Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/h45ut7sRyJh_uJQnotp3Bmz42vc.roa
File:                     h45ut7sRyJh_uJQnotp3Bmz42vc.roa (raw, json)
Hash identifier:          TbJXP7ut7DMfA6lg2I7WDFbYoSX/ULkxg0sZiqNIUL8=
Subject key identifier:   87:8E:6E:B7:BB:11:C8:98:7F:B8:94:27:A2:DA:77:06:6C:F8:DA:F7
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       25
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/h45ut7sRyJh_uJQnotp3Bmz42vc.roa
Signing time:             Wed 22 Apr 2026 05:24:43 +0000
ROA not before:           Wed 22 Apr 2026 05:24:43 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        133.32.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 22 05:24:43 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=878E6EB7BB11C8987FB89427A2DA77066CF8DAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:80:7c:af:86:08:29:f8:d5:99:10:1c:71:
                    6e:a8:31:7e:ee:49:5b:44:c9:ce:23:78:19:f7:d0:
                    77:77:ee:f2:5a:0f:28:2e:7b:4d:f2:33:b1:c6:be:
                    08:8a:b1:c1:38:fa:04:f1:b7:72:52:9c:b7:e2:4a:
                    01:0c:de:5d:cf:8c:06:4d:b8:bf:2b:17:bc:a4:1a:
                    3c:01:c9:3a:96:e8:6c:d6:49:44:a6:22:4f:48:52:
                    56:85:14:0a:7e:80:4d:d3:b0:49:ef:96:16:4b:f6:
                    7d:ad:57:75:f5:56:36:22:03:66:ec:e7:b4:03:15:
                    1d:70:03:01:fd:55:4f:ac:cc:88:9d:2f:52:5b:07:
                    ef:07:2d:9d:97:b7:01:1e:35:49:0e:71:f4:91:6a:
                    51:07:9a:15:74:f7:c8:5f:40:33:37:5f:c8:73:b9:
                    19:39:92:0d:69:39:3f:d0:68:a9:d8:7f:29:fd:70:
                    d8:84:1f:f4:23:95:d9:58:4c:5c:6f:c7:23:00:37:
                    11:0f:97:2d:58:18:b9:02:92:ac:61:6d:4d:3f:b2:
                    bf:1c:8e:ed:3b:f6:89:ff:9e:fb:4c:80:27:d4:f6:
                    42:ba:47:a1:4b:15:78:c8:ef:d2:70:8a:10:30:c0:
                    cb:99:d4:07:87:db:76:18:90:57:78:72:c7:0b:09:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:6E:B7:BB:11:C8:98:7F:B8:94:27:A2:DA:77:06:6C:F8:DA:F7
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/h45ut7sRyJh_uJQnotp3Bmz42vc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:09:2e:17:c2:d8:c1:56:36:12:06:68:4b:4e:ab:4c:ae:
         d2:c6:d1:c0:a4:02:e0:4b:d1:71:24:f2:69:37:73:f5:4a:e3:
         6c:cb:cf:b7:2b:39:7e:e2:3d:3b:b5:1a:b5:e5:e7:f2:9f:24:
         56:24:97:73:32:02:a6:10:9d:f3:34:62:16:5c:f1:05:56:96:
         9c:a6:f0:d3:ae:9f:35:43:e0:7a:66:22:85:1e:d0:36:94:c4:
         52:b4:77:e4:43:0f:ed:34:52:95:21:4a:f4:d3:8e:de:40:6d:
         e1:e6:f1:39:a9:03:00:7c:d6:55:1a:a4:b5:7e:51:ab:c6:34:
         7b:14:f3:3a:b8:78:2f:a9:b4:69:75:f5:8f:c7:15:ff:7b:c8:
         d1:f1:a5:d2:94:18:1a:9c:8a:b5:a4:2c:a2:e5:c1:52:e8:ae:
         a3:d7:40:b9:d6:fe:df:d5:a4:f2:88:d7:73:15:41:e4:90:de:
         52:60:80:af:15:18:81:e8:3a:b8:20:2c:68:bf:0d:60:38:05:
         66:bc:5a:40:76:64:9c:cc:ad:9f:b8:53:f3:28:b7:ba:7b:27:
         36:7f:95:4e:ba:d2:92:31:18:97:25:89:1d:8c:b8:40:66:90:
         e6:e0:5f:88:83:3d:16:1f:6b:10:00:24:37:26:51:67:dd:e1:
         f5:c8:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:19 2026 by rpki-client