Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20016/o5Net4Hn969c7E67Q7Icv3YX5-c.roa
File:                     o5Net4Hn969c7E67Q7Icv3YX5-c.roa (raw, json)
Hash identifier:          T0usHNAMSzR1V5Nhmp0FxT5hWh15JTt4+HFRUmUY33k=
Subject key identifier:   A3:93:5E:B7:81:E7:F7:AF:5C:EC:4E:BB:43:B2:1C:BF:76:17:E7:E7
Certificate issuer:       /CN=1307F3D68B0AC82A4458DFA6924BF47B48A247EB
Certificate serial:       03
Authority key identifier: 13:07:F3:D6:8B:0A:C8:2A:44:58:DF:A6:92:4B:F4:7B:48:A2:47:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ewfz1osKyCpEWN-mkkv0e0iiR-s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20016/o5Net4Hn969c7E67Q7Icv3YX5-c.roa
Signing time:             Fri 19 Jun 2026 08:13:34 +0000
ROA not before:           Fri 19 Jun 2026 08:13:34 +0000
ROA not after:            Sat 19 Jun 2027 08:00:24 +0000
asID:                     4694
IP address blocks:        153.124.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20016/Ewfz1osKyCpEWN-mkkv0e0iiR-s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20016/Ewfz1osKyCpEWN-mkkv0e0iiR-s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ewfz1osKyCpEWN-mkkv0e0iiR-s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 04:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1307F3D68B0AC82A4458DFA6924BF47B48A247EB
        Validity
            Not Before: Jun 19 08:13:34 2026 GMT
            Not After : Jun 19 08:00:24 2027 GMT
        Subject: CN=A3935EB781E7F7AF5CEC4EBB43B21CBF7617E7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:70:34:c7:90:77:ef:5a:0d:d8:27:7f:58:
                    ca:26:be:9f:f9:4b:df:c0:db:ed:03:9a:98:ff:34:
                    66:44:ad:49:3c:f6:41:5c:66:b7:c7:8c:76:43:41:
                    50:f2:18:2d:24:b0:93:81:80:52:1e:92:18:1f:af:
                    49:2f:92:7e:0c:fe:f6:6f:33:72:43:8a:a2:b0:09:
                    1f:8c:9f:db:dc:fd:ca:5d:0a:b2:f3:b0:87:9d:e9:
                    7b:75:f1:b8:62:a5:e3:8a:97:5c:90:d5:bf:64:85:
                    c9:40:e7:81:c4:59:e4:e3:a1:58:6c:c1:a0:e0:f5:
                    36:9d:64:a1:69:61:6b:e1:18:e2:a2:18:87:e6:c1:
                    d8:c1:39:38:fd:29:79:8b:2d:03:62:eb:8d:f8:ba:
                    a2:b3:c9:79:c6:27:57:80:4d:a4:8d:e1:47:aa:2e:
                    65:b1:f6:31:4e:b8:f3:a4:14:50:9d:b3:1e:79:eb:
                    70:e0:7b:82:30:e6:b3:fc:5c:5f:30:e0:54:43:cf:
                    2d:46:64:d7:ee:9e:31:cd:e7:ad:31:cf:2f:41:5a:
                    7f:74:e3:ef:9b:01:ab:ac:79:70:bb:0b:a8:f5:54:
                    01:8a:3b:62:0b:ee:fc:86:5d:2a:1b:4a:25:a3:cd:
                    e7:f7:4b:e4:17:bd:78:6b:5b:95:dc:c4:d7:63:9f:
                    33:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:93:5E:B7:81:E7:F7:AF:5C:EC:4E:BB:43:B2:1C:BF:76:17:E7:E7
            X509v3 Authority Key Identifier:
                keyid:13:07:F3:D6:8B:0A:C8:2A:44:58:DF:A6:92:4B:F4:7B:48:A2:47:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20016/Ewfz1osKyCpEWN-mkkv0e0iiR-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ewfz1osKyCpEWN-mkkv0e0iiR-s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20016/o5Net4Hn969c7E67Q7Icv3YX5-c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.124.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:a2:02:4e:8c:6e:f3:87:12:db:b3:e1:78:29:74:1b:61:
         dd:79:4a:9b:0b:44:1c:4f:16:b2:08:d4:de:ed:d5:4b:eb:d3:
         b5:00:79:5b:43:27:55:d6:a2:5b:04:7c:d3:f1:a0:4f:f7:ba:
         40:0d:02:e0:c8:60:3e:1d:0b:4a:66:ee:f5:d6:19:65:07:50:
         bb:28:89:9e:a2:99:1c:7b:5f:58:2a:fb:56:06:fe:57:39:92:
         36:76:24:12:d9:63:0d:6d:28:d7:5b:a0:2b:89:a5:1c:7a:d9:
         1a:ff:cd:22:f4:c7:e1:20:15:8d:cd:67:27:84:e7:70:da:e7:
         e7:26:32:aa:48:83:33:cf:87:9c:57:8d:7d:b4:9b:ce:36:db:
         e7:8f:d3:e3:d9:7a:6c:22:4e:2b:50:03:3e:e8:1f:6e:ff:78:
         83:41:a0:5a:e0:f7:95:8c:6b:6f:84:b6:7e:61:38:6d:ad:2e:
         5d:37:e0:fa:11:c2:a9:1b:0a:ff:6a:37:95:43:12:77:34:19:
         cb:46:42:80:ad:c5:13:cb:2c:5f:34:01:d6:fa:d1:33:a3:7b:
         30:f4:1d:5c:bb:4a:f5:88:e7:79:68:be:67:7c:c0:ce:80:2b:
         e2:5f:e4:10:c6:3c:29:db:4f:1c:3c:b8:25:85:50:40:e4:22:
         90:f7:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:19:53 2026 by rpki-client