Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/xuEk-pnlzg11sDkVLAlFM6rci_0.roa
File:                     xuEk-pnlzg11sDkVLAlFM6rci_0.roa (raw, json)
Hash identifier:          An15GNh3UfzCVD62aKjuWfV1efbtO1PHpblk9IUuLGE=
Subject key identifier:   C6:E1:24:FA:99:E5:CE:0D:75:B0:39:15:2C:09:45:33:AA:DC:8B:FD
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       2E
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/xuEk-pnlzg11sDkVLAlFM6rci_0.roa
Signing time:             Mon 27 Apr 2026 02:53:57 +0000
ROA not before:           Mon 27 Apr 2026 02:53:57 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 27 02:53:57 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=C6E124FA99E5CE0D75B039152C094533AADC8BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:94:d8:8a:c4:e3:47:8f:45:e5:91:ed:18:
                    c8:52:5d:55:78:63:f6:18:83:37:96:41:76:dd:ff:
                    90:e0:85:eb:ad:0f:67:4a:98:4c:4d:db:68:f5:e7:
                    ef:77:9a:85:36:cc:d5:15:45:dc:df:1a:ec:11:be:
                    4a:54:30:2b:b7:a3:7c:e1:97:d2:a8:e0:b9:46:d7:
                    9f:b7:ed:88:83:ce:42:41:ec:a1:3e:be:72:ed:43:
                    64:a5:3b:cf:ce:23:59:2b:c5:a7:1c:b3:7c:45:b4:
                    25:9c:d6:33:e8:aa:c2:bc:a4:51:44:a6:68:d0:fa:
                    93:dd:11:50:0a:3b:ca:22:16:fe:c9:4e:68:87:24:
                    68:66:75:73:db:0d:f0:4b:a5:8a:54:58:eb:b8:fd:
                    d4:c4:e8:93:ed:19:6a:2b:3e:19:81:6d:51:b7:76:
                    22:bb:b0:f5:3f:62:60:19:ad:0e:3a:dd:a6:b5:44:
                    0f:af:70:89:df:46:84:c2:5f:3e:13:fe:5f:72:11:
                    78:e3:d1:b4:72:12:58:22:7d:19:09:54:0b:18:a3:
                    ef:a7:0f:9a:04:69:b9:52:09:c6:58:f0:d0:17:ac:
                    7b:92:3f:ec:29:e7:7b:f0:80:c5:0b:ae:6e:ba:6e:
                    48:8d:a8:67:61:93:fc:25:f9:ac:ed:93:b7:34:47:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E1:24:FA:99:E5:CE:0D:75:B0:39:15:2C:09:45:33:AA:DC:8B:FD
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/xuEk-pnlzg11sDkVLAlFM6rci_0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:b0:76:54:cb:f6:7a:32:68:c8:cd:db:ef:b7:85:ee:49:
         b9:7d:6c:a2:44:05:78:c1:99:15:90:11:07:70:d6:8e:39:a3:
         28:50:9e:21:45:9d:0a:11:c7:37:9b:dd:0c:4c:de:c0:ef:67:
         99:d4:cd:f2:7f:7f:54:4b:1e:c8:b7:6c:00:db:98:6e:e5:df:
         5d:9b:60:00:47:7d:78:8f:ef:9f:e3:23:e5:70:dc:a3:2a:06:
         90:7a:26:64:75:09:d8:ce:35:46:59:d2:d5:2e:4d:bd:24:d6:
         5f:ab:1b:c4:93:34:94:5e:47:16:28:48:38:94:6d:dd:ab:ac:
         6c:0e:51:c8:28:2d:e0:22:bd:ce:7e:30:f4:62:24:90:51:4b:
         aa:89:12:74:c3:eb:5d:45:15:7c:2d:1a:d0:77:04:92:bd:81:
         76:c0:c3:bf:cd:4b:aa:82:ad:cc:d3:b6:50:8e:66:01:d9:23:
         59:77:3a:a2:1b:dd:4a:12:f4:ad:54:65:f2:3c:40:48:e4:08:
         e2:d8:53:96:e8:5a:c1:58:a2:7e:59:c5:69:c5:91:5b:1f:d6:
         b4:fd:16:70:f1:18:c8:fc:88:93:9f:68:49:be:0c:c3:70:f4:
         64:b3:80:31:ac:07:00:03:72:13:38:f5:fa:42:70:8b:82:0a:
         6d:c2:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:55 2026 by rpki-client