Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20276/Au08AIzNAId4MkrwRu78OsJOawk.roa
File:                     Au08AIzNAId4MkrwRu78OsJOawk.roa (raw, json)
Hash identifier:          HYzBiCX54z+z05lGuC6kmwpvHL922szazsfUQ4p8DQ4=
Subject key identifier:   02:ED:3C:00:8C:CD:00:87:78:32:4A:F0:46:EE:FC:3A:C2:4E:6B:09
Certificate issuer:       /CN=7D93A99E1B79A1343479DBFBB7C278F5B3BAD486
Certificate serial:       02
Authority key identifier: 7D:93:A9:9E:1B:79:A1:34:34:79:DB:FB:B7:C2:78:F5:B3:BA:D4:86
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/Au08AIzNAId4MkrwRu78OsJOawk.roa
Signing time:             Wed 10 Jun 2026 07:16:27 +0000
ROA not before:           Wed 10 Jun 2026 07:16:27 +0000
ROA not after:            Thu 10 Jun 2027 07:05:16 +0000
asID:                     58789
IP address blocks:        165.99.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D93A99E1B79A1343479DBFBB7C278F5B3BAD486
        Validity
            Not Before: Jun 10 07:16:27 2026 GMT
            Not After : Jun 10 07:05:16 2027 GMT
        Subject: CN=02ED3C008CCD008778324AF046EEFC3AC24E6B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:39:fe:4f:9d:de:68:89:44:88:25:88:12:
                    96:58:71:9e:a2:61:18:41:22:19:69:f3:16:e8:93:
                    08:33:17:44:4f:65:79:bf:07:33:6c:97:2c:67:24:
                    b6:21:61:72:71:04:51:bb:e5:7a:a6:36:1e:bf:5c:
                    0b:de:a4:e7:17:dd:2a:31:a4:61:09:7e:31:71:c1:
                    b6:33:10:e2:5a:42:87:67:08:20:95:bd:86:be:0d:
                    91:cf:ef:d8:78:2d:41:0a:4b:71:54:88:28:0c:9d:
                    f2:1e:a8:9d:78:b7:16:91:fc:7f:54:61:90:e6:06:
                    fc:ae:74:96:c8:1c:17:84:7c:ac:49:1d:b5:a9:a6:
                    c7:c0:2b:dd:e4:87:78:83:4a:43:49:22:72:c5:92:
                    4e:97:be:5b:98:c0:46:6f:97:1b:db:4a:be:30:0a:
                    2f:33:2f:23:b2:e6:11:f9:72:2e:18:e1:2a:e7:d2:
                    4c:54:f3:5d:fe:cd:d3:93:3b:ee:bf:ba:5e:7c:06:
                    47:63:8d:b3:db:ab:f2:52:91:a9:6f:e2:4e:01:70:
                    3c:bc:70:be:4f:d3:dc:c2:b9:15:ba:9b:02:98:00:
                    64:50:b2:25:86:66:7f:af:04:e5:87:e1:90:db:0e:
                    99:92:c2:a2:45:b2:a2:9b:be:69:94:70:f1:7f:af:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:ED:3C:00:8C:CD:00:87:78:32:4A:F0:46:EE:FC:3A:C2:4E:6B:09
            X509v3 Authority Key Identifier:
