Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/wv2G0yzjQtrTkK4z-LQOjkl7l6U.roa
File:                     wv2G0yzjQtrTkK4z-LQOjkl7l6U.roa (raw, json)
Hash identifier:          vLjMCZkaPvpAKGWMl7wW0/993I0ULNBdV7DeSoIMskE=
Subject key identifier:   C2:FD:86:D3:2C:E3:42:DA:D3:90:AE:33:F8:B4:0E:8E:49:7B:97:A5
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       40
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/wv2G0yzjQtrTkK4z-LQOjkl7l6U.roa
Signing time:             Tue 19 May 2026 02:21:34 +0000
ROA not before:           Tue 19 May 2026 02:21:34 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        202.24.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 02:21:34 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=C2FD86D32CE342DAD390AE33F8B40E8E497B97A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:02:fe:04:7c:c9:34:63:ad:ae:2a:f1:67:
                    ae:d3:48:c5:dd:9b:fb:3e:cf:98:e6:cf:19:ea:91:
                    a4:b1:db:21:84:18:e6:20:4e:97:fd:77:ef:3f:8a:
                    5f:13:25:5a:2c:d7:f2:d9:f0:ab:10:ce:40:08:36:
                    96:99:a1:bb:0b:ba:d1:cb:0f:44:3c:01:35:96:9c:
                    12:fe:7a:b1:7a:9e:88:8c:30:8a:47:7d:38:53:b6:
                    78:91:f1:30:69:f2:00:03:ba:03:2f:46:89:5b:a4:
                    84:0c:63:3c:a5:20:5a:01:46:fb:8a:f6:cc:7e:27:
                    90:c8:65:7c:01:77:c0:c6:43:dd:e9:88:ec:69:85:
                    d9:29:7e:32:a2:61:60:e1:c1:48:77:e4:e6:c1:14:
                    ac:ae:03:74:26:70:aa:3b:48:7d:5d:0f:1f:b2:b5:
                    2e:7e:d4:6a:6d:41:01:7f:1a:c8:c5:23:29:2a:f0:
                    c6:46:8b:8b:44:3c:8c:e5:1e:0d:e8:ba:a0:a5:fb:
                    fe:a7:f3:bd:59:71:b0:7a:5b:7f:8a:dc:d5:9d:0c:
                    ce:b4:68:71:2a:65:fa:fb:2b:6b:b0:f7:d0:f3:5b:
                    80:53:7a:78:c3:41:cc:2b:3d:72:98:03:59:e3:bd:
                    bb:05:86:81:b3:ac:00:bd:1d:32:88:44:35:15:0f:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:86:D3:2C:E3:42:DA:D3:90:AE:33:F8:B4:0E:8E:49:7B:97:A5
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/wv2G0yzjQtrTkK4z-LQOjkl7l6U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.24.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:8e:d1:92:2b:81:6b:b8:27:a2:71:d7:a3:82:78:d5:4f:46:
         46:3a:e8:49:f5:66:f5:cb:69:0c:0a:3f:e1:9a:4e:31:b0:09:
         54:ea:3e:5f:1c:43:72:c1:58:23:38:d0:e7:8f:4b:a1:72:6f:
         f7:78:f9:27:ba:5b:a5:d7:25:48:f6:f7:6b:b8:82:5d:60:e1:
         fa:48:15:5e:4f:b8:c7:98:db:e0:f0:a0:ef:bc:2e:e1:90:62:
         35:ff:a6:5d:56:4f:72:c7:5b:7f:af:0c:63:a9:86:4c:73:ab:
         47:78:48:74:60:e9:e1:b8:d7:58:90:46:62:5e:61:da:0c:97:
         f1:3e:57:9a:07:2a:8d:4f:b7:0b:a1:18:48:de:de:0d:29:dd:
         30:c1:bb:ab:d5:d5:3e:f4:0c:75:67:51:67:c4:00:97:c1:5f:
         06:f6:a9:bc:09:ad:de:eb:d0:15:f5:59:c8:fd:5f:15:ed:84:
         fd:64:f6:7f:c7:e5:37:ad:23:59:b0:bb:dd:54:32:88:b0:2a:
         09:0d:f7:49:33:37:56:5b:be:7a:e7:3f:0b:fb:2d:6e:b3:7a:
         6a:0f:c1:27:a0:b7:af:2e:4f:be:72:bd:a0:90:16:70:9f:f8:
         7c:4d:cc:2a:e3:37:b0:76:d0:60:12:1c:f1:8f:a3:90:75:ac:
         e9:8c:08:69
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTAy
MjEzNFoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoQzJGRDg2RDMyQ0UzNDJE
QUQzOTBBRTMzRjhCNDBFOEU0OTdCOTdBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhOAv4EfMk0Y62uKvFnrtNIxd2b+z7PmObPGeqRpLHbIYQY5iBO
l/137z+KXxMlWizX8tnwqxDOQAg2lpmhuwu60csPRDwBNZacEv56sXqeiIwwikd9
OFO2eJHxMGnyAAO6Ay9GiVukhAxjPKUgWgFG+4r2zH4nkMhlfAF3wMZD3emI7GmF
2Sl+MqJhYOHBSHfk5sEUrK4DdCZwqjtIfV0PH7K1Ln7Uam1BAX8ayMUjKSrwxkaL
i0Q8jOUeDei6oKX7/qfzvVlxsHpbf4rc1Z0MzrRocSpl+vsra7D30PNbgFN6eMNB
zCs9cpgDWeO9uwWGgbOsAL0dMohENRUPKG8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTC/YbTLONC2tOQrjP4tA6OSXuXpTAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvd3YyRzB5empRdHJUa0s0ei1MUU9qa2w3bDZVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsoYvDANBgkqhkiG9w0BAQsFAAOCAQEA
m47RkiuBa7gnonHXo4J41U9GRjroSfVm9ctpDAo/4ZpOMbAJVOo+XxxDcsFYIzjQ
549LoXJv93j5J7pbpdclSPb3a7iCXWDh+kgVXk+4x5jb4PCg77wu4ZBiNf+mXVZP
csdbf68MY6mGTHOrR3hIdGDp4bjXWJBGYl5h2gyX8T5XmgcqjU+3C6EYSN7eDSnd
MMG7q9XVPvQMdWdRZ8QAl8FfBvapvAmt3uvQFfVZyP1fFe2E/WT2f8flN60jWbC7
3VQyiLAqCQ33STM3Vlu+euc/C/stbrN6ag/BJ6C3ry5PvnK9oJAWcJ/4fE3MKuM3
sHbQYBIc8Y+jkHWs6YwIaQ==
-----END CERTIFICATE-----
Generated at Sat May 23 05:47:55 2026 by rpki-client