Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20276/riyIRWDdIvdxusQUoNur8IpCeWM.roa
File:                     riyIRWDdIvdxusQUoNur8IpCeWM.roa (raw, json)
Hash identifier:          +Je+QUdyyEov70QU3y1bEF/91jijQO3vp32a4dMlc6U=
Subject key identifier:   AE:2C:88:45:60:DD:22:F7:71:BA:C4:14:A0:DB:AB:F0:8A:42:79:63
Certificate issuer:       /CN=7D93A99E1B79A1343479DBFBB7C278F5B3BAD486
Certificate serial:       03
Authority key identifier: 7D:93:A9:9E:1B:79:A1:34:34:79:DB:FB:B7:C2:78:F5:B3:BA:D4:86
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/riyIRWDdIvdxusQUoNur8IpCeWM.roa
Signing time:             Wed 10 Jun 2026 07:16:29 +0000
ROA not before:           Wed 10 Jun 2026 07:16:29 +0000
ROA not after:            Thu 10 Jun 2027 07:05:16 +0000
asID:                     55383
IP address blocks:        165.99.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D93A99E1B79A1343479DBFBB7C278F5B3BAD486
        Validity
            Not Before: Jun 10 07:16:29 2026 GMT
            Not After : Jun 10 07:05:16 2027 GMT
        Subject: CN=AE2C884560DD22F771BAC414A0DBABF08A427963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:e5:e2:58:56:db:09:34:99:02:cb:73:58:
                    8d:1f:b7:59:e3:2e:6f:c8:0e:d2:ea:af:e4:11:fb:
                    f0:fc:93:d2:8f:fb:0e:19:a6:ef:e9:a9:79:eb:c4:
                    52:93:ff:16:04:95:e1:e4:d5:9a:16:e4:ba:93:d0:
                    ac:7a:78:2f:bd:c6:35:a0:cd:e9:0f:a4:37:84:e7:
                    c7:96:74:de:9b:ca:ff:54:e7:1e:92:3a:77:2c:c1:
                    d1:fb:ff:fd:eb:8e:31:52:ce:9e:16:9f:a8:79:f2:
                    5b:2d:57:a0:ae:cd:09:32:89:4d:ec:4c:bc:11:75:
                    3d:9e:aa:20:82:bd:94:d7:4f:62:a9:0a:d9:32:2a:
                    20:a8:03:3c:3e:bc:92:6a:af:6e:25:b0:f8:21:ce:
                    5d:73:83:21:be:e7:7e:d3:92:1d:2b:9c:c6:55:dc:
                    81:3d:3e:74:d8:82:06:55:c2:d4:b3:d3:da:75:34:
                    3e:6e:db:7c:79:48:b5:3e:7d:22:58:47:ea:c0:9b:
                    44:68:4e:96:f6:79:ab:56:8a:c6:a3:6f:9a:a7:bb:
                    7d:5a:22:86:45:ce:a1:27:ff:11:2e:1a:12:b7:66:
                    fd:a0:e8:a5:13:f2:6e:00:1a:4c:fd:7e:fb:98:f0:
                    8e:4d:32:7c:2d:2f:72:8e:10:fb:7e:b8:dc:50:e1:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2C:88:45:60:DD:22:F7:71:BA:C4:14:A0:DB:AB:F0:8A:42:79:63
            X509v3 Authority Key Identifier:
                keyid:7D:93:A9:9E:1B:79:A1:34:34:79:DB:FB:B7:C2:78:F5:B3:BA:D4:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/riyIRWDdIvdxusQUoNur8IpCeWM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:89:ce:7f:c0:e2:54:f8:e0:f9:0b:6c:09:7f:e9:db:e2:60:
         23:15:cb:2b:84:1c:ad:ca:2f:ea:05:c6:7f:12:7a:8b:6b:33:
         cf:53:95:b3:67:53:24:59:4a:66:e4:ee:ad:f1:4f:67:94:b5:
         79:20:e4:02:14:e1:da:7e:ca:5f:15:fc:af:78:b9:65:c2:96:
         f6:52:ad:b5:27:d0:e6:60:f3:7f:25:70:64:2f:91:8d:db:50:
         45:f2:a2:10:1e:86:cb:c5:0e:90:f9:72:e6:ec:66:c8:c8:9f:
         c1:d6:5a:44:5a:d9:2c:32:06:bf:1a:43:1f:6e:d4:a7:c1:cf:
         c9:51:74:b3:a7:08:4d:51:17:d8:c0:cb:2f:83:62:5d:c2:27:
         b0:dd:58:af:53:8a:3a:eb:80:89:17:d7:03:4f:11:4b:d9:5a:
         90:6e:6c:cc:db:54:19:b6:0e:52:49:ca:22:50:7e:79:21:cf:
         04:b6:78:b7:c5:57:08:b4:52:01:69:85:4e:70:03:9c:8e:7b:
         57:7e:cd:e1:d3:dd:a9:19:25:6e:56:f6:20:b3:ab:9e:a0:f7:
         2a:a5:e1:d2:1e:b8:c7:a3:61:c6:c2:d6:ea:f5:e4:eb:f0:60:
         ae:0b:91:3a:5d:a3:7f:eb:5c:dd:19:ba:ba:15:23:33:56:97:
         09:83:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:56:04 2026 by rpki-client