:0b:61:1d:
                    dc:82:37:49:f9:62:bb:4f:49:91:a1:6c:0b:e1:dc:
                    60:14:75:03:11:06:17:fd:26:98:3c:3e:90:6d:db:
                    68:11:85:c7:37:a1:50:ce:02:21:1b:bf:bf:38:de:
                    6e:69:7f:12:05:10:53:40:fd:45:b9:49:11:ae:81:
                    ad:b7:b9:79:ab:cb:34:21:f1:bb:18:ff:a5:5a:30:
                    b2:82:b7:16:b7:ee:1c:00:88:6f:17:5c:c5:78:1c:
                    62:9b:b1:1f:7d:f8:d6:ae:e5:f3:e5:33:04:d3:d3:
                    a5:f7:b2:94:0a:05:05:cf:2e:b0:86:87:92:b3:d9:
                    09:26:35:e5:86:cd:61:ba:fa:91:4b:61:06:c7:c7:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:07:D0:2D:22:36:D5:C8:A5:0D:CF:70:E5:EF:66:76:0C:48:8A:ED
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/bgfQLSI21cilDc9w5e9mdgxIiu0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.27.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:d3:cd:26:60:0a:90:bc:85:a3:2e:b7:b1:56:e8:59:97:91:
         fe:43:a0:92:ce:21:7e:79:52:7a:a3:39:2c:da:3e:94:ef:49:
         8f:6e:a9:62:bd:17:25:02:c3:9c:4a:11:47:e1:b7:de:b0:cb:
         ac:69:3e:dd:e4:f4:b9:ba:a9:28:29:9c:a5:64:60:39:94:5e:
         e7:49:26:0e:2b:f9:29:68:58:ee:44:58:b1:1a:12:5d:db:fc:
         2a:5d:b6:a9:e1:f0:e3:1a:ed:b8:ac:ec:e0:ba:f2:d3:ed:ff:
         a1:9e:34:b4:5e:c1:19:1a:23:4c:57:be:ec:fc:5d:8a:13:a9:
         6e:2a:e4:b6:4c:37:f8:fc:35:b2:30:cd:8c:70:02:d0:ec:4d:
         4c:12:8a:98:36:fb:87:67:aa:14:db:59:ca:ec:f2:06:41:08:
         7f:33:5e:e2:8d:9f:e9:62:ae:71:10:1e:d0:67:b0:8a:a7:59:
         cb:68:dd:21:1d:cd:59:a8:9a:c5:6a:83:a9:23:0b:66:3a:ae:
         04:11:a6:98:33:3d:c8:75:c9:31:35:d3:81:97:da:8e:11:e7:
         9f:f3:f3:bc:9a:d9:bc:02:ea:15:0a:03:88:f7:3a:75:8f:a8:
         6b:bf:ed:46:d6:19:eb:3f:02:47:8e:d9:b9:7a:bc:eb:82:f7:
         a3:6f:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:47 2026 by rpki-client