Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/AyL8lwwB70BiIE-pD-3jJ3rQBFE.roa
File:                     AyL8lwwB70BiIE-pD-3jJ3rQBFE.roa (raw, json)
Hash identifier:          a+1HnMW5S2YaZKIeV7G19BLEI5ksVLexqLnOeo1i89E=
Subject key identifier:   03:22:FC:97:0C:01:EF:40:62:20:4F:A9:0F:ED:E3:27:7A:D0:04:51
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0162
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/AyL8lwwB70BiIE-pD-3jJ3rQBFE.roa
Signing time:             Tue 31 Mar 2026 07:48:08 +0000
ROA not before:           Tue 31 Mar 2026 07:48:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     137922
IP address blocks:        124.40.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0322FC970C01EF4062204FA90FEDE3277AD00451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:5d:65:8d:ee:51:79:60:01:79:b3:11:c7:
                    82:ba:dd:c1:82:fe:2c:1c:a2:f8:9b:40:bb:df:e2:
                    96:b2:f5:d7:4d:90:ab:10:60:b8:3f:1b:59:20:69:
                    3e:80:e5:f5:9f:54:f0:52:69:04:4a:25:18:4b:fa:
                    86:9d:80:ac:5b:29:7b:83:59:d2:9d:3c:7c:a5:12:
                    ec:f6:c0:e0:71:b9:b5:d2:06:05:fb:4f:ff:65:27:
                    9b:12:29:2c:71:7d:97:8f:be:9d:51:c2:27:34:8d:
                    bf:91:b1:75:c2:76:d0:c3:14:98:71:bc:08:12:39:
                    ea:c7:2c:80:4a:9c:9d:aa:61:8b:60:d2:22:ef:ca:
                    ef:f5:f7:16:73:44:be:75:91:d5:48:19:f9:47:3f:
                    53:72:38:05:b7:af:f6:d5:76:8d:e2:09:3d:ef:54:
                    05:71:ff:69:15:a7:72:3b:b8:cc:a1:22:3d:34:9a:
                    bb:f5:8d:bd:cf:fb:24:9b:cc:c5:6f:17:71:8d:9d:
                    6f:82:ee:8d:9d:6c:19:97:c4:be:e2:56:0a:dc:c9:
                    56:1e:8c:0b:e2:bd:fd:12:88:58:d6:f7:76:bb:89:
                    b5:22:5a:be:dc:a5:2a:a8:63:ed:b5:34:28:e1:dd:
                    d2:bc:5a:7b:60:9a:8d:00:a6:36:c4:18:cf:4b:07:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:22:FC:97:0C:01:EF:40:62:20:4F:A9:0F:ED:E3:27:7A:D0:04:51
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/AyL8lwwB70BiIE-pD-3jJ3rQBFE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:c2:a3:6f:5b:31:b9:66:d0:f4:c8:2f:ea:89:3a:7f:54:
         d1:4a:3c:90:3e:84:58:bf:52:f9:c8:ef:39:05:e0:bf:de:89:
         cb:50:dd:16:93:6d:a3:f2:3a:dd:53:64:6c:04:d1:4f:94:41:
         34:cd:70:23:1d:02:cc:16:c7:d1:c6:d7:1d:af:b1:89:2e:0b:
         1b:af:79:e8:f9:90:69:14:39:54:a6:d4:95:2c:a7:70:eb:5e:
         c8:ec:ce:63:bb:87:8d:66:c6:21:42:f9:8d:5d:24:4d:02:03:
         60:74:61:84:0c:9e:72:e2:73:05:bc:40:d5:7a:4c:ea:57:22:
         b7:23:9b:31:b4:be:4d:ad:ea:a7:50:17:18:01:ed:6e:c1:b3:
         7e:af:85:38:17:91:48:d9:d7:33:2c:3f:f7:92:78:fb:90:23:
         96:b0:3e:8f:54:12:36:76:8a:24:05:66:3a:cf:46:94:3c:f3:
         4e:94:d7:fa:a6:7f:8f:e1:f8:a8:21:11:8e:08:2b:26:9b:34:
         77:b0:2d:78:cb:61:36:8f:38:0e:e3:7d:b4:cf:c1:0f:f1:53:
         37:e6:5d:de:8a:c3:67:53:6a:41:e1:28:87:f6:57:15:24:32:
         2b:7d:17:7f:e9:76:49:ac:9a:5a:6f:03:42:a7:db:82:e2:10:
         61:6c:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:51 2026 by rpki-client