Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/sXRI1KkWLYnkND4apvR2Bup6as8.roa
File:                     sXRI1KkWLYnkND4apvR2Bup6as8.roa (raw, json)
Hash identifier:          B3X06cnyVeqWVYWHfkiwBHWk70r1hFo/btyftZQSzZM=
Subject key identifier:   B1:74:48:D4:A9:16:2D:89:E4:34:3E:1A:A6:F4:76:06:EA:7A:6A:CF
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       37
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/sXRI1KkWLYnkND4apvR2Bup6as8.roa
Signing time:             Thu 30 Apr 2026 07:06:53 +0000
ROA not before:           Thu 30 Apr 2026 07:06:53 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 30 07:06:53 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=B17448D4A9162D89E4343E1AA6F47606EA7A6ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:e9:d9:95:61:ac:bb:7f:87:a6:9c:54:32:
                    a1:4d:ce:e3:6c:62:17:75:73:59:67:e6:64:e4:e3:
                    55:15:96:20:9f:43:c6:d0:f5:db:70:dc:6b:58:33:
                    d5:d9:df:47:a0:62:0a:51:4c:00:37:6b:07:af:5b:
                    12:ed:67:95:f8:ef:ee:94:db:05:5d:2c:31:b3:11:
                    f1:ec:3c:c4:e4:1a:b3:13:ec:44:5b:ea:19:08:35:
                    03:d4:36:cd:20:be:4b:af:4a:46:83:f2:d5:04:ea:
                    c1:ef:aa:71:51:25:e6:f9:7c:9e:1a:fc:45:4c:e1:
                    ef:17:58:6b:a4:78:16:a2:37:f2:6c:b0:a0:f0:55:
                    af:03:51:a9:15:0c:b4:9f:03:42:ba:bf:75:df:76:
                    bd:dc:12:bf:3c:7c:54:7d:f2:bc:1a:19:99:9e:54:
                    65:1a:89:b6:be:96:e1:8d:d3:3d:6d:2b:f0:9f:ce:
                    a7:10:67:d5:a3:16:b2:d2:f7:f3:8d:d9:ad:1f:2c:
                    d8:06:8f:8d:39:e5:05:84:a0:0d:38:56:99:40:f6:
                    b4:a3:e1:a3:8d:53:91:2e:46:45:f3:22:6d:51:a7:
                    79:36:a2:fa:76:5a:a6:ee:e0:e7:d9:db:fb:43:d0:
                    79:97:7b:41:de:7b:1f:8c:f4:76:f0:62:22:36:3f:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:48:D4:A9:16:2D:89:E4:34:3E:1A:A6:F4:76:06:EA:7A:6A:CF
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/sXRI1KkWLYnkND4apvR2Bup6as8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:79:52:ca:a0:cc:8b:e8:1c:ff:98:84:0f:6a:41:71:0b:56:
         3c:41:8e:88:f7:e7:e7:87:03:8b:bd:45:15:e9:2f:d0:3e:f7:
         dc:a8:91:7c:3a:66:da:13:79:2c:cf:3c:4b:a5:5f:5a:7e:ce:
         5f:60:ae:02:89:64:5b:f9:d1:c0:0e:36:3f:06:cc:27:ab:96:
         49:44:1e:14:0d:13:c1:ca:96:8c:f7:42:30:29:d9:c8:19:55:
         18:46:bd:1f:2d:49:92:ee:a5:2d:5b:b5:57:52:ef:0e:ac:51:
         19:06:9f:a7:6d:03:9b:7a:5f:af:d7:b4:80:92:db:02:45:39:
         f5:a5:b5:4c:a7:a6:e5:7c:bc:59:ea:08:b5:e5:b4:5b:65:de:
         17:d3:f6:23:64:ad:51:a4:18:b0:66:f4:2f:e8:a7:dd:98:d3:
         c7:91:b0:96:c9:b9:d8:97:f8:b7:63:34:63:90:19:f2:73:f5:
         d0:4e:dc:ea:3e:3e:65:96:a2:88:8b:e6:d8:c3:c4:15:55:2a:
         5a:ea:ba:9d:f8:e6:ec:28:6b:4d:c2:99:ee:97:f6:ac:1a:f5:
         8a:81:99:b3:84:48:2c:3c:c0:4a:ad:db:08:3a:c1:66:28:4e:
         8c:4c:8e:fb:72:38:61:ac:1e:8d:c5:98:77:9e:07:41:09:04:
         a3:cf:4c:89
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDQzMDA3
MDY1M1oXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQjE3NDQ4RDRBOTE2MkQ4
OUU0MzQzRTFBQTZGNDc2MDZFQTdBNkFDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALSA6dmVYay7f4emnFQyoU3O42xiF3VzWWfmZOTjVRWWIJ9DxtD1
23Dca1gz1dnfR6BiClFMADdrB69bEu1nlfjv7pTbBV0sMbMR8ew8xOQasxPsRFvq
GQg1A9Q2zSC+S69KRoPy1QTqwe+qcVEl5vl8nhr8RUzh7xdYa6R4FqI38mywoPBV
rwNRqRUMtJ8DQrq/dd92vdwSvzx8VH3yvBoZmZ5UZRqJtr6W4Y3TPW0r8J/OpxBn
1aMWstL3843ZrR8s2AaPjTnlBYSgDThWmUD2tKPho41TkS5GRfMibVGneTai+nZa
pu7g59nb+0PQeZd7Qd57H4z0dvBiIjY/zg0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSxdEjUqRYtieQ0Phqm9HYG6npqzzAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvc1hSSTFLa1dMWW5rTkQ0YXB2UjJCdXA2YXM4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3RciDANBgkqhkiG9w0BAQsFAAOCAQEA
BXlSyqDMi+gc/5iED2pBcQtWPEGOiPfn54cDi71FFekv0D733KiRfDpm2hN5LM88
S6VfWn7OX2CuAolkW/nRwA42PwbMJ6uWSUQeFA0TwcqWjPdCMCnZyBlVGEa9Hy1J
ku6lLVu1V1LvDqxRGQafp20Dm3pfr9e0gJLbAkU59aW1TKem5Xy8WeoIteW0W2Xe
F9P2I2StUaQYsGb0L+in3ZjTx5Gwlsm52Jf4t2M0Y5AZ8nP10E7c6j4+ZZaiiIvm
2MPEFVUqWuq6nfjm7ChrTcKZ7pf2rBr1ioGZs4RILDzASq3bCDrBZihOjEyO+3I4
YawejcWYd54HQQkEo89MiQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:11:30 2026 by rpki-client