Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/Yga2QMouJv4O4IHPCOvq9TGCpZw.roa
File:                     Yga2QMouJv4O4IHPCOvq9TGCpZw.roa (raw, json)
Hash identifier:          t9AOTPXwIiJAlZIWKbOUVps1sAd/EXhGiy7eNzHHj6c=
Subject key identifier:   62:06:B6:40:CA:2E:26:FE:0E:E0:81:CF:08:EB:EA:F5:31:82:A5:9C
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       59
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Yga2QMouJv4O4IHPCOvq9TGCpZw.roa
Signing time:             Wed 20 May 2026 02:29:50 +0000
ROA not before:           Wed 20 May 2026 02:29:50 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        220.158.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 20 02:29:50 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=6206B640CA2E26FE0EE081CF08EBEAF53182A59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:9b:a1:53:e9:05:52:45:88:79:94:11:7b:
                    3f:10:01:16:26:56:8f:31:7a:7c:92:8c:5f:9f:24:
                    25:f8:7c:4b:3b:53:7c:26:41:ea:b2:87:40:10:33:
                    7a:2e:3f:6d:a2:7b:a5:58:3f:ef:b9:96:94:8e:b6:
                    42:11:f7:5b:cb:97:6b:83:a6:7c:58:64:7f:c0:a1:
                    f8:e8:a3:4e:5c:74:b3:d0:d2:9c:d1:5f:d1:90:a9:
                    70:25:19:a6:3c:41:a2:9a:ab:76:2a:9e:ee:d4:5f:
                    27:8d:bd:4e:8f:e5:fb:68:d3:c0:4c:62:5b:8a:a0:
                    0a:96:38:2e:b0:3b:c0:39:19:31:44:67:d6:d9:74:
                    6c:69:14:80:2d:80:e2:9b:8b:45:4b:6d:60:05:86:
                    b7:80:46:86:1c:54:d2:c3:32:51:54:fb:12:db:a2:
                    48:cd:b5:3f:89:4b:5f:15:84:09:c9:fa:ea:1e:30:
                    b9:64:cc:20:5b:20:7d:b0:68:3c:5d:ae:d3:af:7d:
                    d9:f8:53:96:02:c2:24:1a:9c:2f:5a:8b:c9:1e:1b:
                    1c:52:35:68:c8:00:9c:c7:9e:97:5c:54:ba:f3:7b:
                    5e:0f:68:bf:8d:13:2e:a5:5b:b4:69:27:e4:82:61:
                    29:de:d5:a3:b6:1a:f8:0f:70:63:71:9b:39:80:a2:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:06:B6:40:CA:2E:26:FE:0E:E0:81:CF:08:EB:EA:F5:31:82:A5:9C
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Yga2QMouJv4O4IHPCOvq9TGCpZw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:f4:29:ca:cd:1f:d6:de:d2:4d:18:bc:bf:55:55:34:13:7f:
         24:68:bd:c4:38:fb:0d:64:f5:0c:df:33:df:95:b3:3f:73:52:
         c6:df:38:35:f6:69:56:7c:72:82:cf:b0:f9:82:16:38:de:c1:
         6b:6f:2a:fc:4e:59:06:1f:02:d9:09:78:50:80:c5:bd:33:7a:
         38:b0:ff:f4:77:67:a5:66:a4:60:09:dd:ea:38:47:a3:cb:8a:
         b0:9f:ba:15:ef:b0:85:d5:92:e8:e9:16:04:13:39:b8:6b:92:
         67:c1:43:f9:e0:a6:2a:d5:39:ed:a4:26:8f:58:e7:5e:0c:ef:
         9a:17:81:aa:28:05:c7:ee:6f:ae:66:87:cd:0e:28:64:7f:d2:
         dd:1f:43:3b:4c:8b:a3:bc:52:37:d6:d6:e8:f7:36:cf:ff:00:
         78:7f:17:c4:b9:f3:80:49:ae:b4:24:5d:b6:60:85:f9:e7:21:
         5b:a0:ea:6a:f1:96:2c:dd:9c:71:49:b2:51:b3:3e:76:5d:e1:
         0c:c7:e4:18:3e:5f:e7:ba:2d:44:bc:6a:e3:bf:d4:32:d9:19:
         20:da:3e:ea:a6:c2:3c:6b:92:5c:75:03:ca:ec:3e:28:52:a1:
         0b:30:d6:0d:57:f7:bf:14:e3:00:83:2f:38:82:33:47:11:f4:
         03:22:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:08 2026 by rpki-client