Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/KGYabU6CbkZqHtM1Y8LYblJRixw.roa
File:                     KGYabU6CbkZqHtM1Y8LYblJRixw.roa (raw, json)
Hash identifier:          d9zgh8g0d/+SrSqM3WeYLP/FvPcqYBcvst0neiQseoM=
Subject key identifier:   28:66:1A:6D:4E:82:6E:46:6A:1E:D3:35:63:C2:D8:6E:52:51:8B:1C
Certificate issuer:       /CN=59639EA27DED460F3C9B43216EFC51955F6289C9
Certificate serial:       27
Authority key identifier: 59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/KGYabU6CbkZqHtM1Y8LYblJRixw.roa
Signing time:             Sun 01 Mar 2026 01:35:36 +0000
ROA not before:           Sun 01 Mar 2026 01:35:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7690
IP address blocks:        210.172.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59639EA27DED460F3C9B43216EFC51955F6289C9
        Validity
            Not Before: Mar  1 01:35:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=28661A6D4E826E466A1ED33563C2D86E52518B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:50:e0:52:e7:8b:21:a9:8c:45:a9:04:52:
                    34:07:7a:ca:55:83:8f:89:2e:6b:57:11:e9:f6:4c:
                    b1:ef:ae:fc:67:0c:42:d5:0a:1e:7a:61:f2:06:b8:
                    09:d6:c6:9f:1b:46:5a:e1:d2:fb:54:7a:5e:e4:3d:
                    6d:7f:41:5d:76:bf:59:9f:73:1d:cf:f6:96:40:ce:
                    fe:7a:96:f1:23:31:2a:16:ed:1a:d6:4e:b7:28:56:
                    1d:d2:c7:c2:04:32:b7:c0:3f:c1:78:5e:9d:f9:25:
                    e9:c8:ec:96:21:51:26:6d:99:47:b5:6d:22:0c:50:
                    cd:94:c2:87:c4:01:f8:5f:85:c8:46:3d:95:cc:e7:
                    bf:a1:0b:bf:fc:f4:ec:b9:ec:d8:27:db:44:6d:38:
                    8f:66:0c:63:9f:24:c0:21:bd:a7:e0:14:06:04:ad:
                    60:aa:33:ef:10:3e:bc:fe:8d:3c:a2:f6:84:58:3c:
                    df:3f:cb:c7:dd:35:c7:76:a1:0b:a8:6e:8b:1f:3b:
                    90:ab:59:d6:01:10:fc:98:38:0d:ac:ad:9a:cb:95:
                    a3:2e:61:22:f7:79:1c:8f:b3:a0:4c:11:29:19:28:
                    2a:d5:9e:35:a4:fd:cd:fb:66:ca:ac:d6:c4:04:f3:
                    dc:f2:50:b5:4e:ef:ca:af:21:f8:88:d8:9a:13:10:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:66:1A:6D:4E:82:6E:46:6A:1E:D3:35:63:C2:D8:6E:52:51:8B:1C
            X509v3 Authority Key Identifier:
                keyid:59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/KGYabU6CbkZqHtM1Y8LYblJRixw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:71:5f:6d:bc:54:c7:2a:fb:57:ff:01:1f:11:39:07:76:f6:
         8a:c2:f3:40:41:71:c3:47:2e:66:b0:ca:ff:2d:dd:d0:4c:25:
         b5:02:ea:ed:d1:c0:c7:82:62:ed:84:77:87:0a:64:d3:72:e6:
         f7:e7:16:3a:53:2c:66:67:ac:ff:53:00:28:27:4e:a0:7e:40:
         9a:6c:95:fe:9c:f8:be:24:00:59:5b:66:4b:58:82:81:f2:01:
         66:46:05:5c:87:1d:66:7a:86:b7:f3:da:d6:46:11:86:42:d6:
         97:60:d4:0e:d5:7f:f7:c7:d1:a1:15:43:3c:c2:7b:40:9e:c1:
         6e:9e:fe:e6:69:a0:93:f0:69:73:3f:df:3c:81:37:82:0a:a8:
         f8:74:71:82:53:77:fc:ba:c8:6e:6e:f3:b2:e2:2b:cd:49:ea:
         96:78:f8:6b:c9:78:a3:07:b7:30:34:30:ee:90:04:99:c3:35:
         4c:97:6d:b1:a0:f3:c6:01:6d:ad:a0:55:72:6e:5b:b7:51:fb:
         6c:96:13:fc:4b:33:63:36:98:c6:9f:a9:f5:df:91:52:71:7e:
         f5:fd:a6:10:9c:35:6e:f2:17:85:3d:36:15:c1:21:60:7e:47:
         4e:3b:38:83:3d:43:d8:52:ab:0b:3b:b3:5f:a6:a0:2a:b4:70:
         8f:6c:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:37:18 2026 by rpki-client