Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20291/j9NuYoBI0S0SKTvsdOB2ZI2ejV4.roa
File:                     j9NuYoBI0S0SKTvsdOB2ZI2ejV4.roa (raw, json)
Hash identifier:          f/JtlBbuCRA/QXmyv5Vu0SpVKfxhhESGoZunkZVeF9I=
Subject key identifier:   8F:D3:6E:62:80:48:D1:2D:12:29:3B:EC:74:E0:76:64:8D:9E:8D:5E
Certificate issuer:       /CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
Certificate serial:       05
Authority key identifier: 85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/j9NuYoBI0S0SKTvsdOB2ZI2ejV4.roa
Signing time:             Thu 25 Jun 2026 02:47:52 +0000
ROA not before:           Thu 25 Jun 2026 02:47:52 +0000
ROA not after:            Thu 24 Jun 2027 01:12:55 +0000
asID:                     151378
IP address blocks:        163.128.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 06:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=853C4F1EF37C750A48339569E5E67C4573FBAE6E
        Validity
            Not Before: Jun 25 02:47:52 2026 GMT
            Not After : Jun 24 01:12:55 2027 GMT
        Subject: CN=8FD36E628048D12D12293BEC74E076648D9E8D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:64:38:69:21:43:10:b3:21:63:86:17:15:
                    23:c8:f8:3f:69:0f:46:0a:93:86:92:bc:93:f6:e5:
                    bb:7c:0e:d7:76:53:f4:e3:92:e6:b3:24:11:2b:e6:
                    df:cc:d4:39:24:f9:b4:b1:08:0c:97:da:c8:2e:50:
                    80:97:55:d8:40:56:bc:26:8b:a7:59:b4:b6:c3:43:
                    dd:31:26:8d:6d:e6:64:86:19:66:93:a1:50:c5:e1:
                    b1:b5:06:5b:68:07:f2:c3:d5:ad:54:b4:f9:45:d8:
                    e8:62:17:a5:78:74:7a:e1:bb:90:9a:62:fc:6b:14:
                    e6:35:e4:c7:df:af:55:ae:66:48:15:a7:4c:06:64:
                    87:a8:96:bb:f3:55:9e:40:be:e2:1f:1a:c7:a5:77:
                    dd:1f:41:4f:ad:54:4d:be:45:d4:11:b6:51:5e:b8:
                    75:40:b9:c9:48:51:bb:97:95:13:80:6e:94:35:f3:
                    40:bb:99:34:0f:f9:2d:48:01:84:11:0f:0c:8e:74:
                    76:f2:e5:f9:e4:ce:9c:37:d0:f7:45:1b:57:57:94:
                    19:a0:4f:68:79:ab:20:43:0b:d6:bb:ba:47:0c:db:
                    b7:e7:4c:5c:d5:c0:f0:f5:c5:ad:70:ee:a5:2d:24:
                    75:40:a5:5b:9d:dc:5a:20:b8:94:65:23:ab:90:71:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D3:6E:62:80:48:D1:2D:12:29:3B:EC:74:E0:76:64:8D:9E:8D:5E
            X509v3 Authority Key Identifier:
                keyid:85:3C:4F:1E:F3:7C:75:0A:48:33:95:69:E5:E6:7C:45:73:FB:AE:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTxPHvN8dQpIM5Vp5eZ8RXP7rm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20291/j9NuYoBI0S0SKTvsdOB2ZI2ejV4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:c0:7a:0b:9c:08:c9:33:eb:2d:ab:26:59:74:35:d5:25:
         8a:dc:45:2f:fb:40:a9:97:2a:cf:dc:9e:5e:06:4a:a1:95:10:
         41:e8:87:db:8c:41:0e:bc:10:3b:c1:bf:67:a0:8c:eb:02:ac:
         73:61:5e:b7:c3:d4:23:9f:45:b9:1a:1c:2e:68:5d:51:bd:1d:
         0a:5e:aa:1d:3f:c5:d2:24:53:9b:da:bb:b4:16:d9:73:d0:1f:
         81:05:81:b5:29:82:da:dd:30:35:85:56:38:44:e6:37:36:bd:
         dc:f2:15:c4:56:71:50:36:41:6d:0f:df:9a:01:3b:57:60:5d:
         dd:60:3a:7d:3f:a2:37:d4:2e:55:d3:3f:c8:9e:d7:26:07:1c:
         79:c4:f6:fc:f2:b5:f7:36:2e:91:5e:29:57:1b:da:43:67:94:
         2b:7b:f4:62:cf:ad:16:9c:e7:54:9c:13:30:7f:9d:6d:4d:63:
         90:88:b7:a7:c6:60:c5:30:eb:7e:c6:cc:97:31:16:c7:f8:17:
         1d:9a:c5:ca:07:e9:bf:36:d9:8f:35:63:d3:25:9c:51:d0:ac:
         c3:8e:7e:7c:90:74:ae:2b:cb:ff:3f:7e:e7:18:fe:2e:d2:34:
         71:ef:6d:4c:ac:5a:f4:61:44:da:7b:c0:e0:ff:9d:55:ae:b2:
         67:1e:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:20:12 2026 by rpki-client