Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/519/RXSSORr32btVMkRQuTt15NyidsA.roa
File:                     RXSSORr32btVMkRQuTt15NyidsA.roa (raw, json)
Hash identifier:          WoONlAtFMja2q/JVCuy490NB8IOAT1fTIfuGK6/1bhU=
Subject key identifier:   45:74:92:39:1A:F7:D9:BB:55:32:44:50:B9:3B:75:E4:DC:A2:76:C0
Certificate issuer:       /CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE
Certificate serial:       02
Authority key identifier: 99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/RXSSORr32btVMkRQuTt15NyidsA.roa
Signing time:             Wed 10 Jun 2026 06:34:28 +0000
ROA not before:           Wed 10 Jun 2026 06:34:28 +0000
ROA not after:            Thu 10 Jun 2027 06:10:17 +0000
asID:                     55383
IP address blocks:        27.125.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE
        Validity
            Not Before: Jun 10 06:34:28 2026 GMT
            Not After : Jun 10 06:10:17 2027 GMT
        Subject: CN=457492391AF7D9BB55324450B93B75E4DCA276C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:b7:00:68:26:8a:d1:2e:25:5e:19:65:2d:
                    ee:8d:d1:83:ee:9f:94:18:2e:46:ac:0e:79:f0:4b:
                    a7:09:15:d2:e9:59:f9:4b:2f:47:90:9f:97:3b:24:
                    ce:c3:98:04:b7:61:3c:c2:bc:46:87:39:8e:17:21:
                    95:25:c7:ae:d7:71:41:4b:67:3a:2a:d8:e1:6b:6c:
                    87:cf:db:de:76:c8:ed:a0:f2:53:73:55:47:26:44:
                    23:7d:e7:cd:97:dc:83:5d:94:95:c8:e7:52:a3:d9:
                    38:f4:97:95:67:ec:25:96:16:70:d3:61:20:af:ba:
                    23:1c:1a:2a:93:91:f0:24:ef:c5:c5:fb:e3:06:1c:
                    24:3c:66:dd:c5:59:07:8f:45:39:b8:88:9f:8e:7c:
                    7c:68:14:a1:e9:fc:f3:35:6a:ad:b0:c3:5e:44:ae:
                    03:d4:4d:44:04:51:a4:7e:e6:3e:47:dc:3c:47:bb:
                    f2:40:16:31:f5:eb:72:1f:7b:07:d1:54:bf:e6:28:
                    ac:19:a1:5f:88:62:9f:82:c3:35:2d:39:d5:56:12:
                    a6:22:c9:34:6f:d4:a7:54:45:25:40:1c:ae:7a:71:
                    18:f3:db:ce:7a:1f:5a:fe:2d:e8:d0:e8:6e:99:84:
                    11:dc:5d:de:6e:f4:1b:5f:e3:56:3f:df:b9:46:25:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:92:39:1A:F7:D9:BB:55:32:44:50:B9:3B:75:E4:DC:A2:76:C0
            X509v3 Authority Key Identifier:
                keyid:99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/RXSSORr32btVMkRQuTt15NyidsA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.125.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:03:16:07:1a:23:d6:56:00:e3:f2:23:6e:47:7f:64:5f:ab:
         58:15:38:90:6b:a5:97:35:3c:55:22:55:e9:7e:02:aa:d2:6a:
         6a:c3:bd:f5:91:d7:f4:64:45:a9:96:85:58:f4:8e:ec:3d:9a:
         c1:dc:57:2d:34:a4:67:d6:a5:f4:67:48:a4:56:f8:f5:6e:d1:
         62:a4:fb:c6:ee:46:0b:bf:b7:ed:60:9e:b6:7e:f0:39:09:56:
         71:33:1f:5f:2f:85:ea:9d:db:d8:53:ff:09:b7:ea:76:32:63:
         82:a7:df:9a:3e:7d:8f:5a:06:66:57:fe:74:02:80:67:0b:63:
         0b:80:c3:54:65:e7:59:b3:91:5b:e9:8d:2b:17:6c:aa:ae:1e:
         3c:40:a9:3c:84:4f:6f:6a:25:fc:1c:41:2d:95:cd:ca:83:37:
         9c:3a:55:44:15:30:2f:45:0e:25:77:fb:e4:dc:49:9e:97:12:
         f6:b2:3e:57:43:32:f2:24:d1:a3:bf:dd:8e:eb:e8:cc:3c:a0:
         f8:8a:7c:db:45:27:ce:68:f2:81:0e:4a:3f:4f:21:0b:e7:c4:
         9e:89:f2:25:6b:3d:92:29:94:d6:31:a9:16:b0:cc:13:b1:80:
         f5:26:7f:42:a5:95:68:45:03:59:50:5d:d5:4f:7c:49:bf:92:
         ba:2f:09:f7
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OUE3
NEMxQUYwN0IxQkY2ODNBNEM2NEE0MjNENjUxODVGNUZFQ0FFMB4XDTI2MDYxMDA2
MzQyOFoXDTI3MDYxMDA2MTAxN1owMzExMC8GA1UEAxMoNDU3NDkyMzkxQUY3RDlC
QjU1MzI0NDUwQjkzQjc1RTREQ0EyNzZDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMx6twBoJorRLiVeGWUt7o3Rg+6flBguRqwOefBLpwkV0ulZ+Usv
R5CflzskzsOYBLdhPMK8Roc5jhchlSXHrtdxQUtnOirY4Wtsh8/b3nbI7aDyU3NV
RyZEI33nzZfcg12UlcjnUqPZOPSXlWfsJZYWcNNhIK+6IxwaKpOR8CTvxcX74wYc
JDxm3cVZB49FObiIn458fGgUoen88zVqrbDDXkSuA9RNRARRpH7mPkfcPEe78kAW
MfXrch97B9FUv+YorBmhX4hin4LDNS051VYSpiLJNG/Up1RFJUAcrnpxGPPbznof
Wv4t6NDobpmEEdxd3m70G1/jVj/fuUYl1kkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRFdJI5GvfZu1UyRFC5O3Xk3KJ2wDAfBgNVHSMEGDAWgBSZp0wa8Hsb9oOkxkpC
PWUYX1/srjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTE5L21hZE1HdkI3R19hRHBNWktRajFsR0Y5ZjdLNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21hZE1HdkI3R19hRHBNWktRajFsR0Y5
ZjdLNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MTkvUlhTU09ScjMyYnRWTWtSUXVUdDE1TnlpZHNBLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAht9zDANBgkqhkiG9w0BAQsFAAOCAQEA
HAMWBxoj1lYA4/Ijbkd/ZF+rWBU4kGullzU8VSJV6X4CqtJqasO99ZHX9GRFqZaF
WPSO7D2awdxXLTSkZ9al9GdIpFb49W7RYqT7xu5GC7+37WCetn7wOQlWcTMfXy+F
6p3b2FP/CbfqdjJjgqffmj59j1oGZlf+dAKAZwtjC4DDVGXnWbORW+mNKxdsqq4e
PECpPIRPb2ol/BxBLZXNyoM3nDpVRBUwL0UOJXf75NxJnpcS9rI+V0My8iTRo7/d
juvozDyg+Ip820UnzmjygQ5KP08hC+fEnonyJWs9kimU1jGpFrDME7GA9SZ/QqWV
aEUDWVBd1U98Sb+Sui8J9w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 20:53:50 2026 by rpki-client