Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa
File:                     ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa (raw, json)
Hash identifier:          A7BpN0DE1SVceN4ck/Zdck/qCulEbbdiLmGl2I3Qkv0=
Subject key identifier:   64:09:17:00:F0:EF:86:62:7F:2E:1E:70:2E:1E:36:34:9E:D9:15:4E
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       5C
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa
Signing time:             Tue 31 Mar 2026 08:33:50 +0000
ROA not before:           Tue 31 Mar 2026 08:33:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24259
IP address blocks:        126.52.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Mar 31 08:33:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=64091700F0EF86627F2E1E702E1E36349ED9154E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a4:e6:14:28:6b:c4:c6:47:04:d6:31:a2:cc:
                    06:10:1a:22:e5:99:3c:65:8f:fe:d3:07:b6:a4:94:
                    a4:56:bd:40:b7:b3:e7:58:96:46:2f:a6:59:10:72:
                    59:28:12:1d:58:a3:81:ec:18:e2:bc:8b:7f:34:38:
                    cd:45:48:ce:11:16:eb:65:76:ad:87:01:f7:9f:10:
                    b7:a2:a6:37:95:79:b6:fa:be:a3:8d:ab:8a:d1:70:
                    56:a8:24:20:55:0a:ce:a4:a5:dd:e4:5f:02:34:26:
                    b9:93:0a:a7:c3:58:d9:73:f7:f9:72:be:63:80:d1:
                    8b:f4:95:03:7a:06:2d:08:bb:73:ba:75:62:31:9d:
                    3d:63:07:6f:a8:83:a9:58:f6:da:9a:cf:42:1e:86:
                    1c:ff:14:2c:de:61:de:6d:52:a0:98:b6:ac:3f:e5:
                    68:1a:37:f4:3e:be:d3:63:c9:f6:c5:56:49:85:c4:
                    90:3d:a3:46:d4:3c:11:40:35:a3:ed:d3:6b:42:e6:
                    f3:86:6c:35:78:66:f6:07:89:00:a1:05:b5:49:46:
                    26:91:de:91:e2:17:66:6a:ed:f2:d3:58:44:0b:67:
                    d9:9d:4c:31:f6:52:fb:aa:a2:3b:2a:c3:62:06:5f:
                    50:0c:3d:c8:5b:ae:b9:3d:fd:d2:c8:8d:a1:4d:bd:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:17:00:F0:EF:86:62:7F:2E:1E:70:2E:1E:36:34:9E:D9:15:4E
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:f8:57:a1:99:cf:81:cc:63:1b:54:5c:50:38:a7:6c:41:
         d0:42:30:ed:db:ce:e7:5b:89:a3:36:fa:34:59:03:e1:f4:28:
         24:9d:18:a8:96:74:51:a5:92:70:40:0e:68:4c:60:75:f1:93:
         1d:c0:14:9a:47:14:cb:61:f0:48:8e:4d:29:88:ac:82:6a:67:
         60:12:24:77:45:22:cc:4e:7b:db:97:39:d4:39:2c:b5:e8:4a:
         5e:c1:c8:09:41:aa:6f:51:f4:19:b1:12:74:74:3d:4f:98:fc:
         10:9c:d5:b6:11:f6:d9:ac:a0:02:72:90:87:17:3c:2c:fa:10:
         0c:44:34:19:6a:25:a1:b1:f1:7c:d1:b3:69:d1:7c:15:66:d5:
         d5:e9:06:bd:9c:5c:fa:09:0a:9a:a4:49:96:ba:0e:87:10:34:
         15:60:68:2d:53:a5:8b:72:c2:fe:c4:06:09:f7:db:45:fd:a5:
         12:22:57:13:b8:f2:06:f2:43:79:8c:0c:23:a6:ef:14:5a:0f:
         39:2d:e6:94:1a:9a:3f:1d:c9:da:13:98:62:93:6f:bb:54:54:
         38:f9:da:87:8d:5e:4d:b8:fb:02:f7:14:5c:0c:a9:df:50:08:
         25:a6:fd:60:cc:18:d4:a6:0d:3f:23:a0:87:8d:96:29:94:5d:
         9f:b1:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:31 2026 by rpki-client