Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/7ARmFxKe0lqvE0rCfEffyteHpkg.roa
File:                     7ARmFxKe0lqvE0rCfEffyteHpkg.roa (raw, json)
Hash identifier:          PlHwcVVfmHIrINLV910gqxfp+WtFxJ2ksH2f+uFP6Ks=
Subject key identifier:   EC:04:66:17:12:9E:D2:5A:AF:13:4A:C2:7C:47:DF:CA:D7:87:A6:48
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0184
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/7ARmFxKe0lqvE0rCfEffyteHpkg.roa
Signing time:             Thu 04 Jun 2026 18:00:57 +0000
ROA not before:           Thu 04 Jun 2026 18:00:57 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     3949
IP address blocks:        61.213.162.88/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 12:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Jun  4 18:00:57 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=EC046617129ED25AAF134AC27C47DFCAD787A648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:81:fe:19:d9:ce:58:5b:af:9b:10:35:54:
                    75:54:d9:74:6c:7a:f6:5c:89:b9:e0:7d:57:07:7a:
                    c6:c0:ce:5f:91:c2:d9:4a:21:cb:de:1e:bb:ef:16:
                    03:82:98:23:25:5a:34:2e:1e:20:a1:ff:c9:ab:fb:
                    4e:cb:8e:3e:87:95:5a:7a:d2:ca:6a:77:82:97:c2:
                    7b:41:32:ee:5e:4d:41:22:55:ea:2e:98:7a:79:4a:
                    c7:01:2f:88:71:c0:70:26:46:08:ff:69:74:69:8b:
                    ce:34:44:da:0f:38:e8:97:21:88:86:5a:22:7e:68:
                    71:f9:03:27:b7:9f:64:fb:54:02:20:99:da:f1:4e:
                    51:fb:6a:c4:f6:d6:99:71:47:9d:d6:86:13:cc:c2:
                    e0:50:ed:31:68:c4:80:a3:a0:4c:a8:5b:d7:be:7d:
                    a2:1b:db:9c:25:4e:5c:ba:76:9e:52:94:3f:d3:4c:
                    16:db:72:b1:bd:f1:63:b8:59:fb:8c:d9:03:88:a3:
                    e2:bf:bd:14:41:7a:a9:ba:06:ac:65:14:71:62:d8:
                    c2:96:2a:34:ec:f9:9b:29:62:09:40:77:0f:ea:8f:
                    9c:8e:ab:29:b3:6d:86:c2:de:1d:a5:b2:ec:2b:a0:
                    1c:81:85:a6:73:98:9b:76:61:24:8e:63:68:21:0d:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:04:66:17:12:9E:D2:5A:AF:13:4A:C2:7C:47:DF:CA:D7:87:A6:48
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/7ARmFxKe0lqvE0rCfEffyteHpkg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.162.88/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:12:3a:4f:ff:55:27:a8:9b:ae:f4:a0:79:94:01:12:16:53:
         19:40:14:e7:ea:2d:ea:32:bb:c9:31:0c:c6:c3:07:ec:9d:00:
         0c:b0:ef:c5:37:5a:fe:9c:eb:57:11:13:e3:bc:46:4d:82:c0:
         99:e6:06:fa:7a:e1:a9:46:36:2e:c4:94:b7:43:0b:b5:8e:9f:
         52:f9:f7:aa:53:9b:2b:20:c9:ed:90:d4:ae:0a:f0:bf:a8:8e:
         1d:39:9d:04:c5:5c:cc:b1:9d:e6:ae:03:10:68:4a:1b:eb:19:
         89:c1:e4:d6:a0:0a:e1:39:90:93:d4:6c:69:19:f4:5e:4f:af:
         3f:95:f9:f4:71:97:f2:81:a2:4c:43:1c:42:f9:95:fb:0f:32:
         a2:18:39:11:4f:52:b8:e7:4b:ab:17:19:f5:da:b8:db:c4:78:
         3b:f5:14:90:ba:a4:7d:76:33:6c:f6:3a:03:d4:46:2a:aa:7f:
         15:77:95:23:ec:cc:c1:f1:1a:24:28:33:f5:b0:59:09:04:27:
         71:f0:91:67:a5:6e:a9:9e:7e:4a:6f:25:4a:bb:1d:35:ed:c7:
         c6:bd:fe:c1:c9:81:a6:75:36:4b:ac:e3:b8:c9:24:bb:09:d4:
         cf:3d:65:ab:a3:50:05:53:e6:22:a5:dd:55:55:09:cd:ca:32:
         46:5f:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:07 2026 by rpki-client