Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/CdFJI1Fmey7eJuaBsERxiOSfFuk.roa
File:                     CdFJI1Fmey7eJuaBsERxiOSfFuk.roa (raw, json)
Hash identifier:          FRtJUz30oWLWn5eeRNXvitdKhxEfO+SQaMKwaInPjQA=
Subject key identifier:   09:D1:49:23:51:66:7B:2E:DE:26:E6:81:B0:44:71:88:E4:9F:16:E9
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       39
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CdFJI1Fmey7eJuaBsERxiOSfFuk.roa
Signing time:             Thu 30 Apr 2026 07:18:36 +0000
ROA not before:           Thu 30 Apr 2026 07:18:36 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 30 07:18:36 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=09D1492351667B2EDE26E681B0447188E49F16E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:19:70:bf:dc:75:6c:c5:20:2d:a6:d6:62:
                    25:7d:4d:23:85:2c:ce:49:f6:8b:ed:ad:f6:44:7d:
                    bc:97:21:20:eb:5d:d3:7a:87:11:c5:6b:1e:e5:c9:
                    5e:cd:e3:8d:fb:77:7d:82:d5:0c:1a:25:e3:a7:58:
                    cb:de:81:6c:db:f7:24:c8:f7:f4:d0:a8:55:2d:01:
                    fe:1b:cd:f2:a9:fb:98:f6:9e:31:5c:3b:40:ef:ec:
                    35:1f:df:e8:16:82:9d:76:55:d3:bc:30:93:c4:35:
                    fd:64:5c:0c:82:81:8e:6f:5f:a7:4e:f6:0c:c8:ff:
                    18:10:5b:df:50:fc:a0:5f:bf:93:74:cd:40:ad:4d:
                    f3:80:d6:6b:b0:6f:69:58:3b:35:e5:24:9e:d5:6f:
                    ba:7b:fd:e6:45:55:58:2d:d4:ba:92:f9:e8:06:61:
                    a0:12:e7:1a:55:63:87:63:f4:8e:20:96:f7:e5:d5:
                    ef:b7:5b:42:0c:b5:5f:9d:c1:ec:e8:1b:cb:43:56:
                    8a:15:a8:78:60:7b:03:5c:7c:98:73:91:74:80:6b:
                    0a:ed:04:6f:9f:05:ef:06:43:f8:34:73:2c:76:15:
                    bf:20:53:be:4e:53:ec:ff:a6:00:12:5d:7e:23:be:
                    ed:cb:c3:b8:72:96:b8:6b:8c:42:6f:1f:a1:22:7c:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D1:49:23:51:66:7B:2E:DE:26:E6:81:B0:44:71:88:E4:9F:16:E9
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CdFJI1Fmey7eJuaBsERxiOSfFuk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:87:a9:c7:34:43:64:ac:ac:e2:ac:dd:32:4c:85:2a:7e:
         7a:b3:c4:30:34:05:ea:ef:10:f2:16:64:d5:01:9e:29:69:c1:
         e7:40:6b:ab:bd:ee:ed:07:d4:14:a3:be:f4:da:45:32:02:78:
         e2:1f:16:88:da:8c:9f:f3:ce:14:fe:93:04:64:41:e6:65:d9:
         33:6a:f2:cb:9a:6b:35:f3:aa:7b:13:8d:f9:b2:95:94:26:10:
         0a:ed:37:b9:c0:e0:4d:8f:af:27:02:cb:06:d3:54:39:1f:a5:
         94:1a:bf:7f:a2:63:c6:00:52:e4:52:01:ec:f8:19:3c:bf:0a:
         66:dc:b6:b6:d3:f8:56:c6:4b:0b:12:9e:bf:15:1b:4f:e2:c9:
         b4:e3:81:20:a9:ee:d8:12:35:f7:eb:ee:7a:66:cb:2c:9e:cc:
         64:bc:51:45:8d:1e:03:2a:49:a5:f6:17:1f:20:1b:e8:54:03:
         5f:6d:0d:41:96:f3:44:31:6b:b0:55:a6:72:ab:6d:52:1f:8b:
         94:0e:75:bd:f9:23:13:99:c5:9f:23:dc:42:36:e4:5b:48:9d:
         54:e5:c4:86:7c:1c:e1:ab:e1:45:89:2a:d2:6f:0a:ef:4e:7c:
         fe:44:b7:eb:1e:c1:18:13:8c:60:29:81:51:62:ab:57:5a:6f:
         18:6d:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:47 2026 by rpki-client