Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/-DOPU_1goar2AepIfIjRlSmeLzU.roa
File:                     -DOPU_1goar2AepIfIjRlSmeLzU.roa (raw, json)
Hash identifier:          25zesMq3TNWA58Q0J66nAPpKBpou8darXnotfx8wU+Y=
Subject key identifier:   F8:33:8F:53:FD:60:A1:AA:F6:01:EA:48:7C:88:D1:95:29:9E:2F:35
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       57
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/-DOPU_1goar2AepIfIjRlSmeLzU.roa
Signing time:             Wed 20 May 2026 02:17:55 +0000
ROA not before:           Wed 20 May 2026 02:17:55 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        220.147.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 20 02:17:55 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=F8338F53FD60A1AAF601EA487C88D195299E2F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:c0:f7:31:e2:39:0c:82:d6:b5:a5:d8:4e:
                    8b:8f:23:7c:72:88:5a:ae:df:92:b9:27:ae:6e:11:
                    e8:9a:86:d0:05:df:e6:0c:a2:30:4d:2e:64:41:d5:
                    59:50:d3:8b:67:15:28:77:44:a3:d4:65:00:8d:d6:
                    2b:8a:20:dd:ec:5a:8f:8f:27:d4:56:15:db:11:2d:
                    39:c3:7b:84:f8:d2:71:bf:2e:b4:e3:cf:bf:a0:e8:
                    18:d6:35:00:66:05:35:5e:4f:c3:14:bc:3a:5b:f0:
                    5e:bd:d4:f0:ef:09:23:1a:44:36:04:2a:d1:f0:3a:
                    00:90:bc:f2:01:9c:8d:83:aa:4d:a4:e9:22:fb:5e:
                    11:84:fe:04:b0:83:af:b0:d5:18:0c:07:c6:7d:49:
                    69:c3:ea:ca:44:8d:12:85:a7:0a:bd:14:07:d6:53:
                    ed:c3:d4:7b:0d:5f:2e:1a:be:fd:aa:11:64:e6:09:
                    9b:92:54:a5:73:96:82:3b:8b:84:92:80:f9:33:5b:
                    15:13:45:4d:06:e1:5d:b7:35:6e:2d:6f:b6:c1:1a:
                    02:21:a2:bd:d8:06:17:9e:d0:bd:fd:46:23:2c:61:
                    da:95:13:67:ca:e5:eb:6b:62:73:23:f3:c8:a2:c5:
                    d5:6f:74:de:62:36:7f:17:97:46:e2:fb:e3:fe:9a:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:33:8F:53:FD:60:A1:AA:F6:01:EA:48:7C:88:D1:95:29:9E:2F:35
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/-DOPU_1goar2AepIfIjRlSmeLzU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.147.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:d0:c0:d8:5c:03:b1:fe:b7:00:03:7d:18:78:cd:b1:8f:
         93:a5:d1:cf:2d:88:fb:50:7f:64:ca:cb:1e:3f:23:fa:81:6e:
         cc:e2:66:fa:da:22:f3:0d:f6:16:75:a8:5e:0a:ce:15:24:bd:
         56:54:4d:4b:bf:6b:c6:04:5c:2a:04:02:16:71:14:aa:78:07:
         58:72:d9:5b:62:cf:4b:df:95:9f:15:2b:af:0b:c1:28:6a:df:
         85:34:65:10:ae:23:61:d6:35:b1:79:75:60:e0:30:4d:a3:72:
         25:54:64:ab:78:ea:5a:87:d2:7b:4e:82:f8:ff:ca:5c:f1:c8:
         f7:fc:9a:00:85:dd:bb:fa:47:d6:f3:c4:bc:e1:44:60:31:d6:
         b9:c7:fc:00:b3:48:fb:9e:eb:a2:34:56:f2:0f:a8:f7:9c:ee:
         05:06:2d:96:df:8e:f8:79:ac:48:aa:06:3b:92:c8:d8:59:a3:
         28:35:f7:0c:f1:66:89:2f:9f:2e:ed:12:9c:31:b9:55:c4:51:
         30:ca:bc:73:3c:e4:1e:20:ad:0b:61:9f:fa:86:83:ae:c3:f6:
         85:7b:14:86:f1:4b:7f:39:4b:fe:77:e2:1a:e6:18:1b:ec:c2:
         eb:4e:f5:28:b7:5e:70:72:cc:b0:62:d0:f6:53:14:c3:dc:27:
         33:3e:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:06 2026 by rpki-client