Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/YfSzmg4xAThaK7bgKUM0H_faDGE.roa
File:                     YfSzmg4xAThaK7bgKUM0H_faDGE.roa (raw, json)
Hash identifier:          h1IzfbNEimSdCh94g8iTdz39+/fOBChel9QAs8O8zcA=
Subject key identifier:   61:F4:B3:9A:0E:31:01:38:5A:2B:B6:E0:29:43:34:1F:F7:DA:0C:61
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       2C
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/YfSzmg4xAThaK7bgKUM0H_faDGE.roa
Signing time:             Wed 22 Apr 2026 06:06:46 +0000
ROA not before:           Wed 22 Apr 2026 06:06:46 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        203.152.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 22 06:06:46 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=61F4B39A0E3101385A2BB6E02943341FF7DA0C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:7f:aa:98:92:f1:02:33:43:27:36:fd:15:
                    33:ff:99:71:1b:02:93:aa:c4:21:34:fd:c5:7e:d0:
                    98:a5:0a:0c:95:41:85:f2:da:dd:9c:d6:bb:25:05:
                    4c:17:3a:fb:74:91:06:ef:58:c9:8e:9f:6b:08:2f:
                    24:e7:dc:e8:a3:48:18:2f:72:18:62:8d:13:39:9e:
                    76:1c:6f:ae:3f:ea:03:33:ce:65:1f:18:13:ae:62:
                    c4:40:f7:4d:0f:a1:82:ec:da:ff:59:53:97:7d:cd:
                    93:7f:db:c3:57:ae:e4:c9:92:21:86:a3:b3:ab:cd:
                    dd:21:06:0e:1d:ee:9a:6d:12:5c:6f:4a:15:9c:bb:
                    ac:9d:bb:5d:8d:80:a8:32:b3:04:68:7f:db:27:af:
                    ab:4a:00:10:1f:dd:e7:1f:d9:70:4e:c3:a3:67:46:
                    cb:b7:7e:fd:da:1f:6e:18:2c:47:f0:4a:c1:d5:b6:
                    6c:14:76:fd:09:b8:4a:08:c8:46:59:92:aa:20:69:
                    5a:ef:30:b7:5c:28:31:aa:17:1b:a4:46:73:0f:da:
                    fa:ec:cd:3b:38:48:2a:9a:16:ee:b8:30:5c:04:97:
                    7b:58:15:15:9f:12:00:e2:f3:48:eb:8f:5d:50:fc:
                    4f:f9:74:2b:0d:eb:05:d0:1e:bf:42:b1:92:d1:a9:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F4:B3:9A:0E:31:01:38:5A:2B:B6:E0:29:43:34:1F:F7:DA:0C:61
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/YfSzmg4xAThaK7bgKUM0H_faDGE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.152.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:95:e5:08:8c:e5:72:ba:67:22:d5:0d:ef:dc:aa:c3:40:3e:
         8d:6e:ab:aa:a3:5d:8d:53:a7:57:3e:a0:60:16:34:37:7d:61:
         78:56:fb:0d:9e:14:fb:64:b8:53:e8:b6:ea:ca:d3:1f:bf:d2:
         5a:96:57:fa:20:db:b1:1a:4a:24:07:5b:b9:48:8b:e3:75:01:
         7e:17:90:60:c6:90:29:c9:37:7c:cf:ef:4b:d8:4a:0f:d7:d1:
         6b:c5:2f:fd:a2:6a:1b:b8:fd:5d:3f:2a:51:11:08:f2:98:f6:
         77:74:2f:4e:2e:0f:d4:da:e7:5f:86:f1:8f:59:b8:49:b4:c6:
         e0:83:35:ed:3f:4f:6a:71:80:17:ad:07:9d:6a:9e:02:e0:9c:
         e8:04:29:c5:02:9d:60:85:dc:55:64:04:dd:14:0d:89:71:44:
         6a:f0:dc:69:42:cd:5e:31:10:3f:45:48:c4:70:5d:03:65:5b:
         5a:2a:80:18:e5:fc:63:82:f0:9b:31:ee:25:07:d2:56:04:d1:
         64:10:46:1d:65:9d:8c:1b:8d:30:68:47:59:0b:4a:c8:98:05:
         e3:71:98:c9:c1:60:19:02:0a:23:74:21:29:92:5c:b3:53:ec:
         0b:cd:23:6f:0a:d8:55:fe:c2:09:8c:4c:01:bb:aa:fe:44:8c:
         fe:4f:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:31 2026 by rpki-client