Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/RaZCjTOgl-DMTsau9naOXqZMpM8.roa
File:                     RaZCjTOgl-DMTsau9naOXqZMpM8.roa (raw, json)
Hash identifier:          VbZA1/tJlKmrQSuV8TXdIGMGxTLT2nQzb59C2fpxUv8=
Subject key identifier:   45:A6:42:8D:33:A0:97:E0:CC:4E:C6:AE:F6:76:8E:5E:A6:4C:A4:CF
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       4F
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/RaZCjTOgl-DMTsau9naOXqZMpM8.roa
Signing time:             Tue 19 May 2026 05:13:14 +0000
ROA not before:           Tue 19 May 2026 05:13:14 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        221.112.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 05:13:14 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=45A6428D33A097E0CC4EC6AEF6768E5EA64CA4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:83:2c:2a:8e:40:43:b9:7c:1d:8f:3a:cd:
                    75:df:2f:38:ff:1e:82:82:a8:68:74:d0:c0:63:4e:
                    e1:f3:9a:19:62:8d:fb:2e:6a:51:29:09:83:8f:8b:
                    17:ea:b2:67:8b:f2:4b:5a:0b:10:a1:79:7e:76:6d:
                    fa:fe:85:fd:c7:0e:de:a1:62:95:9b:52:4d:fa:4c:
                    29:68:fb:05:c6:9f:97:5f:4b:cf:ee:5b:97:cf:1d:
                    4a:f6:cf:66:d8:71:3b:7c:ef:c9:74:69:61:95:1d:
                    5d:7a:26:c6:f5:22:e5:c2:f5:0c:95:22:c0:9b:00:
                    83:a3:57:39:27:80:27:97:d5:97:ff:b9:ac:ec:b4:
                    e0:ce:85:09:83:b0:a4:3a:15:d5:81:f8:7d:cd:89:
                    04:a6:8a:45:43:48:7c:31:27:a7:c2:5b:72:83:a9:
                    67:d4:78:67:c5:2e:48:10:25:5f:73:87:b8:27:2d:
                    7c:7a:5a:d4:8f:b6:e6:33:01:10:1c:ce:9f:f1:0b:
                    33:08:be:70:13:98:97:1b:ae:75:85:a2:fc:2b:5c:
                    bb:58:c2:96:e4:4f:68:65:dd:ad:7a:47:2d:55:b2:
                    5c:5a:09:b4:c9:75:45:95:66:18:50:23:21:5e:a5:
                    f7:1f:62:2e:4e:c7:d6:d8:f9:42:b0:e7:60:09:1e:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:42:8D:33:A0:97:E0:CC:4E:C6:AE:F6:76:8E:5E:A6:4C:A4:CF
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/RaZCjTOgl-DMTsau9naOXqZMpM8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:60:e3:b5:da:f2:43:61:53:5a:d6:a7:a0:da:1f:7e:49:
         08:47:8e:05:9e:cf:b3:fc:12:4b:e7:26:ff:69:f4:44:b0:ab:
         87:0a:47:13:16:d3:04:97:77:9c:3f:f8:f0:ce:c6:45:27:6a:
         6d:09:dc:86:52:c7:ae:7e:8e:43:29:95:2c:eb:74:71:f9:01:
         21:22:55:bb:14:26:32:51:f3:f0:7b:83:86:a0:fc:f4:f0:37:
         4d:ce:ca:d2:f4:0a:75:05:77:7b:4c:06:90:2d:bc:97:9c:93:
         99:5f:51:7a:d2:32:de:20:2b:fd:cc:7e:41:c3:a3:aa:8b:25:
         6d:d6:9b:a7:fe:e7:e2:80:fe:ce:fe:9e:62:bc:d6:45:00:63:
         e3:43:9a:74:45:d9:5d:c1:63:1a:f3:c0:c2:b5:25:8c:e8:bf:
         83:c0:2d:f1:72:72:48:a0:ea:92:27:60:a8:00:a7:60:f2:6b:
         12:ab:dd:58:8b:3e:a5:af:60:8e:9d:b0:e1:99:90:a1:ba:7a:
         01:3f:08:2a:3c:81:c7:ae:90:72:dd:b2:83:1f:5b:19:fe:f5:
         2a:1f:1e:46:34:e5:54:fb:29:64:f4:6b:c9:d2:fb:39:22:62:
         cc:a9:8a:5f:46:c4:9b:08:95:b7:7b:c6:37:06:76:7d:fb:7e:
         c2:be:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:07 2026 by rpki-client