Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/VEHpJqUkjtebFL7L7yEFrwk9lQs.roa
File:                     VEHpJqUkjtebFL7L7yEFrwk9lQs.roa (raw, json)
Hash identifier:          Hupau71f736FWBg2T9dk0wGIKMrQ3WmBcE1TzWNWOLs=
Subject key identifier:   54:41:E9:26:A5:24:8E:D7:9B:14:BE:CB:EF:21:05:AF:09:3D:95:0B
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       49
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/VEHpJqUkjtebFL7L7yEFrwk9lQs.roa
Signing time:             Tue 19 May 2026 04:37:05 +0000
ROA not before:           Tue 19 May 2026 04:37:05 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        210.79.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 04:37:05 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=5441E926A5248ED79B14BECBEF2105AF093D950B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:13:df:1a:a0:40:6d:38:a0:7a:60:f1:78:
                    d8:4f:46:66:a6:b1:f6:0f:dd:39:12:76:3a:74:c3:
                    a4:fa:a5:4f:00:26:6d:f4:5a:e7:a4:07:2f:17:7e:
                    fa:95:6a:ba:55:b3:76:92:64:58:0c:20:1c:2e:ce:
                    b7:75:19:1f:93:f8:3f:e5:09:3a:b0:2c:19:ca:3a:
                    65:58:38:59:f1:03:1e:75:98:a9:2f:57:01:81:ba:
                    48:8e:7e:75:63:63:a2:1e:19:27:e4:e8:7a:56:d5:
                    f4:13:89:ee:93:f0:aa:42:ab:bf:c4:fa:c1:90:b7:
                    a3:7c:ba:6b:08:a2:6c:d2:f0:a1:54:8e:47:84:37:
                    92:a5:ff:4b:b3:84:29:84:1d:4d:d3:5b:bf:04:9f:
                    f1:b6:3e:09:84:27:26:cf:73:af:33:d1:22:db:4a:
                    92:82:96:e7:12:59:b3:8b:df:2b:27:cb:c2:72:6e:
                    eb:51:4d:db:49:b8:63:c5:35:a0:40:5a:9b:8a:3f:
                    52:40:12:18:6e:bb:3e:6a:a5:c9:c7:e8:1e:44:1c:
                    83:1b:72:89:21:da:eb:1d:6e:fd:d9:61:02:e6:0c:
                    94:d5:67:60:5e:29:ec:90:ad:2e:3d:25:50:16:e2:
                    a7:ea:c5:44:63:cc:dd:fb:0f:31:e8:ec:89:02:bb:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:E9:26:A5:24:8E:D7:9B:14:BE:CB:EF:21:05:AF:09:3D:95:0B
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/VEHpJqUkjtebFL7L7yEFrwk9lQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:f5:4b:b7:9f:9a:e9:61:63:46:6d:f2:e3:91:74:a4:bd:
         8f:b2:1b:59:98:3d:f2:34:1e:a6:88:96:e7:fe:dd:fa:e6:22:
         5d:84:3e:a9:e7:9b:2a:ac:07:07:09:43:84:05:55:e6:12:4e:
         1e:f5:42:04:23:e8:f6:c0:8b:18:f2:9c:bd:18:02:2e:e9:2b:
         a8:0e:10:e3:ec:a4:ce:21:e9:b6:5a:c6:56:2a:b9:73:ff:dc:
         81:93:1d:c8:20:57:c5:47:f6:82:05:85:d1:3d:89:75:92:20:
         d5:28:ec:fc:77:19:39:f6:24:39:cd:d9:68:6c:0d:5d:a6:0b:
         f2:b5:af:32:35:a5:7e:28:3b:58:41:70:17:2d:48:2c:9c:53:
         f0:93:9f:2b:c5:7a:a0:d5:5b:13:44:05:70:92:f4:39:f5:83:
         34:d2:37:0b:13:17:40:2d:da:ee:23:f6:91:09:ba:fb:06:4b:
         a2:1a:ea:ba:4a:ee:26:61:46:c5:ad:d3:21:15:38:6e:c9:0c:
         c4:10:b4:2b:a4:80:f7:ea:c6:8b:89:28:1d:e1:44:7f:68:51:
         e9:5e:31:1e:51:b0:31:cd:be:70:a9:41:67:2a:0b:d6:78:10:
         87:a9:3b:eb:dd:77:ca:fd:05:44:9a:85:e9:62:c4:6a:cc:6f:
         7e:be:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:02 2026 by rpki-client