Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/212UaGRQ-Mqofcc54F4jpcuk5Nk.roa
File:                     212UaGRQ-Mqofcc54F4jpcuk5Nk.roa (raw, json)
Hash identifier:          HKe06vrK/acnl3I6lYfkAg8qnK2i1GmvzWXsd96v+8k=
Subject key identifier:   DB:5D:94:68:64:50:F8:CA:A8:7D:C7:39:E0:5E:23:A5:CB:A4:E4:D9
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       5D
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/212UaGRQ-Mqofcc54F4jpcuk5Nk.roa
Signing time:             Wed 20 May 2026 04:57:50 +0000
ROA not before:           Wed 20 May 2026 04:57:50 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        222.228.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 20 04:57:50 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=DB5D94686450F8CAA87DC739E05E23A5CBA4E4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:09:e4:b2:52:db:b1:75:7c:f8:46:5a:2b:
                    33:21:5a:83:90:a4:37:51:5f:e2:db:c0:bc:8e:82:
                    76:ac:2e:0f:68:7c:c6:89:69:f3:de:0e:65:d7:06:
                    ac:8d:33:5c:dd:46:39:42:cc:7b:de:41:aa:bd:5c:
                    0d:45:5e:1a:d5:60:5f:55:53:9e:f4:d6:eb:5a:e5:
                    93:f4:74:1b:d9:2f:9f:f6:2f:f2:8f:78:85:27:0f:
                    18:65:0f:f8:df:04:96:a9:ac:7a:c6:80:8f:b0:f7:
                    5c:67:23:ae:cf:8d:62:ef:d3:82:ee:52:ca:c4:dc:
                    bc:24:94:4b:ed:db:dd:65:d1:63:60:ae:f1:d0:1c:
                    10:7e:04:b4:51:c6:b0:8c:2f:4e:09:f4:64:a5:29:
                    4f:94:38:db:f0:a8:90:ac:92:aa:36:08:39:93:29:
                    2b:9e:82:d4:31:a2:51:41:ec:47:14:f0:3a:c3:34:
                    0d:8c:21:cd:77:db:25:fb:d1:3d:62:cb:d3:c6:44:
                    07:79:17:25:5b:d3:de:c5:c2:ff:51:61:ef:85:fa:
                    82:9c:69:c5:3f:15:ff:86:83:f5:12:2d:33:d8:db:
                    5a:dd:5d:37:76:9d:a7:08:27:75:47:33:c5:4b:9f:
                    fa:44:83:14:b9:99:0f:0b:e5:3d:65:7c:81:5d:e1:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5D:94:68:64:50:F8:CA:A8:7D:C7:39:E0:5E:23:A5:CB:A4:E4:D9
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/212UaGRQ-Mqofcc54F4jpcuk5Nk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.228.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:1d:a7:0e:ad:92:2f:f9:68:78:2c:78:5d:0a:02:92:7b:62:
         57:00:0f:f2:7f:2c:58:b7:94:e3:c3:77:6a:9d:2f:fc:6b:a8:
         11:7f:6a:55:b7:a3:59:a0:c7:45:93:ff:d6:51:27:c9:28:10:
         37:da:0e:4b:b2:0a:2c:10:ea:0c:bc:08:ac:0e:76:09:fc:12:
         05:7b:81:b3:d6:23:96:d9:44:2d:b2:ea:1e:a6:05:ba:b8:3b:
         93:db:63:f9:d8:33:5b:ca:46:1b:4c:7a:4d:da:d2:81:ee:23:
         d7:df:c6:91:77:c0:c0:1b:bb:1f:9b:3c:11:41:97:af:c3:27:
         1e:56:8f:6f:35:e6:64:95:a0:64:32:59:87:dc:54:5d:74:4f:
         f1:e0:8c:c4:16:44:fd:fd:35:3d:ec:32:4f:82:bd:6a:1e:10:
         2b:d0:82:80:17:35:27:fd:b4:05:5c:99:08:0d:87:79:6d:8d:
         fe:cc:2b:e3:91:fc:0f:6c:28:11:23:3e:2d:4b:1a:26:0e:87:
         0e:ed:91:21:f8:45:3f:fd:c1:66:ed:0d:f4:98:65:74:88:73:
         0d:2e:10:98:3f:8e:8c:a3:44:bb:e4:85:aa:b7:8a:79:8b:d8:
         d3:16:8a:e8:3e:95:37:bf:5c:9e:45:bd:bd:dd:0e:00:a2:e8:
         bd:ab:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:09 2026 by rpki-client