Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/nYgB0wqaNoLg8lhdWbbriEAvc8E.roa
File:                     nYgB0wqaNoLg8lhdWbbriEAvc8E.roa (raw, json)
Hash identifier:          YcmjJtJnZkSJSOxf+TyKJgXCVmt772pO4tdU34F+6q8=
Subject key identifier:   9D:88:01:D3:0A:9A:36:82:E0:F2:58:5D:59:B6:EB:88:40:2F:73:C1
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0161
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/nYgB0wqaNoLg8lhdWbbriEAvc8E.roa
Signing time:             Tue 31 Mar 2026 07:48:07 +0000
ROA not before:           Tue 31 Mar 2026 07:48:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     50601
IP address blocks:        124.40.52.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9D8801D30A9A3682E0F2585D59B6EB88402F73C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:11:4e:c4:31:98:e5:9b:c0:91:df:27:c4:
                    ee:30:b7:8f:32:dc:3a:73:99:72:d0:e5:22:8f:9a:
                    77:74:73:20:63:a8:56:1a:27:c6:3d:0a:e1:8b:1c:
                    3f:05:53:5f:9e:0e:98:82:22:be:a0:0e:59:12:43:
                    92:6f:21:44:cd:e5:0c:e7:fb:e5:40:32:01:50:ab:
                    01:96:0d:c8:cf:31:7b:68:10:cd:da:24:dd:0c:77:
                    45:80:d9:9b:64:ec:e7:8f:03:52:d4:c4:0d:dd:d7:
                    1d:24:4f:1a:3d:cc:65:2c:a1:d6:92:57:a3:1a:b0:
                    87:cc:bd:bb:f7:92:76:16:2a:4b:12:7f:f0:12:6e:
                    2e:7b:9e:c3:f5:5d:db:76:d0:97:9f:83:04:0d:df:
                    05:37:74:ef:28:bb:dd:9b:62:b9:7d:d7:45:05:c0:
                    65:24:da:a2:8c:35:d7:fa:4d:b6:f2:c6:ef:ce:f4:
                    69:34:8d:c9:1c:a5:c6:61:c7:dd:2e:b5:0a:27:39:
                    96:81:b1:25:0a:0f:86:fa:49:f5:cd:7e:00:87:4d:
                    2b:cf:d4:a8:a4:04:9b:bd:00:9c:bd:b8:90:85:db:
                    b9:31:33:26:7d:7e:e9:d4:46:62:9a:0f:27:40:74:
                    b9:5a:3f:3e:7e:51:d7:a1:be:a0:59:25:52:21:ce:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:88:01:D3:0A:9A:36:82:E0:F2:58:5D:59:B6:EB:88:40:2F:73:C1
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/nYgB0wqaNoLg8lhdWbbriEAvc8E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.52.128/26

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:62:03:82:d9:d7:19:2f:2e:ec:e5:d5:09:8e:da:e8:83:
         c6:8c:cd:93:c7:26:c3:07:15:a8:dd:c9:82:62:b6:c0:7c:55:
         83:f3:a4:e4:e2:f3:a3:89:b7:0a:7b:09:eb:3f:4d:82:a7:e4:
         5e:ff:a3:59:cf:2c:97:33:a9:a5:8b:e7:e0:21:17:33:9a:9f:
         68:c0:e9:2c:62:62:9f:60:c9:17:0c:2b:77:b1:7e:b0:9c:ab:
         a0:f0:2d:17:65:47:e2:9e:cd:35:70:b9:44:81:0c:a2:83:65:
         7d:12:ae:27:37:3f:8b:a4:0a:29:5d:fd:22:ce:b5:a5:fa:2e:
         72:98:98:c7:30:df:d7:02:d2:b8:cd:93:f2:a5:41:29:08:80:
         26:e0:11:81:92:98:3d:de:4d:c5:51:23:e8:13:4c:82:ed:53:
         19:44:21:0d:4e:8d:e1:a1:a6:de:24:11:b5:27:c4:9d:e0:ab:
         09:cf:97:64:d9:f0:18:c5:e6:9e:c1:20:69:89:bb:4d:79:24:
         db:75:a6:03:d6:31:89:a3:4c:1e:d0:58:68:72:c4:41:26:db:
         3f:f0:35:a7:5e:04:db:09:57:82:98:58:3c:c8:75:e2:cc:83:
         b0:46:62:01:6d:7e:0b:f3:b5:c1:6b:89:09:53:a0:23:12:7c:
         16:c3:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:15 2026 by rpki-client