Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/a9-vnucWePU4PPCnZp3m47LLQu8.roa
File:                     a9-vnucWePU4PPCnZp3m47LLQu8.roa (raw, json)
Hash identifier:          DuTALfe3hF5U1j5+m8ZWsmWu+VIkvZvLqb3FZsDf8/M=
Subject key identifier:   6B:DF:AF:9E:E7:16:78:F5:38:3C:F0:A7:66:9D:E6:E3:B2:CB:42:EF
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       3C
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/a9-vnucWePU4PPCnZp3m47LLQu8.roa
Signing time:             Thu 30 Apr 2026 07:36:34 +0000
ROA not before:           Thu 30 Apr 2026 07:36:34 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        133.32.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 30 07:36:34 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=6BDFAF9EE71678F5383CF0A7669DE6E3B2CB42EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:b2:88:4d:e0:58:56:96:56:40:45:7c:9b:
                    59:54:9e:f8:4f:73:10:8b:0e:ed:82:1e:f7:80:06:
                    40:23:d3:41:f0:fb:ec:b7:f5:d5:f9:25:59:90:d4:
                    e2:df:d1:b1:d8:00:3c:df:34:a6:07:43:27:03:ec:
                    74:e2:a1:52:42:39:00:88:15:8e:f6:85:34:4b:f1:
                    f3:ef:50:0b:ea:ce:ae:54:f3:47:e4:26:46:fd:31:
                    af:5e:0d:2c:60:a0:36:1d:07:87:df:59:43:e4:63:
                    23:4b:34:32:38:fa:02:4f:4d:fd:dd:a6:c2:aa:bb:
                    c3:f8:b7:36:52:37:f2:f7:0b:3d:df:cc:33:e8:78:
                    be:11:5d:76:ce:c9:38:87:36:dd:fa:e2:86:65:a9:
                    25:38:44:99:4b:dd:fa:7b:66:6b:41:b1:dc:de:0c:
                    22:8e:eb:35:cd:24:24:f9:aa:50:13:62:ee:93:31:
                    cf:2f:3d:a7:26:27:d2:d9:7a:52:fa:3e:a8:53:99:
                    9d:01:95:6b:ab:49:aa:f8:cf:7a:b1:4e:c7:49:ed:
                    80:02:07:23:45:0a:0b:db:4a:1a:d7:e4:12:a3:c8:
                    97:ef:47:09:17:85:3b:5b:6b:86:a7:e3:17:b2:d7:
                    b9:98:49:b9:7c:f5:98:c1:2b:8c:b8:30:6a:b5:82:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DF:AF:9E:E7:16:78:F5:38:3C:F0:A7:66:9D:E6:E3:B2:CB:42:EF
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/a9-vnucWePU4PPCnZp3m47LLQu8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:cb:19:dd:4d:ed:9d:92:00:f7:f2:4a:0b:2b:a9:39:f1:18:
         f0:a3:6d:67:85:21:49:06:b4:3f:c4:f9:70:90:a2:5e:85:5a:
         d9:5d:b5:cc:10:b5:6e:0b:4d:d7:53:3f:8c:c0:e3:21:6d:d7:
         b2:24:ab:69:c9:e3:05:ac:16:cc:28:1a:b9:c9:06:a4:f3:71:
         0a:d2:3b:5b:02:38:bb:a4:cc:a3:65:cc:da:30:00:e8:bf:47:
         18:63:97:8a:57:90:cd:c0:c9:16:8a:ce:1d:d6:74:7a:bf:46:
         98:ca:3a:97:4d:5c:58:1d:e0:27:50:0b:43:fb:2b:67:7e:50:
         57:40:79:db:22:87:fe:a6:14:09:61:80:28:32:f1:26:be:b7:
         7b:1b:2b:4a:d8:bd:0f:6c:31:1b:4c:4d:86:16:ad:2b:39:aa:
         19:be:69:8d:f6:e6:66:d8:32:68:d7:12:86:8d:dd:57:a5:19:
         84:65:b2:a6:67:d3:a9:8d:ac:27:47:ee:aa:38:26:6c:44:1f:
         b9:50:4d:79:7b:fe:01:3c:c7:bc:5f:9d:06:ac:b5:a0:37:09:
         83:10:37:ca:b1:45:49:f0:dd:fe:e0:49:7c:28:00:86:84:62:
         44:18:a5:73:c2:c0:13:7d:d7:32:dc:83:59:5e:76:f3:0a:dd:
         d0:35:74:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:02 2026 by rpki-client