Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/Tv6-3N_SvaKA-8JqUbcuKeJrn2o.roa
File:                     Tv6-3N_SvaKA-8JqUbcuKeJrn2o.roa (raw, json)
Hash identifier:          ye62P5odanw1Y9C59la18aKK5KVLbMdUTSJerSlOcko=
Subject key identifier:   4E:FE:BE:DC:DF:D2:BD:A2:80:FB:C2:6A:51:B7:2E:29:E2:6B:9F:6A
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       5B
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Tv6-3N_SvaKA-8JqUbcuKeJrn2o.roa
Signing time:             Wed 20 May 2026 02:42:08 +0000
ROA not before:           Wed 20 May 2026 02:42:08 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        220.158.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 20 02:42:08 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=4EFEBEDCDFD2BDA280FBC26A51B72E29E26B9F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:1c:06:97:ad:02:3a:e6:d5:1a:e3:85:45:
                    67:1c:7c:b0:a9:4f:f0:4b:83:3a:60:b6:cf:22:2c:
                    33:e0:7a:4e:79:ae:ef:57:a7:43:00:fa:a9:74:58:
                    7c:7f:b1:f1:0f:c4:00:f7:a6:59:8c:07:b3:a9:51:
                    12:25:bc:be:ed:46:4b:52:52:d6:78:d0:56:65:99:
                    41:3b:84:56:58:94:4c:af:70:02:74:b1:70:6c:f8:
                    20:36:d0:6f:94:5a:37:9e:b9:0a:ab:d0:86:66:d3:
                    36:50:ae:f2:ee:aa:4e:85:50:41:7d:02:43:cc:63:
                    33:86:3d:11:85:4d:9b:b4:a3:87:34:c4:1f:f5:4f:
                    7d:6e:37:40:4c:a8:db:b2:e3:ea:38:8e:72:4b:65:
                    33:d8:4b:7d:52:c2:a7:20:58:0a:af:0f:05:99:01:
                    dd:d3:72:b9:2a:b0:10:cd:4d:13:4e:72:c3:fe:a6:
                    b3:76:7f:3e:9d:0e:41:64:9c:44:cd:58:10:42:63:
                    0a:cc:6a:1e:83:6c:e0:03:47:ed:98:b0:65:dd:af:
                    fb:67:01:c7:24:ea:4f:61:91:87:93:5b:5b:88:96:
                    a8:06:22:fb:69:75:c5:cc:af:ab:24:73:28:1a:8c:
                    86:f1:cd:27:88:5f:f0:cb:d3:f6:97:8d:4a:65:3b:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:BE:DC:DF:D2:BD:A2:80:FB:C2:6A:51:B7:2E:29:E2:6B:9F:6A
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Tv6-3N_SvaKA-8JqUbcuKeJrn2o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:32:4f:dc:13:cc:ac:1a:0b:ab:f2:fb:01:b8:24:0e:20:
         6f:6c:13:cf:5c:49:fc:ec:9b:37:35:8f:aa:da:98:79:1f:7b:
         6a:8e:91:ed:99:41:b7:11:32:0c:b7:75:1b:46:1d:0b:d2:ec:
         79:a8:ad:2c:11:f6:b5:8f:2a:69:38:6e:28:c5:cb:f6:c7:87:
         e6:2f:90:0a:d1:b6:48:f5:97:d2:45:d8:7d:94:01:ef:68:a6:
         9d:9b:a1:78:2e:61:e3:b1:f5:bf:14:0c:14:a4:1a:47:ce:e8:
         0f:70:f0:f4:49:f2:98:59:5c:ae:e8:cc:b3:4f:01:3e:08:8d:
         4d:b6:92:34:12:40:69:13:16:18:ed:19:65:95:72:26:32:f5:
         07:9d:57:4b:d3:0e:a5:e1:2d:07:26:49:d2:01:40:e7:44:b6:
         91:c5:ef:5d:69:dc:fe:ea:19:99:2a:60:94:89:27:8b:15:ab:
         f4:3a:c4:b1:d5:54:00:a7:61:c1:43:a7:4f:c7:d5:ef:57:32:
         6f:19:27:e0:5d:c7:34:3e:35:dc:fd:3f:af:7e:15:88:83:8b:
         ea:b6:de:5b:28:e9:ab:6b:53:fa:11:1c:da:d0:bb:24:f2:85:
         de:fd:13:d8:4b:48:53:c1:e7:79:2e:72:c9:10:76:3c:6a:e1:
         f4:f7:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:06 2026 by rpki-client