Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/bCO9gGDDgLXIAN2mGzssOxdWsb0.roa
File:                     bCO9gGDDgLXIAN2mGzssOxdWsb0.roa (raw, json)
Hash identifier:          VwgzrsgKywuPTRTg+WVZqE79BW2uPnceJoSDnpn8hLY=
Subject key identifier:   6C:23:BD:80:60:C3:80:B5:C8:00:DD:A6:1B:3B:2C:3B:17:56:B1:BD
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       017B
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/bCO9gGDDgLXIAN2mGzssOxdWsb0.roa
Signing time:             Tue 31 Mar 2026 07:48:19 +0000
ROA not before:           Tue 31 Mar 2026 07:48:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        210.175.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6C23BD8060C380B5C800DDA61B3B2C3B1756B1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:d6:a3:f7:00:da:0e:78:7d:1c:9f:8d:4d:
                    75:9d:ec:a7:34:91:d3:a9:a5:cd:d4:cf:65:6d:87:
                    99:8e:30:4b:0b:f1:b2:5d:dc:09:0a:f7:54:67:15:
                    1d:86:6a:b9:89:74:4c:2e:14:e8:80:70:b1:5c:5a:
                    fb:c3:fd:68:9f:83:9e:ed:93:c4:07:55:76:1b:5f:
                    b8:98:c7:52:27:4c:f7:ad:04:86:8b:10:fe:42:a6:
                    fd:ef:a5:db:15:0e:56:9e:19:43:63:4c:97:73:f6:
                    45:c3:7d:ef:e1:05:62:47:c3:4d:cb:04:62:4e:5c:
                    b0:1e:b6:b4:c2:e4:00:2d:71:81:7e:59:1f:db:ea:
                    4a:47:47:b9:71:03:13:78:5a:f5:af:4a:ae:ce:bb:
                    05:45:fb:fc:0b:24:fe:8b:18:de:b3:50:76:8e:45:
                    c1:52:53:23:69:c6:ae:c4:de:42:42:9d:78:8c:ba:
                    f5:77:df:43:fa:b4:95:3a:0f:e3:41:08:76:d3:a2:
                    bf:c5:59:dc:b9:12:c8:34:0d:3f:f7:61:84:5a:04:
                    c1:e5:58:b1:fb:06:49:31:bd:a3:58:7c:81:26:60:
                    40:c5:39:8c:ca:06:dd:4b:7d:20:b5:af:8e:41:34:
                    6d:6d:91:84:3a:9f:15:2d:b0:89:33:42:90:84:23:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:23:BD:80:60:C3:80:B5:C8:00:DD:A6:1B:3B:2C:3B:17:56:B1:BD
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/bCO9gGDDgLXIAN2mGzssOxdWsb0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.175.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:23:ab:18:e6:40:36:ea:99:74:d3:2b:52:48:84:70:48:bf:
         4d:e9:fa:f9:0a:46:1a:a7:e3:df:e7:8c:d8:4f:3b:c1:f3:4f:
         b2:1a:e4:c8:0a:94:78:8b:13:d2:ab:c4:80:25:52:16:6b:08:
         03:ef:31:07:03:0d:2d:1e:19:b3:62:e0:6e:3b:e0:0e:a6:21:
         8e:81:70:7f:50:93:22:18:61:bd:c0:ff:d8:52:2a:4a:ef:67:
         73:f3:fb:49:59:72:b0:2f:61:9b:ec:cd:93:5f:78:75:1e:b8:
         58:c7:83:09:a9:b2:6f:5b:14:0f:af:5a:ac:ed:48:e2:df:e9:
         17:56:c6:6f:f3:83:b8:10:36:bb:01:19:a6:7e:60:f2:2a:5d:
         8e:42:ea:ae:e0:c7:6b:2f:2f:89:1e:fd:00:ca:12:a9:66:48:
         14:46:67:8d:1c:77:6c:22:1b:a7:bd:9e:b6:91:2a:30:b7:77:
         6a:10:b0:45:d3:99:6f:e5:6c:7a:94:ad:c2:f4:8e:d1:02:52:
         21:af:90:a0:d7:74:23:aa:a7:27:fa:25:cc:e4:bf:3b:41:7d:
         29:0e:a2:a1:9e:1b:69:8e:44:a9:86:ea:59:85:e5:64:b8:0c:
         96:6a:65:95:56:31:b8:e3:28:c2:b6:95:94:2f:df:48:a3:7d:
         81:77:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:14 2026 by rpki-client