Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/KuX7bmVYqUw2Nang8ICry0h7nbg.roa
File:                     KuX7bmVYqUw2Nang8ICry0h7nbg.roa (raw, json)
Hash identifier:          /LGxyTABAnTP+vdCJiVVuaXSX7PZXHXbScZuGKTxSP8=
Subject key identifier:   2A:E5:FB:6E:65:58:A9:4C:36:35:A9:E0:F0:80:AB:CB:48:7B:9D:B8
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       90
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/KuX7bmVYqUw2Nang8ICry0h7nbg.roa
Signing time:             Tue 31 Mar 2026 08:24:58 +0000
ROA not before:           Tue 31 Mar 2026 08:24:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        119.148.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:24:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2AE5FB6E6558A94C3635A9E0F080ABCB487B9DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:b8:72:ae:b2:d1:cd:dc:3c:dd:4a:0c:14:
                    f0:21:f6:51:1f:58:76:b3:98:ef:1d:10:9a:20:20:
                    f7:89:72:6b:de:45:4f:cf:8f:c4:9c:9a:46:bc:7b:
                    3e:79:51:82:9d:02:6e:bc:9a:10:51:36:f8:8d:5c:
                    5a:fe:d4:0d:8c:44:75:02:95:6f:ed:28:21:b6:a0:
                    51:52:ac:79:1d:b4:50:00:39:15:cb:bb:ce:17:f2:
                    3c:00:58:8d:b9:7f:cf:93:7a:3f:fd:f7:27:77:22:
                    a6:66:1d:c5:f5:da:95:3e:49:e6:00:01:64:49:a3:
                    ea:f8:ee:96:ef:12:85:e8:0e:c6:88:ff:83:ee:22:
                    a2:ba:8f:b2:e8:9e:ca:9f:08:2d:3d:1e:07:0e:f5:
                    fc:ce:9f:e9:03:57:27:e5:a9:2d:d6:68:4b:64:38:
                    8f:7b:39:73:39:0b:7a:25:3d:cd:33:38:82:57:13:
                    db:db:df:81:76:d3:8a:c2:c8:6f:8d:21:3f:ea:5f:
                    e3:37:ee:80:96:f6:82:b0:cf:91:f6:c3:73:08:de:
                    7f:b5:33:24:06:78:69:8f:fc:ef:8c:38:de:40:9b:
                    18:26:d7:f5:12:e7:34:83:d2:39:09:76:b1:fe:84:
                    5b:02:8e:9f:b8:54:bf:b4:1e:a4:73:81:97:91:c0:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:FB:6E:65:58:A9:4C:36:35:A9:E0:F0:80:AB:CB:48:7B:9D:B8
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/KuX7bmVYqUw2Nang8ICry0h7nbg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.148.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:c7:b8:a0:9f:b8:d5:ec:08:53:30:f8:1f:01:09:c2:6f:
         fd:2e:20:ed:11:84:96:9b:71:a1:94:81:30:3d:b9:9e:7e:38:
         b2:df:c2:ef:b8:87:9f:06:b9:e2:8f:d5:c7:22:91:1f:b0:48:
         54:65:9c:d4:ad:c9:3b:63:1f:d0:3d:61:40:87:b9:b4:75:c0:
         61:07:3a:d4:2e:2a:40:26:b0:b9:b0:95:5d:ee:d1:81:ee:7c:
         0b:0e:7b:15:b7:cf:5f:fa:03:20:20:62:74:ff:c1:46:24:97:
         b9:fd:d1:32:73:38:25:dc:18:e9:05:7f:14:f4:62:04:73:7b:
         87:aa:bb:26:1c:1a:a1:16:2f:d5:c6:18:06:c9:71:0c:2e:9f:
         65:52:c4:cf:84:03:ee:fc:e7:51:a9:3c:9e:7d:3a:17:a3:ab:
         4c:68:ec:82:b7:49:8d:54:57:c1:10:20:88:9b:16:e2:a8:cd:
         db:86:22:22:6d:72:17:b6:3b:b7:e4:08:47:9c:a3:9f:ba:39:
         20:4e:20:b2:18:6e:8c:91:d1:12:c2:80:fc:c2:31:21:41:0d:
         4d:ab:ae:db:64:a2:d7:f6:59:d0:21:ab:27:a4:fe:cc:64:6c:
         49:32:ad:20:39:fe:48:ac:80:36:a7:a7:ce:7f:32:09:af:0e:
         bb:d1:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:39 2026 by rpki-client