Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/0ggVqug6PDDZYCselTjPAhuWIKk.roa
File:                     0ggVqug6PDDZYCselTjPAhuWIKk.roa (raw, json)
Hash identifier:          mVp8Y4mNiyrEk5Wid99Et3EAEdh0Hz8q2ZerCcasNV8=
Subject key identifier:   D2:08:15:AA:E8:3A:3C:30:D9:60:2B:1E:95:38:CF:02:1B:96:20:A9
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       26
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/0ggVqug6PDDZYCselTjPAhuWIKk.roa
Signing time:             Wed 22 Apr 2026 05:30:33 +0000
ROA not before:           Wed 22 Apr 2026 05:30:33 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        133.32.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 22 05:30:33 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=D20815AAE83A3C30D9602B1E9538CF021B9620A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:6f:8c:90:c2:3e:3e:84:01:37:9e:42:df:
                    8c:91:c7:33:02:ea:63:69:10:22:0d:65:fe:9a:7b:
                    1e:02:20:27:20:53:d9:bf:23:da:b3:87:9d:69:43:
                    76:bc:73:a9:1b:c7:8a:29:06:84:14:d0:e9:1d:48:
                    62:36:89:b0:9f:ba:4b:23:01:f1:7f:0f:3b:87:03:
                    ee:71:4e:f7:aa:ba:bc:16:cd:8b:bf:b0:3a:3a:06:
                    45:d3:f3:60:13:eb:3c:7a:d4:7e:c7:88:5b:dd:0e:
                    e3:66:74:a4:2a:24:0e:d2:a2:3d:3f:43:1d:99:c8:
                    81:53:22:3c:0d:d5:18:92:e2:1d:28:68:f7:6b:e5:
                    b5:d3:03:a5:f9:2c:d1:42:fb:b4:5c:dd:6b:b2:5e:
                    b2:1f:76:27:9f:f2:da:54:36:88:35:81:2b:e4:61:
                    93:35:c6:d6:42:50:24:d9:52:2f:9d:a4:10:35:b4:
                    78:be:1b:82:62:ac:34:65:7b:05:91:70:54:35:a4:
                    75:17:84:1e:f3:65:3e:f1:0b:62:63:d3:25:60:af:
                    c0:e0:d8:55:44:a0:af:69:9e:8f:3e:fb:51:37:e0:
                    8f:b6:0d:37:7b:8a:4e:da:c5:15:99:28:6b:ea:2b:
                    27:c0:00:18:37:9e:7f:fd:81:e8:bf:90:00:5e:b2:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:08:15:AA:E8:3A:3C:30:D9:60:2B:1E:95:38:CF:02:1B:96:20:A9
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/0ggVqug6PDDZYCselTjPAhuWIKk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:62:0e:ce:ea:ce:91:0f:ef:3e:e4:d6:a7:81:db:e3:80:78:
         66:7c:f2:bc:86:66:bd:ac:d3:63:69:5e:58:14:18:84:53:e4:
         34:f7:85:86:d4:87:c5:13:0e:93:6f:9e:55:7c:1c:78:98:be:
         5c:ef:0f:db:b7:7e:2a:40:0b:52:d3:97:cd:e8:14:a8:b6:a7:
         7a:f0:68:45:0a:0f:e1:12:2f:3d:0a:8b:d7:4b:62:02:bc:6d:
         f1:5f:54:76:3e:17:84:df:28:57:57:52:f9:ac:2b:2e:8c:82:
         62:64:c6:0f:31:42:98:c4:95:ef:5d:a0:38:95:10:cc:b1:d2:
         29:68:34:a9:6d:36:5a:07:f5:d1:34:60:de:30:0e:e0:df:25:
         eb:bb:7f:77:7f:d6:d2:b7:17:de:b9:ef:d6:31:83:ef:a3:26:
         71:06:db:d0:51:9f:ec:17:d0:e4:b0:33:76:ff:3d:2c:6a:9b:
         30:b7:74:68:98:d7:1d:3d:9e:d0:f9:91:39:56:22:d4:b8:e0:
         dc:ea:6c:54:ad:50:34:09:ce:43:01:76:cb:45:5d:9f:fc:d3:
         64:a1:d0:9f:96:30:23:14:39:d9:86:c0:03:31:86:e5:86:12:
         d7:6d:b6:37:bc:b1:93:9b:01:e9:62:ef:31:bd:73:a5:cd:63:
         ca:39:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:14 2026 by rpki-client