Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/fGHP10lHi4xNy0O-pAIqUyEZOtk.roa
File:                     fGHP10lHi4xNy0O-pAIqUyEZOtk.roa (raw, json)
Hash identifier:          3xEUkPsMOjbAinwc/jx0cByrIKxDV0RLgje009RLk+s=
Subject key identifier:   7C:61:CF:D7:49:47:8B:8C:4D:CB:43:BE:A4:02:2A:53:21:19:3A:D9
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       36
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/fGHP10lHi4xNy0O-pAIqUyEZOtk.roa
Signing time:             Thu 30 Apr 2026 07:00:44 +0000
ROA not before:           Thu 30 Apr 2026 07:00:44 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 30 07:00:44 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=7C61CFD749478B8C4DCB43BEA4022A5321193AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:f3:93:64:4a:45:56:15:cb:66:e3:a9:88:
                    18:32:27:22:48:b9:55:af:6e:68:1e:7c:7b:08:28:
                    a0:a8:ef:6f:f4:bc:58:e8:fb:ce:b1:43:1a:e6:c8:
                    e4:9f:f0:c0:8e:2b:08:81:13:07:5b:92:4b:9a:cc:
                    fd:85:6f:62:56:46:f9:d1:08:33:ad:59:e8:00:e8:
                    b4:7a:c5:2d:40:0f:1f:63:46:fb:4f:1d:6b:6f:f3:
                    c5:18:90:85:e2:52:dc:0e:33:72:36:b3:08:a3:43:
                    ca:9a:5e:a7:45:15:a1:f3:5b:c1:8d:4b:7d:de:54:
                    5d:2a:52:cc:c3:09:2c:5d:bd:e1:2b:91:2a:9d:d3:
                    bd:fd:2c:4b:cd:f4:95:52:e8:85:b9:4e:3f:52:d8:
                    de:29:2d:90:40:8f:69:6e:39:bc:57:fc:67:ea:f5:
                    2a:07:f7:cf:c4:6e:ae:bf:98:85:bc:9e:1b:a3:73:
                    32:11:aa:28:b8:0c:b4:fe:97:98:d2:78:a9:0d:58:
                    56:a8:bc:c9:b2:13:51:ad:5f:01:b4:aa:c0:c0:d6:
                    e2:1a:a6:c6:ae:18:ab:3c:80:12:80:6a:33:ae:a4:
                    53:d7:9e:ac:f5:e9:fb:55:88:31:b7:c6:e4:be:63:
                    45:fb:c1:7f:8e:be:fb:8d:71:67:6d:7f:fd:56:a1:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:61:CF:D7:49:47:8B:8C:4D:CB:43:BE:A4:02:2A:53:21:19:3A:D9
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/fGHP10lHi4xNy0O-pAIqUyEZOtk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:f7:56:20:39:ad:fd:95:db:91:19:ef:61:91:44:19:e1:
         20:70:7b:91:42:8c:1c:de:48:b1:7e:fe:1d:2f:70:e8:75:37:
         e2:88:eb:1f:6a:05:0d:91:e0:7d:c2:e8:79:9a:2d:b2:bf:90:
         95:f3:56:f7:4d:ae:27:c7:34:3c:60:63:b0:85:d2:1f:a7:71:
         8a:7b:a8:8e:28:84:b4:8f:e4:c2:66:40:0d:aa:a5:ce:75:32:
         d9:56:08:4c:fa:4b:95:d6:3c:47:fa:5e:17:45:52:72:30:97:
         10:79:ba:d1:cf:ea:cd:ea:ac:6e:81:71:12:e6:f1:37:54:9a:
         89:09:e7:c1:b5:e3:2f:22:80:4d:f7:2d:c3:5c:a3:cb:7b:5c:
         9d:d3:66:75:40:25:b5:a2:e5:d2:4b:09:05:e8:a2:e2:5f:d8:
         85:9a:57:b2:b0:57:91:9b:3d:c5:24:0e:f9:1a:be:ab:84:e1:
         2c:a1:bf:cb:23:a0:3e:ab:5f:8f:70:c5:f9:bd:a7:c7:e5:41:
         d1:11:0d:10:a4:f4:1b:9a:c9:e9:90:89:82:0d:98:97:27:ff:
         67:7a:a1:10:0f:75:9e:95:11:3e:db:cf:95:d6:f5:fe:7b:b8:
         e8:ee:8b:1c:cd:8d:73:79:2a:8d:f6:04:3d:bd:fe:66:ca:4e:
         b4:71:c7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:58 2026 by rpki-client