Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/ha5BJHZVpMxhpr39drZjS5CVEkU.roa
File:                     ha5BJHZVpMxhpr39drZjS5CVEkU.roa (raw, json)
Hash identifier:          KeE5RUituVJHg8mboThShPgguosyHQr3u3+VrAA8CpY=
Subject key identifier:   85:AE:41:24:76:55:A4:CC:61:A6:BD:FD:76:B6:63:4B:90:95:12:45
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       3261
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ha5BJHZVpMxhpr39drZjS5CVEkU.roa
Signing time:             Tue 31 Mar 2026 07:30:48 +0000
ROA not before:           Tue 31 Mar 2026 07:30:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        125.252.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12897 (0x3261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: Mar 31 07:30:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=85AE41247655A4CC61A6BDFD76B6634B90951245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f2:3f:de:f1:b8:da:c5:fb:e0:04:e1:b1:d9:
                    53:a8:02:24:b7:98:51:93:73:63:db:ae:4d:bf:fc:
                    73:f4:6f:b6:61:88:c7:21:34:6a:55:a9:1d:92:75:
                    dc:e8:73:a9:02:64:87:62:62:76:0b:f9:dc:5f:cd:
                    bb:0a:3e:33:25:81:2c:49:30:ac:4e:4c:66:a4:99:
                    68:ba:34:58:da:f5:82:41:76:13:00:34:96:62:dd:
                    cf:d4:a3:83:a2:2e:30:f4:c8:a4:d4:2f:ef:43:2a:
                    72:7f:55:8c:e9:5b:3d:5f:62:c4:c6:62:7d:f5:83:
                    89:ac:00:ba:4c:24:e1:6d:5a:5c:76:65:ee:97:49:
                    ba:8e:2f:82:3b:8d:7b:81:a0:6a:65:6f:02:bc:e9:
                    d5:a9:2b:35:a2:29:42:fa:08:49:11:1f:2a:5d:28:
                    d4:ba:fe:82:87:d6:7e:57:e9:ab:53:5b:a0:08:76:
                    4a:91:f5:7b:38:9c:a9:59:09:40:1e:05:0a:c4:7e:
                    da:b2:6b:74:d6:8f:cf:76:76:81:11:c3:00:68:ba:
                    57:3b:b6:09:9e:50:ca:69:38:5a:1d:bd:cc:af:85:
                    8f:53:bf:3c:50:ce:a8:dc:ec:06:36:78:0d:17:1f:
                    8f:fe:4c:e0:5a:79:ac:6e:c5:cb:f7:7e:d1:fd:3f:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:41:24:76:55:A4:CC:61:A6:BD:FD:76:B6:63:4B:90:95:12:45
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ha5BJHZVpMxhpr39drZjS5CVEkU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.252.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         32:52:06:84:ec:2d:7c:db:c2:f4:61:de:97:b7:90:20:3c:99:
         46:35:98:f4:1a:88:91:f3:be:89:27:7d:c3:91:32:1a:26:fa:
         45:3c:40:90:38:20:7d:3c:49:46:0e:d0:ea:52:d3:9a:94:aa:
         f6:fa:02:e4:6c:cf:69:84:7c:cf:7c:5c:46:3a:64:89:76:8c:
         7c:04:63:21:0b:c3:49:b2:38:68:8f:5e:ea:8a:ee:c5:90:8a:
         18:23:39:8e:37:8d:25:bc:12:60:53:0b:e6:92:0a:cc:8c:0b:
         10:95:7a:30:1c:73:50:a3:4c:e3:c9:3c:58:66:29:3e:a4:60:
         1d:53:33:cf:b5:f9:42:cf:b8:e7:b5:dd:68:0e:21:e8:18:2a:
         8b:6e:03:e7:53:d2:a9:3c:b5:c4:fd:e5:bc:56:be:74:37:65:
         17:d2:e4:d9:74:f6:50:d7:22:d4:c0:d3:b2:1d:b8:5f:67:01:
         e3:6a:24:42:14:77:b6:09:16:f1:72:02:f9:46:75:00:bf:23:
         ff:1c:61:fd:41:79:81:a7:6c:41:65:6d:4e:93:5d:b7:8b:b2:
         4d:44:18:12:ae:58:28:f5:4d:b4:b8:00:f9:df:e7:bd:60:45:
         1f:8d:b2:c8:e8:e2:45:67:66:93:d0:48:53:08:7e:d5:ec:00:
         2e:1c:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:31 2026 by rpki-client