Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/AlkS1-ooUjO64G2HelsNgB3hjVw.roa
File:                     AlkS1-ooUjO64G2HelsNgB3hjVw.roa (raw, json)
Hash identifier:          jtQQyi1o0iDbG7Z6SL80ulxMOIJkONz+ZqfTpky/95s=
Subject key identifier:   02:59:12:D7:EA:28:52:33:BA:E0:6D:87:7A:5B:0D:80:1D:E1:8D:5C
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       9D
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/AlkS1-ooUjO64G2HelsNgB3hjVw.roa
Signing time:             Wed 29 Jul 2026 02:41:26 +0000
ROA not before:           Wed 29 Jul 2026 02:41:26 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        133.32.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 02:41:26 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=025912D7EA285233BAE06D877A5B0D801DE18D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:46:99:1f:4c:da:ea:fc:ca:d5:10:90:d4:
                    12:37:13:c0:d7:86:b2:ba:e4:c0:a5:bb:d7:a1:37:
                    8f:1b:2e:db:9d:72:aa:75:5f:15:59:f3:0b:03:92:
                    0c:9c:9f:a4:7c:24:88:98:16:54:3d:da:b4:ca:a2:
                    e4:db:13:52:b6:c6:23:d7:38:88:21:e7:51:cc:a2:
                    47:f2:6c:2b:62:66:10:c4:e0:fd:c4:44:24:3d:0c:
                    21:aa:c7:4f:90:e1:78:65:4b:a7:64:25:76:d3:e2:
                    e4:33:15:bd:cb:f4:62:67:13:df:d2:1a:67:68:74:
                    be:c7:44:58:99:1d:d1:fb:4a:b0:7f:99:e1:c2:be:
                    56:fc:00:f4:2e:d1:46:9a:fb:73:6c:fc:a6:37:b4:
                    45:c2:d2:90:38:f1:77:4f:6e:a6:20:7e:e7:1e:bd:
                    53:b6:81:68:19:bf:77:6f:ed:c0:f1:03:4a:fa:7e:
                    53:bd:85:5d:9f:28:40:ab:3b:bf:96:89:d5:78:9c:
                    c8:f2:78:25:27:8c:22:47:a4:6c:6f:38:e9:75:2e:
                    82:96:38:5d:32:c1:f2:cc:80:f7:e9:1a:59:c6:e7:
                    79:46:4c:ce:03:6d:82:69:4d:e0:b5:42:d8:86:ce:
                    e9:c8:fd:af:c8:d0:05:ab:7c:eb:ac:8b:2c:07:29:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:59:12:D7:EA:28:52:33:BA:E0:6D:87:7A:5B:0D:80:1D:E1:8D:5C
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/AlkS1-ooUjO64G2HelsNgB3hjVw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:19:99:09:0d:b3:ae:a6:f8:2e:a9:95:d4:97:cd:c1:99:7e:
         92:51:dc:c3:25:f0:d1:18:8d:42:b5:05:7d:a1:e5:f9:4e:d8:
         b6:11:7c:b8:58:c8:37:83:d6:aa:17:60:f8:c4:9f:4d:0f:1c:
         2b:8d:0f:7a:a6:6d:06:c9:c2:93:86:99:fc:bf:d3:d1:2a:0d:
         6f:73:7d:8e:00:e9:63:a1:bb:66:0f:e7:a1:d6:e7:67:a7:97:
         b7:8e:fe:5a:ff:69:f5:a6:e3:af:e4:d7:80:29:5f:50:c2:89:
         da:9a:78:bc:94:d6:61:63:f6:57:2b:91:99:88:ae:40:99:5f:
         b3:3b:a1:25:70:16:04:99:3c:e7:b8:83:45:46:5b:64:5f:07:
         a9:bf:04:1d:05:e0:75:3d:33:74:35:b1:39:57:30:8b:b8:06:
         ec:9c:d2:91:2e:eb:14:53:ff:da:26:40:1a:24:94:c5:40:c2:
         db:2f:26:a2:a0:99:29:22:f8:8f:f7:fa:7b:9a:6e:37:e6:e6:
         da:c4:15:58:89:67:e1:65:67:9a:bd:4c:89:c8:01:1b:4a:ed:
         d7:3f:1e:87:05:d1:1f:f4:74:d8:e2:b8:95:a4:0c:5e:4b:39:
         9a:a8:9b:08:89:60:fe:08:69:37:ce:ba:b8:fd:73:56:bd:1a:
         3a:ab:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:15 2026 by rpki-client