Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/VLYiVNgA2u1ccyJzvXwfemZvJxI.roa
File:                     VLYiVNgA2u1ccyJzvXwfemZvJxI.roa (raw, json)
Hash identifier:          lwBJ7rpwShZGhIAdxVWF76wXqFMHMmL+TmQo7H+WH30=
Subject key identifier:   54:B6:22:54:D8:00:DA:ED:5C:73:22:73:BD:7C:1F:7A:66:6F:27:12
Certificate issuer:       /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
Certificate serial:       26
Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/VLYiVNgA2u1ccyJzvXwfemZvJxI.roa
Signing time:             Tue 31 Mar 2026 08:42:18 +0000
ROA not before:           Tue 31 Mar 2026 08:42:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        138.101.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 03:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
        Validity
            Not Before: Mar 31 08:42:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=54B62254D800DAED5C732273BD7C1F7A666F2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:f6:e9:c9:4d:1f:45:c5:c0:8b:3c:01:91:
                    52:ce:b6:7e:04:8a:c4:23:59:5f:66:6c:e3:31:fe:
                    f2:fc:ea:5d:83:95:df:1f:51:23:1c:68:04:ae:b5:
                    17:da:3d:bd:ad:d6:c5:c1:a1:fa:cd:51:87:a3:bc:
                    be:51:d2:ca:ce:56:63:2e:23:66:45:2e:d2:c1:a1:
                    f1:7d:b2:65:9b:da:f7:01:ec:27:9b:a3:3c:e7:a5:
                    9a:50:c9:01:a4:fa:39:04:fe:46:b2:97:92:8e:90:
                    c8:77:dd:a8:08:9f:a7:e5:40:44:c1:45:fb:73:3e:
                    20:a0:55:68:2f:0b:b5:3e:62:6b:fb:50:c2:4f:c7:
                    70:f4:4b:bc:25:d8:7b:e5:87:89:a7:14:02:22:3d:
                    cb:85:23:5a:ee:1b:e6:33:74:58:c6:88:01:58:39:
                    f2:c3:cc:04:20:78:79:e0:6d:06:81:33:08:92:0a:
                    ae:dd:f7:36:59:25:7a:cd:51:ad:74:13:e4:a0:70:
                    ab:53:de:26:e6:32:1d:0e:7d:6c:17:dc:12:3b:da:
                    b0:5b:dc:32:21:f5:d5:12:b8:81:f5:bc:47:38:75:
                    5d:c8:be:3c:f0:56:76:ee:1d:be:49:a8:ad:3a:12:
                    2a:88:65:42:83:0d:11:6e:c8:c3:a1:09:cf:ec:98:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:22:54:D8:00:DA:ED:5C:73:22:73:BD:7C:1F:7A:66:6F:27:12
            X509v3 Authority Key Identifier:
                keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/VLYiVNgA2u1ccyJzvXwfemZvJxI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.101.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:21:ca:4c:a7:e5:f3:63:04:79:b8:4b:de:5b:3b:f9:44:76:
         5a:23:21:df:bb:aa:0b:dc:73:36:77:c2:1b:c9:9f:13:c1:53:
         01:82:b1:dc:61:e8:58:1b:a1:13:79:19:67:cd:c9:e6:09:df:
         76:89:94:bf:d4:72:d9:0b:0b:0e:7c:15:33:03:ab:59:9b:32:
         8c:40:ac:d4:a0:09:c0:f7:81:f0:9b:ef:cc:eb:54:d5:f8:04:
         4b:78:48:b2:af:38:17:54:c9:10:78:f6:3d:8a:99:f5:5d:92:
         dd:d0:05:7d:c9:28:6e:52:78:8f:c4:7d:71:16:3e:5b:3b:b3:
         97:ba:5c:dd:ae:87:85:66:68:47:78:e4:f5:3e:e0:eb:3d:78:
         93:86:1d:d9:4b:be:2a:3c:97:e9:cf:c5:ae:40:9b:fb:cd:14:
         dd:ab:e1:8e:42:19:92:7e:8f:ec:bb:12:4f:17:b8:27:b8:08:
         0c:41:65:91:e7:71:1d:41:00:b9:11:8c:1b:d5:46:b5:be:f8:
         42:4f:71:90:b6:b1:43:1e:06:33:3d:d2:8f:03:49:87:69:07:
         23:ad:2e:89:74:71:4b:12:38:8a:4f:df:f7:99:f3:41:64:10:
         6d:6d:6e:98:39:f0:e4:60:0b:fe:25:bb:ce:19:80:56:da:77:
         80:ed:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:18 2026 by rpki-client