Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/T5ye2bARwciaURrDYm3qgUqq4Co.roa
File:                     T5ye2bARwciaURrDYm3qgUqq4Co.roa (raw, json)
Hash identifier:          ee8xMl5V6nt7MnrFO1qQsWnSv/o434q7miigcqTNSQI=
Subject key identifier:   4F:9C:9E:D9:B0:11:C1:C8:9A:51:1A:C3:62:6D:EA:81:4A:AA:E0:2A
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       34
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/T5ye2bARwciaURrDYm3qgUqq4Co.roa
Signing time:             Mon 27 Apr 2026 06:08:39 +0000
ROA not before:           Mon 27 Apr 2026 06:08:39 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 27 06:08:39 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=4F9C9ED9B011C1C89A511AC3626DEA814AAAE02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:a1:4a:eb:44:14:28:3c:b4:a4:b6:5d:44:
                    12:32:55:f5:f0:83:1a:9c:16:79:90:e3:48:97:10:
                    c9:66:51:21:a4:71:95:39:c9:82:08:c5:5b:6c:f1:
                    14:db:fe:bb:32:e9:62:13:d0:f9:c2:f0:eb:0d:75:
                    b9:cd:0b:f9:c9:5f:ff:6e:cc:21:77:3e:18:14:bc:
                    72:38:9a:a1:93:82:47:ac:50:3c:43:e0:1b:37:a0:
                    eb:e4:a0:61:b9:da:0a:82:de:92:f2:ee:c5:2e:0a:
                    39:53:bb:5a:3a:2c:56:46:b0:43:dc:ad:db:2a:4c:
                    cb:70:3c:d1:f1:51:89:36:80:5b:37:fe:b3:ce:63:
                    5b:7d:4d:07:3f:a9:2f:f4:98:79:ea:c6:16:95:35:
                    d8:a0:41:1a:72:78:b2:21:e6:86:75:bf:5c:d6:38:
                    0e:eb:a7:0c:3d:6b:4c:47:16:80:e5:00:bd:e1:e4:
                    ec:c2:b9:2d:4a:d2:ca:6a:03:c6:32:9d:66:9c:a2:
                    6d:ba:10:58:ba:c2:db:c2:82:f8:d4:f7:06:41:67:
                    e8:dd:46:0b:b9:23:41:f1:c6:c4:93:2c:4d:82:56:
                    91:b1:db:2b:6f:eb:7f:81:eb:dd:23:b2:5d:d6:3a:
                    a5:b1:68:41:1a:b2:b4:11:78:68:c7:7f:fd:cd:a4:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9C:9E:D9:B0:11:C1:C8:9A:51:1A:C3:62:6D:EA:81:4A:AA:E0:2A
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/T5ye2bARwciaURrDYm3qgUqq4Co.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:9d:16:2b:d0:a1:0f:47:00:70:ae:20:58:41:c9:f4:7c:a6:
         3a:f4:8d:19:fa:56:b7:a0:12:91:5b:ff:8e:5e:8c:37:bf:75:
         b1:bf:7b:10:99:f3:1a:ef:5d:ff:42:0c:87:ec:f8:7f:50:e3:
         09:da:bd:bf:1a:62:dd:b8:5d:20:4d:94:25:7d:53:6a:1c:f6:
         4f:ac:75:83:75:49:eb:a2:e3:15:f7:63:f3:74:61:b5:46:a4:
         db:88:00:7e:a3:a6:51:20:81:a0:88:8c:23:01:bb:67:2e:72:
         51:43:8d:23:09:7c:8f:20:51:53:85:cf:54:e4:a1:36:3a:64:
         bc:e6:98:2f:77:92:08:f9:20:43:51:89:37:3c:1d:4b:1f:f0:
         f0:62:bc:ae:af:63:df:91:79:2c:bf:8a:6b:bc:97:92:6a:3c:
         9e:aa:6f:e6:35:ff:ec:b6:d9:a3:be:30:b6:f9:f3:58:71:06:
         52:e1:5a:22:d3:fd:f6:9d:f6:3e:52:a4:4d:3c:50:7e:d7:82:
         a8:83:c6:b7:2b:a7:55:9c:8c:08:79:ed:bb:24:97:49:37:bf:
         b3:d3:81:5b:a6:f5:16:7b:55:c5:ac:fb:92:ec:72:1d:84:e5:
         aa:23:78:ec:25:2a:fa:92:de:0e:94:5b:dc:a2:33:99:6c:c8:
         6a:b9:a3:55
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDQyNzA2
MDgzOVoXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNEY5QzlFRDlCMDExQzFD
ODlBNTExQUMzNjI2REVBODE0QUFBRTAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMmSoUrrRBQoPLSktl1EEjJV9fCDGpwWeZDjSJcQyWZRIaRxlTnJ
ggjFW2zxFNv+uzLpYhPQ+cLw6w11uc0L+clf/27MIXc+GBS8cjiaoZOCR6xQPEPg
Gzeg6+SgYbnaCoLekvLuxS4KOVO7WjosVkawQ9yt2ypMy3A80fFRiTaAWzf+s85j
W31NBz+pL/SYeerGFpU12KBBGnJ4siHmhnW/XNY4DuunDD1rTEcWgOUAveHk7MK5
LUrSymoDxjKdZpyibboQWLrC28KC+NT3BkFn6N1GC7kjQfHGxJMsTYJWkbHbK2/r
f4Hr3SOyXdY6pbFoQRqytBF4aMd//c2k/UECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRPnJ7ZsBHByJpRGsNibeqBSqrgKjAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvVDV5ZTJiQVJ3Y2lhVVJyRFltM3FnVXFxNENvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHRcEDANBgkqhkiG9w0BAQsFAAOCAQEA
zp0WK9ChD0cAcK4gWEHJ9HymOvSNGfpWt6ASkVv/jl6MN791sb97EJnzGu9d/0IM
h+z4f1DjCdq9vxpi3bhdIE2UJX1Tahz2T6x1g3VJ66LjFfdj83RhtUak24gAfqOm
USCBoIiMIwG7Zy5yUUONIwl8jyBRU4XPVOShNjpkvOaYL3eSCPkgQ1GJNzwdSx/w
8GK8rq9j35F5LL+Ka7yXkmo8nqpv5jX/7LbZo74wtvnzWHEGUuFaItP99p32PlKk
TTxQfteCqIPGtyunVZyMCHntuySXSTe/s9OBW6b1FntVxaz7kuxyHYTlqiN47CUq
+pLeDpRb3KIzmWzIarmjVQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:06 2026 by rpki-client