Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/gcYWAvusoTKXv9ZexhYgUO03AlI.roa
File:                     gcYWAvusoTKXv9ZexhYgUO03AlI.roa (raw, json)
Hash identifier:          9PIeNfNCxZpH4iz5eWWRW6EytfZpnFXECsGFDFHJ6AI=
Subject key identifier:   81:C6:16:02:FB:AC:A1:32:97:BF:D6:5E:C6:16:20:50:ED:37:02:52
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       3A
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gcYWAvusoTKXv9ZexhYgUO03AlI.roa
Signing time:             Thu 30 Apr 2026 07:25:02 +0000
ROA not before:           Thu 30 Apr 2026 07:25:02 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 30 07:25:02 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=81C61602FBACA13297BFD65EC6162050ED370252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:75:99:f0:93:04:a4:4d:69:c3:40:4a:4d:
                    ed:e1:a2:d8:02:b8:8f:1e:0e:6a:eb:1f:41:2f:47:
                    b7:94:83:a6:5e:7b:6a:fd:4d:64:bd:0f:1c:c6:dc:
                    9a:69:a8:ec:61:5e:b9:f1:fd:1f:92:e1:aa:75:d0:
                    0c:1b:e9:2e:c5:ce:63:fa:87:63:29:07:c9:5b:0f:
                    43:d0:6b:66:06:f6:0f:69:7f:85:1c:d6:1f:e7:f0:
                    43:f0:4f:18:87:6d:01:de:bb:36:8d:47:96:0c:f9:
                    1b:27:73:e6:9d:56:0c:c5:40:d1:6a:d0:15:90:f2:
                    7c:04:6a:d5:6d:26:9d:b0:96:b2:a8:32:8b:f1:4d:
                    d5:53:61:08:1d:a6:57:a6:5b:a8:ab:24:bf:ac:b5:
                    88:4e:b1:38:43:72:e8:56:1b:90:50:10:ec:89:4c:
                    51:6e:7d:8d:ce:3f:b8:bb:26:80:17:68:7d:41:b4:
                    62:f2:89:b5:1c:3d:48:25:b4:da:18:93:35:30:75:
                    6a:9f:b1:47:89:59:6d:e7:59:b5:4b:aa:73:09:c1:
                    72:0c:42:8c:52:54:d1:56:b1:71:68:85:5b:2d:99:
                    18:77:af:83:06:3e:11:02:9a:4d:49:1c:47:84:4f:
                    fa:d3:29:62:97:d1:19:cd:b4:dc:a9:c2:1f:a9:b3:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:16:02:FB:AC:A1:32:97:BF:D6:5E:C6:16:20:50:ED:37:02:52
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gcYWAvusoTKXv9ZexhYgUO03AlI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:0e:30:8e:f1:87:6d:42:a2:37:6d:12:dd:93:24:65:20:
         73:1d:ed:61:7b:3e:90:6a:ec:6e:d7:74:bb:27:2c:ba:f0:07:
         11:82:c1:09:71:a6:01:95:fc:10:af:7a:f2:f2:90:a1:34:3c:
         2f:bc:63:3c:13:ef:8d:82:a0:87:33:fe:3c:5e:5b:bf:ba:3d:
         d8:19:7b:70:d2:66:30:01:d8:e5:78:be:16:81:b6:60:f6:71:
         96:09:4d:23:5d:4a:80:4b:30:a5:bc:ad:d0:d6:e9:a4:94:c9:
         9d:e9:1a:bf:a1:5a:2d:2e:1b:49:4a:6e:3c:4d:8b:d8:42:54:
         3e:70:e7:bb:5a:4e:d2:2f:b7:66:44:b8:df:b1:60:ff:a8:ac:
         b0:24:83:3e:12:b6:13:f0:76:cb:20:a1:53:ab:e9:2d:4a:a7:
         14:c3:c0:6b:d8:98:f8:a1:cb:5d:4f:d8:94:5e:47:61:d8:b8:
         01:e3:3a:07:cf:df:ae:06:67:44:26:d2:32:39:60:f0:6b:3f:
         54:bd:91:d8:5a:46:ab:42:76:19:63:67:20:db:33:43:7d:9e:
         ff:51:30:f9:4a:78:c3:0a:3d:43:99:fc:8f:a9:b1:cd:3d:21:
         37:23:ac:d8:4c:04:fe:0a:ee:f6:db:10:f4:83:ab:62:9b:12:
         ac:57:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:50 2026 by rpki-client