Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/bx-nEbqjp2JS3_BcBECHaRjG6sU.roa
File:                     bx-nEbqjp2JS3_BcBECHaRjG6sU.roa (raw, json)
Hash identifier:          OV/WQowCq8O2jDDwIk48lRCmPdU5BG+Wsu5ToOepeQE=
Subject key identifier:   6F:1F:A7:11:BA:A3:A7:62:52:DF:F0:5C:04:40:87:69:18:C6:EA:C5
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       5C
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/bx-nEbqjp2JS3_BcBECHaRjG6sU.roa
Signing time:             Wed 20 May 2026 02:48:20 +0000
ROA not before:           Wed 20 May 2026 02:48:20 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        220.247.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 20 02:48:20 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=6F1FA711BAA3A76252DFF05C0440876918C6EAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:e1:c3:87:9a:f5:34:4a:9d:4f:ec:6c:e2:
                    5e:3e:83:df:b5:13:62:c1:23:0d:07:e3:40:c3:d5:
                    8e:35:e6:f8:aa:e3:5b:53:8e:54:4b:e6:10:05:d4:
                    fc:02:ed:dc:b8:25:ad:2a:eb:de:76:70:50:55:23:
                    97:38:e0:f6:f9:ea:d6:ae:35:eb:10:c4:41:04:60:
                    b6:92:39:5e:f9:0a:33:d8:a5:8e:b5:c7:38:ba:cf:
                    75:51:3b:8d:77:02:25:16:ae:e1:92:d2:d4:07:b3:
                    aa:26:1c:96:76:38:b4:e5:2c:3f:62:f4:61:5c:2e:
                    51:97:f1:1b:13:fc:5d:09:93:c6:d4:e0:70:25:5d:
                    a4:10:ba:ba:ed:be:d9:2d:3f:0e:9a:81:bc:6a:3a:
                    2f:74:d8:73:60:1e:04:df:52:cb:3a:6a:9b:86:e8:
                    64:3d:72:0c:be:61:48:43:3a:a9:eb:9d:ed:2a:4f:
                    87:10:f9:5f:7a:13:a8:ab:9f:c8:13:25:7e:a5:3f:
                    34:86:69:c0:36:ad:af:f2:b4:c4:37:34:87:29:d1:
                    73:76:13:ea:15:d6:cd:0b:30:65:5c:2e:a9:66:97:
                    24:f3:bd:ce:32:13:6f:ec:2d:c4:70:5f:ac:00:ec:
                    d0:b9:c9:08:1a:b6:fb:61:3b:ab:97:00:64:a3:5a:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:A7:11:BA:A3:A7:62:52:DF:F0:5C:04:40:87:69:18:C6:EA:C5
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/bx-nEbqjp2JS3_BcBECHaRjG6sU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bf:89:df:b2:80:84:d0:1c:8b:14:9a:0c:01:83:12:0f:26:28:
         44:f4:2e:aa:2d:ff:33:c1:a1:52:63:36:b9:7b:66:d5:ed:6b:
         97:a7:be:d7:ac:d5:c8:a2:c7:01:b2:5b:53:bb:34:b5:07:1c:
         09:51:4d:0e:33:0a:0a:23:c7:11:9b:2c:16:99:77:dd:1b:3f:
         af:23:41:80:49:96:b4:ac:44:34:fd:f6:0c:d6:f7:3e:c3:77:
         9c:58:99:f3:75:f0:eb:26:4f:05:eb:98:db:96:c7:03:0b:61:
         07:69:35:43:ae:26:3b:36:d4:6c:42:aa:bd:7d:5f:42:2a:dc:
         97:23:92:29:f6:8a:dc:4d:f1:eb:2f:4a:0f:b0:8f:bf:b6:fb:
         c6:6f:58:af:e1:4e:22:7e:8a:34:5b:31:d5:60:a2:b5:b0:bb:
         ca:3d:5f:f1:74:99:15:8e:58:0c:41:03:45:80:d4:85:7a:52:
         ff:cb:5f:0b:8b:bf:ba:0e:18:3f:69:76:76:95:18:a0:97:67:
         8d:83:ea:59:ff:b2:b9:e7:0c:b2:32:05:35:01:52:58:8e:41:
         38:8b:17:42:f7:c2:ed:3a:11:6f:7f:5d:14:90:d9:5b:9b:ea:
         18:1c:13:a4:a5:ac:7f:ef:04:04:c0:90:f2:44:eb:3e:25:28:
         f3:df:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:14 2026 by rpki-client