Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/t3dDYxT1TgP7i-R5vMlse4MnRaU.roa
File:                     t3dDYxT1TgP7i-R5vMlse4MnRaU.roa (raw, json)
Hash identifier:          VSPruXQOFtMemdK/IPAwyPhxo5mX2IirA2Qy2fZJPG4=
Subject key identifier:   B7:77:43:63:14:F5:4E:03:FB:8B:E4:79:BC:C9:6C:7B:83:27:45:A5
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       A0
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/t3dDYxT1TgP7i-R5vMlse4MnRaU.roa
Signing time:             Wed 29 Jul 2026 04:53:42 +0000
ROA not before:           Wed 29 Jul 2026 04:53:42 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        183.177.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 04:53:42 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=B777436314F54E03FB8BE479BCC96C7B832745A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:a9:8b:c7:2b:96:94:ff:a0:a8:73:80:4a:
                    40:67:64:79:d1:db:58:d2:cd:7e:b9:e4:7c:ee:c9:
                    af:9c:95:e2:70:d3:a0:34:58:35:bd:f1:85:e9:80:
                    e4:02:1a:db:93:02:9b:57:6e:fe:4f:97:6a:b6:96:
                    35:8f:d7:75:25:8a:a7:ed:aa:4c:0f:ab:51:62:ee:
                    d1:2b:3a:97:02:21:ba:4b:9a:6f:77:ae:5e:d6:36:
                    e7:89:86:6f:69:0e:d4:08:54:bd:d5:96:8b:af:72:
                    a1:6f:11:4e:9b:d5:c5:e5:8b:a5:c5:36:5c:9c:ab:
                    07:d5:d5:3e:be:5e:34:5a:a5:b8:e3:43:3f:d0:3f:
                    18:94:7d:d1:0e:4e:67:34:f2:4a:11:91:9e:d9:77:
                    ba:c7:ef:99:7d:f0:ea:be:4c:69:c6:d1:e1:4f:05:
                    91:e1:a7:fa:3b:89:55:a5:f4:e3:b7:68:07:15:f4:
                    ad:5d:0e:db:8c:c3:b3:ae:6e:9e:95:9c:b5:3a:ea:
                    ba:75:64:6b:ab:b2:98:f6:7e:4e:19:42:04:ad:d4:
                    c2:a0:94:ba:f6:e3:1b:64:57:53:7d:f9:07:1c:62:
                    3b:71:a3:56:e0:46:e6:21:32:b5:18:48:8d:19:07:
                    fd:e0:d8:25:0e:1d:9e:62:93:bc:33:ec:b4:45:d0:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:77:43:63:14:F5:4E:03:FB:8B:E4:79:BC:C9:6C:7B:83:27:45:A5
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/t3dDYxT1TgP7i-R5vMlse4MnRaU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.177.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:09:9b:0d:c2:74:01:a0:72:8c:6f:fe:ae:72:1f:b6:4e:
         ff:c0:0b:89:29:08:17:f4:0a:cb:ad:04:18:cd:07:07:fb:d1:
         c8:c6:8f:77:5f:8b:3b:de:1d:96:65:0f:ba:91:e7:b7:35:01:
         e8:a6:1c:53:15:e5:ff:73:d3:90:ec:d6:e7:d9:a7:fe:02:55:
         dd:0a:6e:86:b0:4a:e5:a6:70:a8:83:30:c3:19:40:64:df:f6:
         36:ea:3a:42:89:4c:1e:8d:47:08:da:b8:f7:71:dc:d0:7e:6d:
         80:39:41:c9:16:10:8c:d2:bc:d8:5d:21:ac:03:a2:4f:c1:ed:
         88:2a:c5:18:06:1c:13:5f:b7:7a:72:a4:09:ef:c9:68:fa:0b:
         b1:1f:d0:d4:45:9c:c5:6d:b7:ed:a7:10:d0:37:2c:96:62:6d:
         56:a5:d5:8d:7b:ff:51:09:7d:1b:49:fe:c5:de:5b:63:6e:7a:
         07:5b:b6:82:10:a9:2d:6a:2b:db:88:2c:0d:67:08:4b:54:ac:
         24:8f:fa:b9:a4:34:2e:c4:c3:20:1c:91:25:55:2a:7a:e6:a7:
         7d:76:55:6c:85:43:90:04:52:1a:28:78:62:d3:9c:e5:20:83:
         0e:2a:a4:ae:79:4a:b7:f5:db:b5:72:75:63:de:66:05:b2:7f:
         e1:53:f7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:17 2026 by rpki-client