Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/Dd6GMOeAcVY4GH4m3TbRkp4JA3Y.roa
File:                     Dd6GMOeAcVY4GH4m3TbRkp4JA3Y.roa (raw, json)
Hash identifier:          4NTimEEtLrZIiFraLxaM9Pa8O8KkehrARCEijS/RO/o=
Subject key identifier:   0D:DE:86:30:E7:80:71:56:38:18:7E:26:DD:36:D1:92:9E:09:03:76
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       42
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Dd6GMOeAcVY4GH4m3TbRkp4JA3Y.roa
Signing time:             Tue 19 May 2026 02:33:54 +0000
ROA not before:           Tue 19 May 2026 02:33:54 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        202.241.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 02:33:54 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=0DDE8630E780715638187E26DD36D1929E090376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:ba:90:75:9f:9f:49:08:22:4b:2d:dc:dc:
                    e2:9b:26:3f:07:42:91:21:a4:b7:dc:bc:e2:81:ce:
                    48:27:fe:9b:06:85:a1:59:5f:7b:2b:3c:86:8b:2d:
                    94:e1:4d:13:92:7f:bb:f8:01:23:d1:8a:a1:8e:ae:
                    e0:b3:7c:78:27:80:ad:9f:63:9f:84:e4:0b:f2:f4:
                    20:1c:b7:8b:43:bd:3f:67:1d:aa:de:8d:7b:d0:22:
                    1f:73:52:bf:75:20:f8:e0:2e:3e:9a:9e:3c:cf:c7:
                    30:ee:50:36:f7:0f:72:0b:bc:b7:ed:73:9f:26:39:
                    f9:62:10:0b:1e:96:2f:af:87:54:53:19:e3:53:7f:
                    a7:4e:0e:30:aa:30:60:f9:f2:54:81:34:3c:da:67:
                    33:66:9b:ad:37:50:f7:24:16:ad:76:45:99:8f:90:
                    ad:c7:12:92:fc:7d:bd:aa:ea:4b:3f:55:7b:6d:92:
                    b2:04:e6:e4:05:fd:03:7a:26:ad:a4:56:68:1c:16:
                    c6:70:57:d9:bd:9c:f4:92:64:70:bd:6b:27:2b:98:
                    20:71:79:61:ef:25:79:0e:14:9b:a4:fc:53:2c:1a:
                    cc:0c:72:15:b0:db:31:4d:e2:c7:fb:b3:08:60:7d:
                    cc:8c:80:79:03:c4:e1:00:77:7f:17:cf:db:64:c5:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DE:86:30:E7:80:71:56:38:18:7E:26:DD:36:D1:92:9E:09:03:76
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Dd6GMOeAcVY4GH4m3TbRkp4JA3Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.241.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:d5:11:9e:d9:f2:15:18:3d:a9:93:98:e8:dd:81:57:e6:
         0f:3b:ef:d4:1c:ad:4a:32:45:73:32:66:8b:40:9d:50:75:29:
         d1:4a:ea:ab:e5:f4:f7:33:0c:e3:5f:91:7e:63:f6:75:24:eb:
         fb:76:ef:de:51:a6:37:d5:8c:56:43:f8:34:37:07:1f:16:34:
         e5:be:82:38:a7:dc:a1:7f:ce:79:60:9e:41:67:b1:a6:2e:ab:
         c6:35:09:ad:3c:3f:80:5d:8d:33:cb:8e:ac:a2:b8:4c:52:62:
         e8:82:09:da:b4:fb:d8:d4:25:b0:1b:04:47:bf:43:c4:b5:01:
         ba:a9:57:10:cd:6c:a0:53:6a:89:0a:de:b7:6d:f1:d3:2f:78:
         b2:1f:32:1e:ab:16:37:a8:1c:66:c0:25:bc:4d:e1:e7:a4:d6:
         f4:f1:80:41:ac:26:b6:7e:c3:9c:98:85:48:e4:8e:5c:a9:70:
         51:79:ce:84:35:83:84:96:83:c9:56:47:fb:64:0c:cc:76:36:
         ff:38:f9:49:2d:f0:89:46:4a:cf:b6:57:07:9b:73:ee:ad:42:
         4e:4f:75:83:0a:d5:07:eb:40:e7:1d:bb:86:59:92:08:fa:41:
         2d:88:ee:b7:67:05:d7:e4:1d:4b:57:fb:5f:84:ad:02:31:e5:
         ea:56:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:10 2026 by rpki-client