Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/lQSFHSzDIrYnVas1aBmpQuqveKg.roa
File:                     lQSFHSzDIrYnVas1aBmpQuqveKg.roa (raw, json)
Hash identifier:          ghB7MacFzoYY1kHvIVbwYzSXVtKF8z53u5AUlGTHM9U=
Subject key identifier:   95:04:85:1D:2C:C3:22:B6:27:55:AB:35:68:19:A9:42:EA:AF:78:A8
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       35
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/lQSFHSzDIrYnVas1aBmpQuqveKg.roa
Signing time:             Mon 27 Apr 2026 06:08:39 +0000
ROA not before:           Mon 27 Apr 2026 06:08:39 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 27 06:08:39 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=9504851D2CC322B62755AB356819A942EAAF78A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:c9:f4:c1:46:cf:78:6d:29:b2:9c:10:9e:
                    9d:83:27:b0:d3:76:63:2c:26:ec:c9:65:56:78:8a:
                    4d:0e:b8:c4:18:16:87:7a:6e:d9:de:c9:ac:97:16:
                    dc:27:53:d1:e1:8e:ff:54:61:ca:e6:6f:03:9d:e0:
                    9b:df:ae:ed:c2:4b:21:71:9f:c0:ec:c8:4c:f1:7c:
                    e1:50:07:8f:2e:3f:e8:dd:df:db:a4:33:e1:37:84:
                    8c:c5:7d:34:19:45:e8:fa:04:7e:a6:4f:52:ac:b4:
                    85:4a:8b:77:52:d5:d6:b7:8a:e7:6a:c1:09:33:25:
                    e2:64:15:fe:18:e2:19:65:23:8a:ee:ed:b1:95:67:
                    3c:98:de:cd:04:0d:8e:11:0d:b4:bd:19:b4:68:33:
                    86:e3:92:02:fd:98:e2:91:26:a3:00:d8:d0:89:bf:
                    ed:a1:25:5f:dc:0f:9a:1e:e5:a3:03:82:82:59:72:
                    99:d7:2b:9d:4b:6e:20:59:af:68:36:fa:11:4c:e3:
                    74:fa:68:6d:95:07:52:a2:06:d8:6d:62:88:4e:b6:
                    70:7b:02:61:fb:39:47:af:4a:03:5c:2a:af:9b:8d:
                    62:eb:f1:76:09:08:40:c7:f6:0a:6c:3a:e3:5e:60:
                    fa:70:d8:c9:64:5b:59:e5:00:e7:37:5b:25:85:5e:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:04:85:1D:2C:C3:22:B6:27:55:AB:35:68:19:A9:42:EA:AF:78:A8
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/lQSFHSzDIrYnVas1aBmpQuqveKg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:a2:b1:d3:5a:93:08:b5:6d:d3:69:2d:82:5d:43:83:48:
         58:42:ee:c3:8d:09:da:c9:d0:e0:9b:28:64:ac:d7:4f:42:6c:
         ef:f5:13:8f:5f:b5:ff:6b:25:24:0b:32:39:f3:2d:38:f2:04:
         72:98:7c:25:df:08:f1:97:c9:45:a8:e4:11:74:c9:b8:7e:77:
         2d:47:4f:4e:99:8e:51:e7:02:6e:41:10:c1:98:9b:57:2a:b7:
         9b:bd:eb:43:84:44:ab:a0:b3:08:f6:92:93:b6:43:f4:ac:7d:
         37:9c:2c:4f:44:73:b9:20:bd:6a:1c:8d:70:6d:15:4e:d2:b6:
         1e:4b:2a:30:2a:0b:13:79:d5:12:23:ba:aa:7b:81:5b:bc:ea:
         66:6f:0f:42:a6:fd:ed:d5:e1:47:3e:23:5d:93:0b:72:37:c8:
         fa:6e:22:c9:9c:92:4e:58:1e:c8:58:83:3f:5b:5d:a0:27:15:
         9f:5b:97:63:d6:93:27:53:8b:ea:3f:2c:4e:ed:91:51:c1:9a:
         4e:c3:99:9f:55:ca:fd:19:d2:90:8e:0c:6e:2a:23:7b:96:f8:
         d3:3e:36:57:b1:e9:61:81:ab:a6:9d:15:7f:60:f0:bb:7a:9c:
         d8:6e:e6:8c:52:0a:1f:e0:cf:0c:90:32:b7:94:30:5e:4a:74:
         09:da:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:24 2026 by rpki-client