Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/mlGLaiWpzxrXSKmeeGG-cgEHIN8.roa
File:                     mlGLaiWpzxrXSKmeeGG-cgEHIN8.roa (raw, json)
Hash identifier:          V3UEEWT3xd9Mt2J8eX2+bBDL7L9mOnc7k9Qqdtrq2sI=
Subject key identifier:   9A:51:8B:6A:25:A9:CF:1A:D7:48:A9:9E:78:61:BE:72:01:07:20:DF
Certificate issuer:       /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial:       22
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/mlGLaiWpzxrXSKmeeGG-cgEHIN8.roa
Signing time:             Tue 31 Mar 2026 08:43:46 +0000
ROA not before:           Tue 31 Mar 2026 08:43:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18281
IP address blocks:        133.88.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
        Validity
            Not Before: Mar 31 08:43:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9A518B6A25A9CF1AD748A99E7861BE72010720DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:93:ae:8e:43:81:08:af:8f:2c:17:1f:ec:
                    50:28:49:b9:11:77:e5:2b:3b:f6:d9:48:8c:07:c5:
                    c9:92:36:6d:b3:69:b7:99:50:d7:db:aa:52:08:6f:
                    7c:f2:6a:32:b3:fa:6a:4b:ab:1f:64:1b:33:1b:ab:
                    b8:a1:a3:f7:c3:7c:6f:ee:44:82:6b:ab:d7:4a:9f:
                    02:23:c2:7b:7d:9d:2c:3a:3e:c3:76:6d:a8:d4:30:
                    b0:c1:26:60:c9:e0:3d:f1:e3:5b:f0:31:4d:90:90:
                    c7:14:71:b8:fb:32:3e:0c:d5:9e:40:93:57:ef:1a:
                    ef:2e:d6:1a:4a:37:31:c8:d8:1c:b7:cf:19:1d:cb:
                    4a:f0:8e:90:a2:16:73:ca:34:1d:1b:f4:65:41:a9:
                    56:18:b8:45:11:f3:88:e3:20:1d:68:d9:d1:30:85:
                    fe:d7:53:d8:f7:86:3d:43:d1:ec:a7:f1:7b:cc:52:
                    a9:15:6c:d7:4c:0e:89:5a:b8:87:c1:b5:ec:18:38:
                    5b:67:3f:e8:ef:06:e9:da:35:45:e0:45:86:28:99:
                    fd:c8:89:ff:1a:5e:c1:44:50:ff:0a:00:e4:c8:0c:
                    3f:4d:e9:9e:dc:a1:8c:f2:0e:b1:ff:98:c3:cf:47:
                    05:9d:31:f4:28:eb:04:b5:06:ac:bd:4a:3c:d8:08:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:51:8B:6A:25:A9:CF:1A:D7:48:A9:9E:78:61:BE:72:01:07:20:DF
            X509v3 Authority Key Identifier:
                keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/mlGLaiWpzxrXSKmeeGG-cgEHIN8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:7d:77:4c:7f:c3:1e:f2:85:19:b2:84:5f:a4:ec:e5:3f:
         c1:16:ed:6f:1f:d5:e3:d6:d2:34:4e:a5:93:4a:a8:6f:60:ad:
         23:7e:e0:5c:ee:dd:f7:19:da:b0:cd:c7:37:cd:2c:ec:d8:55:
         2d:a6:62:f3:25:32:77:20:5c:c8:fa:b2:eb:e9:4b:a1:45:90:
         ee:bb:b0:36:62:ac:7b:24:b5:e9:0c:1f:77:6f:0d:f8:fe:3e:
         80:7e:98:88:b6:2e:4e:2b:7b:ce:0c:de:bf:81:89:48:3f:07:
         51:a9:8c:11:ca:7f:f5:4e:22:00:b3:a6:80:d4:48:47:62:b8:
         ed:f0:b7:74:d8:4e:2d:68:32:f5:45:63:e6:9d:0f:f6:9c:61:
         0c:4b:49:d2:9b:e9:39:a1:f3:7a:38:de:c2:67:9d:42:58:8d:
         16:a6:c3:9f:58:a4:f7:64:c4:33:e7:11:d8:7b:3b:c0:6e:e7:
         3a:75:ce:62:1c:bc:fb:14:ef:7c:1c:3e:ba:d1:18:c1:25:fd:
         85:51:d9:bf:46:09:45:f6:db:13:97:a5:8a:20:20:18:32:bb:
         97:93:8c:ed:f8:2e:7d:e0:db:43:42:d6:3e:8e:40:88:7e:5d:
         df:90:52:2a:32:9b:10:9f:57:0c:0b:f6:87:77:99:b2:45:65:
         d5:6d:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:22 2026 by rpki-client