Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/rAhUdraF1fzaV4tzq3JHItlLzrw.roa
File:                     rAhUdraF1fzaV4tzq3JHItlLzrw.roa (raw, json)
Hash identifier:          cgrkiNzyqzgxbBGM75+bbXK4RDl6Uv9VgiXXb4AKYgY=
Subject key identifier:   AC:08:54:76:B6:85:D5:FC:DA:57:8B:73:AB:72:47:22:D9:4B:CE:BC
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       38
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/rAhUdraF1fzaV4tzq3JHItlLzrw.roa
Signing time:             Thu 30 Apr 2026 07:12:42 +0000
ROA not before:           Thu 30 Apr 2026 07:12:42 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 30 07:12:42 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=AC085476B685D5FCDA578B73AB724722D94BCEBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:a6:ba:a2:2a:ca:5b:f5:13:11:49:e6:b2:
                    fd:6c:4a:44:f3:5b:72:ed:3b:49:fd:c4:b6:a1:34:
                    27:b5:73:18:b8:ea:6a:c3:69:04:e6:e0:b4:c0:42:
                    ce:7b:a3:e0:5a:c6:15:c5:81:c5:6f:b6:01:f8:b9:
                    26:e0:0c:17:9c:f8:df:67:64:d8:93:16:7e:c7:08:
                    aa:2d:78:89:35:a9:42:a8:96:ad:af:02:33:09:1e:
                    eb:ea:53:97:30:ba:0d:67:16:53:94:d9:4b:32:6e:
                    dd:7b:c1:ea:e1:ac:69:0b:a0:6e:3a:b6:97:88:d8:
                    9e:5f:9a:5f:cd:f1:51:65:82:0f:e8:d4:de:ca:73:
                    61:c9:7d:41:50:f2:56:39:7d:00:7c:fc:4e:0e:7d:
                    be:16:8f:ba:e7:1f:60:f0:0e:0e:2d:e9:79:c3:67:
                    d7:1e:39:ad:f5:b2:a2:82:58:87:23:e9:13:68:8f:
                    d7:42:01:eb:f3:27:18:4f:d5:96:d1:c6:59:42:b8:
                    41:bc:2f:80:c8:07:d2:91:3e:bf:ea:ec:57:19:5f:
                    d3:ae:1d:d0:0b:0b:41:38:56:7e:6e:b1:06:59:0b:
                    75:da:1b:d1:b2:9d:b3:ea:92:b5:87:3e:4c:85:72:
                    01:67:1d:90:d9:c2:5f:14:21:ae:8e:a5:93:1b:15:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:54:76:B6:85:D5:FC:DA:57:8B:73:AB:72:47:22:D9:4B:CE:BC
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/rAhUdraF1fzaV4tzq3JHItlLzrw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         da:56:96:3f:56:a9:87:45:f6:0b:b3:2e:2e:14:82:b1:c6:41:
         bf:95:99:3d:13:9e:aa:99:d0:26:69:04:de:cf:14:8e:ae:00:
         88:f0:1b:52:83:44:ac:e6:3a:df:6d:2d:ec:69:91:c8:ba:3a:
         86:d6:ec:c7:11:47:64:65:c8:04:5a:f5:89:b5:39:da:13:23:
         dc:ac:d0:5d:4b:64:1d:fe:c5:90:75:59:84:a7:b9:47:33:39:
         0a:31:ec:23:45:fd:c7:fb:20:f5:7e:2e:b4:56:37:f3:b3:13:
         fd:1c:d6:99:17:42:be:90:93:cb:fd:38:67:55:a7:c3:64:b8:
         20:99:74:71:25:63:8c:05:c4:fa:b9:8f:26:2f:f8:97:5c:10:
         71:76:be:12:f3:ae:fc:cd:f5:c9:73:8e:17:0f:b8:0d:90:26:
         9e:cf:3d:06:71:fe:28:bd:01:d2:95:26:37:49:b7:2b:9c:0e:
         73:8f:dc:db:22:8d:9d:6b:c0:4b:06:a0:02:8b:f5:d8:65:64:
         34:28:08:10:53:a9:69:57:d9:bd:5c:d4:ef:56:72:76:3f:43:
         d4:c0:17:2b:4c:54:84:37:73:f9:4d:9b:7b:02:88:0b:82:fa:
         84:09:d7:e1:47:1c:a0:cc:82:12:09:f1:5f:2a:48:ff:07:a2:
         ba:34:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:15 2026 by rpki-client