Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/kJb1YQnxHo3jURsSHmTMKl5pCBo.roa
File:                     kJb1YQnxHo3jURsSHmTMKl5pCBo.roa (raw, json)
Hash identifier:          Y8Tkr47Liv/qRvjvO+c5hQUUDM6nlHrv2bVulrE6DXs=
Subject key identifier:   90:96:F5:61:09:F1:1E:8D:E3:51:1B:12:1E:64:CC:2A:5E:69:08:1A
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       4A
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/kJb1YQnxHo3jURsSHmTMKl5pCBo.roa
Signing time:             Tue 19 May 2026 04:43:17 +0000
ROA not before:           Tue 19 May 2026 04:43:17 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        219.113.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 04:43:17 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=9096F56109F11E8DE3511B121E64CC2A5E69081A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:35:b9:4e:31:f5:7f:fd:8e:a1:e1:52:3e:
                    0b:de:7b:09:5e:b9:0e:63:c5:6e:b0:22:cc:5d:94:
                    6f:76:a0:ef:f5:ba:a3:25:ad:ca:4b:c4:a0:c9:fc:
                    94:4d:8c:61:c0:70:6b:4d:d7:79:ae:66:54:b2:02:
                    b9:09:69:8b:c9:99:e7:87:4b:23:97:0e:e8:6b:c4:
                    26:cf:4a:45:e8:7a:7b:b1:bb:25:11:73:6a:ee:be:
                    d2:5f:61:d1:5d:3c:b4:1f:37:da:1e:ce:8c:59:b2:
                    c2:e5:f3:13:e7:40:6d:32:e7:c9:3e:04:35:dc:5f:
                    f5:71:90:28:6c:06:08:27:37:f7:05:61:10:a8:dc:
                    69:1b:94:2b:18:e9:32:e6:a2:29:f5:36:54:bb:98:
                    63:ad:59:21:1d:ea:fe:3e:7d:8d:f9:bf:ae:de:89:
                    98:38:ed:2b:0b:cb:77:3c:ee:b5:e5:b1:82:10:bc:
                    fc:64:6c:39:21:b8:92:f2:71:e6:ef:0e:95:3d:3f:
                    89:86:86:92:af:f3:65:57:1c:93:a5:f8:2d:b4:ae:
                    16:16:5c:de:0b:3e:25:ba:25:4a:c4:00:96:63:7f:
                    a1:58:36:fa:a2:03:12:16:29:82:87:db:0c:05:da:
                    d7:ea:4a:1b:20:72:1c:2e:9e:d3:bf:27:31:97:ad:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:F5:61:09:F1:1E:8D:E3:51:1B:12:1E:64:CC:2A:5E:69:08:1A
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/kJb1YQnxHo3jURsSHmTMKl5pCBo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d0:2f:00:76:72:a4:61:5a:59:df:72:50:ae:a3:47:61:11:28:
         a7:12:e1:b4:b1:6f:78:e2:80:1a:39:b8:e6:c7:9e:97:f7:de:
         c2:1b:88:50:1d:30:ae:80:c5:4e:c3:73:34:36:bf:d7:7f:0f:
         27:55:f6:1a:14:01:82:1b:05:5c:ed:5a:7f:bf:af:4a:42:7c:
         5c:69:30:5c:3e:1b:70:26:92:8f:5b:6d:5d:d3:e1:9b:49:06:
         25:e0:f6:2d:b9:dc:f8:da:a1:77:48:0c:38:f9:49:3e:b6:81:
         f6:aa:9a:38:51:70:d0:a0:df:a2:fd:21:c5:8a:35:94:ff:f1:
         b7:27:a9:1f:e9:ae:8c:e8:c9:9a:ab:16:b7:2f:b4:de:e8:4b:
         48:b0:c0:b9:54:ef:8c:93:95:35:36:06:23:d6:69:94:81:60:
         48:a8:a6:70:af:93:2a:0c:65:55:ed:62:41:8e:85:9c:b5:5f:
         66:2f:73:e6:64:df:7b:38:be:09:55:66:9c:0a:e0:e7:96:a1:
         38:45:d5:16:39:1c:a7:94:a8:58:16:2c:84:8d:26:76:53:fe:
         14:c7:95:c5:90:55:2e:9b:c9:ba:e0:7d:d7:16:1f:fd:27:ff:
         e1:22:30:46:ff:b4:d8:57:0a:d8:d4:6e:02:fc:e7:bf:15:42:
         94:ad:e8:ef
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTA0
NDMxN1oXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoOTA5NkY1NjEwOUYxMUU4
REUzNTExQjEyMUU2NENDMkE1RTY5MDgxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKaxNblOMfV//Y6h4VI+C957CV65DmPFbrAizF2Ub3ag7/W6oyWt
ykvEoMn8lE2MYcBwa03Xea5mVLICuQlpi8mZ54dLI5cO6GvEJs9KReh6e7G7JRFz
au6+0l9h0V08tB832h7OjFmywuXzE+dAbTLnyT4ENdxf9XGQKGwGCCc39wVhEKjc
aRuUKxjpMuaiKfU2VLuYY61ZIR3q/j59jfm/rt6JmDjtKwvLdzzuteWxghC8/GRs
OSG4kvJx5u8OlT0/iYaGkq/zZVcck6X4LbSuFhZc3gs+JbolSsQAlmN/oVg2+qID
EhYpgofbDAXa1+pKGyByHC6e078nMZettZcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSQlvVhCfEejeNRGxIeZMwqXmkIGjAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIva0piMVlRbnhIbzNqVVJzU0htVE1LbDVwQ0JvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9txgDANBgkqhkiG9w0BAQsFAAOCAQEA
0C8AdnKkYVpZ33JQrqNHYREopxLhtLFveOKAGjm45seel/fewhuIUB0wroDFTsNz
NDa/138PJ1X2GhQBghsFXO1af7+vSkJ8XGkwXD4bcCaSj1ttXdPhm0kGJeD2Lbnc
+Nqhd0gMOPlJPraB9qqaOFFw0KDfov0hxYo1lP/xtyepH+mujOjJmqsWty+03uhL
SLDAuVTvjJOVNTYGI9ZplIFgSKimcK+TKgxlVe1iQY6FnLVfZi9z5mTfezi+CVVm
nArg55ahOEXVFjkcp5SoWBYshI0mdlP+FMeVxZBVLpvJuuB91xYf/Sf/4SIwRv+0
2FcK2NRuAvznvxVClK3o7w==
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:03 2026 by rpki-client