Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa
File:                     iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa (raw, json)
Hash identifier:          fazMAr5ejJfi3x94kNjGENSk5BQESh1buiW+KjSBPnw=
Subject key identifier:   89:A1:3C:07:45:BB:74:71:56:C5:FF:9B:8B:F9:6D:29:03:15:29:6E
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       3F
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa
Signing time:             Tue 19 May 2026 02:15:34 +0000
ROA not before:           Tue 19 May 2026 02:15:34 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        202.239.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 02:15:34 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=89A13C0745BB747156C5FF9B8BF96D290315296E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:91:83:95:dd:65:bf:c3:cf:ef:af:81:e0:b7:
                    f8:57:f7:58:0a:c6:5e:29:4a:36:7e:3d:72:23:a0:
                    28:23:8d:86:46:ec:40:da:bd:76:f1:42:fe:6b:68:
                    bd:b7:ef:35:7e:5f:66:e3:2c:fc:89:e5:9e:59:1d:
                    11:b6:5b:a5:16:91:f6:c1:d3:8f:b7:f4:3f:af:0f:
                    8f:f8:c0:bb:6b:f2:10:37:ed:2a:c5:b7:0b:ce:ad:
                    43:58:04:16:1a:51:fa:1e:69:df:55:55:80:55:47:
                    b6:08:22:c0:44:ff:76:f0:30:6c:d8:e4:31:b1:96:
                    f7:d3:a4:f7:f1:86:4c:61:5f:04:9a:93:cf:3d:0b:
                    cf:32:c2:8b:ce:62:4b:db:ba:c5:59:d5:5f:a0:88:
                    f4:c4:bc:be:00:ea:f5:e8:1f:85:e2:78:47:d2:5c:
                    03:56:07:24:54:4c:d5:b8:4f:6a:1c:42:02:a2:91:
                    37:9c:c7:f9:b2:76:cd:55:f3:88:43:96:ed:f5:30:
                    af:cc:28:7b:1d:51:f9:fa:b5:57:cf:a9:f4:84:36:
                    d1:ef:7c:80:21:8b:0c:7c:56:40:0f:0a:8b:5e:83:
                    e9:11:e0:92:91:16:d3:e0:71:35:c1:1f:ee:de:0e:
                    e3:a7:07:39:36:88:8e:e5:eb:1f:48:55:07:e5:b4:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:3C:07:45:BB:74:71:56:C5:FF:9B:8B:F9:6D:29:03:15:29:6E
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:78:3c:44:26:a1:64:67:8d:b5:8a:78:43:ca:7a:25:ac:
         d4:22:7f:70:30:86:99:67:ed:e9:5e:5f:ff:40:26:1b:c9:e3:
         0b:56:cb:3b:d1:9e:b9:ba:24:2b:25:b6:83:fe:36:78:de:1c:
         0b:8c:2d:34:d2:f7:cf:ff:54:3d:dc:2c:2a:e1:46:33:0f:ec:
         ef:ea:ef:6d:b7:dc:4e:12:e3:68:ea:7b:3c:19:f0:34:39:f5:
         bc:a5:34:82:58:33:fc:f5:87:9e:26:29:01:66:a8:6f:9c:a3:
         2d:e3:6c:f0:99:e1:a9:fc:b6:a3:80:f8:88:4f:eb:e5:95:d3:
         22:2f:be:09:69:a3:2a:0e:86:ec:36:9d:01:5b:ae:59:a4:97:
         f5:3d:12:1d:04:4f:c3:38:6f:ea:ff:e2:a4:e0:39:9b:62:88:
         0b:8d:ee:58:2b:15:5b:a2:0e:7b:f1:5a:19:87:78:bd:13:32:
         fa:f0:e8:1a:39:41:ac:28:2c:1c:20:ce:df:1c:f5:c7:43:35:
         88:f3:5c:a3:20:10:e4:f9:93:d3:26:7a:fe:ea:dd:46:be:f1:
         6c:df:3a:ba:53:0a:be:77:cf:18:45:50:c6:45:70:a2:88:d0:
         0a:5e:77:46:bf:03:65:cc:e9:74:b7:32:1e:77:f6:b8:3a:55:
         dc:65:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:06 2026 by rpki-client