Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/e54pV76H4NbTxZOvW2f7WRZ8CFg.roa
File:                     e54pV76H4NbTxZOvW2f7WRZ8CFg.roa (raw, json)
Hash identifier:          3n5JEzC76zceCWTy21LR2UvnX88wVAbJVRqNjuTNJzs=
Subject key identifier:   7B:9E:29:57:BE:87:E0:D6:D3:C5:93:AF:5B:67:FB:59:16:7C:08:58
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       B8
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/e54pV76H4NbTxZOvW2f7WRZ8CFg.roa
Signing time:             Sun 01 Feb 2026 01:32:15 +0000
ROA not before:           Sun 01 Feb 2026 01:32:15 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        152.117.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Feb  1 01:32:15 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=7B9E2957BE87E0D6D3C593AF5B67FB59167C0858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:59:62:b8:1d:75:59:32:b3:1e:47:cb:4a:
                    2c:2e:7f:e2:35:6f:9f:00:26:c5:79:6e:5b:2a:da:
                    a6:6c:54:d1:ce:18:e2:cf:83:a4:1f:17:c5:91:c2:
                    be:7e:8c:f9:e4:0d:61:71:60:32:48:be:e6:77:49:
                    08:a7:16:c6:5c:5d:37:30:0b:28:ca:cb:91:4e:6d:
                    9a:1c:1f:6a:ab:68:11:3c:0f:8c:01:1a:71:7d:11:
                    98:9c:e0:ff:ab:48:e6:fa:54:c2:ee:42:ab:34:ff:
                    36:a2:cb:44:96:0a:c4:10:50:8c:ba:2b:32:0a:25:
                    a1:d4:18:14:7f:1f:3e:e7:0e:d4:8f:89:6e:fd:2c:
                    60:74:43:be:db:b5:f3:d9:f4:03:ce:de:d7:b3:f0:
                    b4:94:e1:02:52:02:34:24:42:15:1c:d7:27:a2:86:
                    9d:70:72:cf:14:37:40:74:1b:80:4e:16:7f:0c:1a:
                    41:dd:c3:5d:fa:7f:b7:93:ec:3a:2d:13:d2:ba:98:
                    39:d3:12:e3:1b:3b:6f:02:2f:df:82:9f:82:40:25:
                    bf:b7:21:79:b9:dc:66:d2:4a:af:b1:75:36:48:6b:
                    23:d4:72:25:14:7b:4f:a7:01:d8:bb:19:5f:10:e3:
                    89:5c:5c:76:f6:e4:ed:0e:d0:bb:e1:46:7e:e2:0f:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9E:29:57:BE:87:E0:D6:D3:C5:93:AF:5B:67:FB:59:16:7C:08:58
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/e54pV76H4NbTxZOvW2f7WRZ8CFg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.117.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:6b:99:4f:5e:f3:25:fa:f3:8d:3d:7c:83:00:95:67:1e:
         16:71:bf:d1:1e:94:4a:b1:e4:c7:14:f0:e7:87:5d:b7:63:6b:
         70:ba:51:0b:df:16:83:12:8a:74:3f:94:65:2b:8d:ac:8f:0c:
         0a:c9:ba:9f:62:7a:21:d8:40:e6:1e:90:22:d7:53:2e:35:ea:
         66:75:45:32:04:fc:61:d2:a9:cb:dc:1a:f2:75:97:f6:9a:2b:
         3b:d0:85:a1:3c:0e:45:a1:23:1a:9e:10:08:06:8d:2b:f2:ff:
         a7:83:11:80:13:ec:b5:a5:1a:62:4c:d1:00:04:1f:b6:0a:cc:
         97:86:55:f2:4a:b4:08:2e:f5:1c:98:c3:a1:2e:ee:2e:12:8b:
         ac:05:c3:95:7e:36:b4:d1:27:80:b5:0a:12:7c:63:05:4b:55:
         f6:bc:b5:c2:18:08:4f:bf:1d:6d:e4:30:23:03:11:f7:81:88:
         0e:f0:31:80:13:4a:6e:0d:22:e9:77:99:3a:c3:79:26:f8:b1:
         89:15:5c:c9:34:91:6b:b6:07:82:f8:c8:8a:ad:6d:fa:18:03:
         ad:1d:67:81:5c:d9:c0:70:eb:15:b2:a3:eb:d5:94:81:0a:c7:
         69:1b:b4:5d:56:c7:86:ff:c6:d3:4c:4e:14:c3:71:27:91:2d:
         d9:88:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:03 2026 by rpki-client