Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/pVysFkiFgXoCNlv0Edicpc0V29Q.roa
File:                     pVysFkiFgXoCNlv0Edicpc0V29Q.roa (raw, json)
Hash identifier:          CcoQxIe9+PG5VsYNmTxILBj+3APnUwRvn7a3Wm6NMtg=
Subject key identifier:   A5:5C:AC:16:48:85:81:7A:02:36:5B:F4:11:D8:9C:A5:CD:15:DB:D4
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       51
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pVysFkiFgXoCNlv0Edicpc0V29Q.roa
Signing time:             Tue 19 May 2026 05:25:15 +0000
ROA not before:           Tue 19 May 2026 05:25:15 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        221.116.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 05:25:15 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=A55CAC164885817A02365BF411D89CA5CD15DBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:c1:fa:37:04:59:2a:02:e2:7f:c8:96:40:
                    29:a6:c2:92:43:c5:0a:b3:75:19:54:93:4d:0a:c3:
                    f0:a0:81:a4:a1:49:5c:9b:2e:b5:4d:57:be:43:33:
                    33:54:9d:4f:0d:e7:44:6a:21:03:eb:8f:d9:66:b4:
                    07:ea:bf:68:4f:b3:3e:6d:31:23:ce:16:e8:a0:e6:
                    76:19:5b:62:5e:fa:c8:32:fa:36:14:a6:20:e3:96:
                    1d:e2:99:e3:30:b2:b7:f0:77:3a:b8:b7:f4:36:a8:
                    ae:bd:e0:51:54:78:12:69:9f:f9:07:12:a9:15:54:
                    e0:6c:4c:9b:e7:fc:f5:00:f9:8f:08:5b:ff:3b:96:
                    c4:73:c7:3e:0b:9b:3b:4d:aa:5d:e9:b7:78:5e:e3:
                    9e:e0:16:72:d2:8c:b9:bc:9b:6d:f9:0b:41:05:57:
                    8d:e5:c4:25:ff:5b:7e:e4:97:61:7d:aa:12:3c:f5:
                    85:0c:d8:86:11:6d:42:94:25:8d:d6:62:30:ec:5b:
                    96:f9:82:bf:e2:a7:cd:97:31:62:7b:b4:80:ee:d7:
                    11:43:91:a1:b5:39:0c:19:ce:bb:6c:f7:58:b1:0a:
                    d3:ff:26:a9:57:87:7e:58:c7:49:fb:33:37:6f:9a:
                    ec:7c:a6:b1:c9:41:d6:be:52:8a:67:a5:8e:f3:e1:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5C:AC:16:48:85:81:7A:02:36:5B:F4:11:D8:9C:A5:CD:15:DB:D4
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pVysFkiFgXoCNlv0Edicpc0V29Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.116.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         aa:46:51:c5:2c:2e:4d:f5:87:90:48:a3:de:62:24:d0:3c:36:
         93:72:5b:ed:ec:18:fa:99:3d:55:2e:1a:c9:4f:9e:35:41:eb:
         2e:be:15:00:72:69:e0:25:bc:a0:b4:1f:00:ae:95:5d:e6:d5:
         05:5e:a9:d1:95:a1:77:84:a3:9f:62:e9:9e:6a:fa:9b:49:17:
         67:e2:83:cc:09:eb:db:b5:77:5b:6a:0a:07:3a:56:b2:81:e3:
         75:6a:30:a9:e8:5f:ad:55:1c:04:c3:1f:cf:4a:44:ae:39:15:
         61:f9:1f:67:4b:53:6c:1e:a5:25:77:30:7f:d2:00:81:97:4a:
         cc:4d:cb:d7:7a:79:4e:a5:a4:6e:f8:9b:c3:d9:5f:29:5e:83:
         d3:f9:15:3d:9c:8a:b5:cc:ae:7b:4e:69:0a:12:08:58:81:c9:
         0e:d5:b2:dd:f1:8d:96:a5:a6:8e:f9:0c:55:6b:ae:e9:fe:27:
         74:07:2d:9b:5a:9f:39:d0:47:cd:75:38:ea:a1:a5:20:37:28:
         29:ca:20:3e:7c:14:0c:eb:b5:45:0e:79:f1:8d:e7:d0:8c:03:
         32:bf:6e:72:7a:ca:b3:da:19:d0:bd:2e:8a:0b:7d:60:99:fa:
         24:3c:62:bc:20:82:c3:aa:77:92:b1:ce:8f:bd:73:c6:55:d3:
         b1:a1:3e:c3
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTA1
MjUxNVoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoQTU1Q0FDMTY0ODg1ODE3
QTAyMzY1QkY0MTFEODlDQTVDRDE1REJENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALMCwfo3BFkqAuJ/yJZAKabCkkPFCrN1GVSTTQrD8KCBpKFJXJsu
tU1XvkMzM1SdTw3nRGohA+uP2Wa0B+q/aE+zPm0xI84W6KDmdhlbYl76yDL6NhSm
IOOWHeKZ4zCyt/B3Ori39Daorr3gUVR4Emmf+QcSqRVU4GxMm+f89QD5jwhb/zuW
xHPHPgubO02qXem3eF7jnuAWctKMubybbfkLQQVXjeXEJf9bfuSXYX2qEjz1hQzY
hhFtQpQljdZiMOxblvmCv+KnzZcxYnu0gO7XEUORobU5DBnOu2z3WLEK0/8mqVeH
fljHSfszN2+a7HymsclB1r5SimeljvPh+XsCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBSlXKwWSIWBegI2W/QR2JylzRXb1DAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvcFZ5c0ZraUZnWG9DTmx2MEVkaWNwYzBWMjlRLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAd10MA0GCSqGSIb3DQEBCwUAA4IBAQCq
RlHFLC5N9YeQSKPeYiTQPDaTclvt7Bj6mT1VLhrJT541QesuvhUAcmngJbygtB8A
rpVd5tUFXqnRlaF3hKOfYumeavqbSRdn4oPMCevbtXdbagoHOlaygeN1ajCp6F+t
VRwEwx/PSkSuORVh+R9nS1NsHqUldzB/0gCBl0rMTcvXenlOpaRu+JvD2V8pXoPT
+RU9nIq1zK57TmkKEghYgckO1bLd8Y2WpaaO+QxVa67p/id0By2bWp850EfNdTjq
oaUgNygpyiA+fBQM67VFDnnxjefQjAMyv25yesqz2hnQvS6KC31gmfokPGK8IILD
qneSsc6PvXPGVdOxoT7D
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:09 2026 by rpki-client