                keyid:7D:93:A9:9E:1B:79:A1:34:34:79:DB:FB:B7:C2:78:F5:B3:BA:D4:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/Au08AIzNAId4MkrwRu78OsJOawk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:d3:e3:06:79:da:fe:9d:1b:44:13:40:62:a5:20:11:38:
         b1:53:67:67:28:0e:87:8c:e0:93:f1:91:d0:f7:d8:85:21:08:
         e7:45:0c:0f:32:6b:e8:47:fb:9b:6d:66:1e:cd:21:f4:61:04:
         33:19:89:bb:15:54:b5:0c:1d:84:8e:8e:c0:4f:67:de:54:6d:
         5d:14:42:4d:2e:d6:01:e6:d2:d7:36:de:59:02:29:f6:2b:c7:
         1b:c6:33:76:7d:20:49:38:5d:2a:ae:5b:28:73:1d:0d:d7:47:
         09:7d:e9:d5:b6:c4:c8:e1:e4:98:ff:21:3b:ba:4b:fa:2a:1c:
         9b:f8:d5:b3:5a:b3:a6:c2:f5:c4:77:f7:94:9e:07:1e:3c:ab:
         c7:93:6c:20:df:fe:6a:66:a1:73:53:ab:71:32:d7:e6:28:15:
         53:64:33:94:48:27:e1:2b:e5:0f:b2:88:88:14:e7:af:2d:36:
         31:48:81:ed:c5:42:e7:35:b4:74:e8:6d:d1:ff:ee:bd:db:f5:
         14:e1:d1:f7:ba:2d:34:31:80:5e:a6:81:01:fe:ba:c2:f6:35:
         51:7e:a0:9a:9c:46:d6:a4:d2:2f:91:68:2f:2a:27:2d:c2:4b:
         ab:a0:07:93:2a:a1:f9:60:ac:17:f0:8b:ee:0b:33:b4:ba:3d:
         fc:0a:da:a7
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3RDkz
QTk5RTFCNzlBMTM0MzQ3OURCRkJCN0MyNzhGNUIzQkFENDg2MB4XDTI2MDYxMDA3
MTYyN1oXDTI3MDYxMDA3MDUxNlowMzExMC8GA1UEAxMoMDJFRDNDMDA4Q0NEMDA4
Nzc4MzI0QUYwNDZFRUZDM0FDMjRFNkIwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALSVOf5Pnd5oiUSIJYgSllhxnqJhGEEiGWnzFuiTCDMXRE9leb8H
M2yXLGcktiFhcnEEUbvleqY2Hr9cC96k5xfdKjGkYQl+MXHBtjMQ4lpCh2cIIJW9
hr4Nkc/v2HgtQQpLcVSIKAyd8h6onXi3FpH8f1RhkOYG/K50lsgcF4R8rEkdtamm
x8Ar3eSHeINKQ0kicsWSTpe+W5jARm+XG9tKvjAKLzMvI7LmEflyLhjhKufSTFTz
Xf7N05M77r+6XnwGR2ONs9ur8lKRqW/iTgFwPLxwvk/T3MK5FbqbApgAZFCyJYZm
f68E5YfhkNsOmZLCokWyopu+aZRw8X+vL70CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQC7TwAjM0Ah3gySvBG7vw6wk5rCTAfBgNVHSMEGDAWgBR9k6meG3mhNDR52/u3
wnj1s7rUhjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNzYvZlpPcG5odDVvVFEwZWR2N3Q4SjQ5Yk82MUlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZlpPcG5odDVvVFEwZWR2N3Q4SjQ5
Yk82MUlZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjc2L0F1MDhBSXpOQUlkNE1rcndSdTc4T3NKT2F3ay5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGlY/YwDQYJKoZIhvcNAQELBQAD
ggEBAJY+0+MGedr+nRtEE0BipSAROLFTZ2coDoeM4JPxkdD32IUhCOdFDA8ya+hH
+5ttZh7NIfRhBDMZibsVVLUMHYSOjsBPZ95UbV0UQk0u1gHm0tc23lkCKfYrxxvG
M3Z9IEk4XSquWyhzHQ3XRwl96dW2xMjh5Jj/ITu6S/oqHJv41bNas6bC9cR395Se
Bx48q8eTbCDf/mpmoXNTq3Ey1+YoFVNkM5RIJ+Er5Q+yiIgU568tNjFIge3FQuc1
tHTobdH/7r3b9RTh0fe6LTQxgF6mgQH+usL2NVF+oJqcRtak0i+RaC8qJy3CS6ug
B5MqoflgrBfwi+4LM7S6PfwK2qc=
-----END CERTIFICATE-----
Generated at Fri Jun 12 18:56:04 2026 by rpki-client