Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/423/8eoGPjT6wpdKiJOJVUQ2LkrvWO0.roa
File:                     8eoGPjT6wpdKiJOJVUQ2LkrvWO0.roa (raw, json)
Hash identifier:          19xvS0ezjshctscFm8soHbet8pkaTCsxMUdth0wZNqY=
Subject key identifier:   F1:EA:06:3E:34:FA:C2:97:4A:88:93:89:55:44:36:2E:4A:EF:58:ED
Certificate issuer:       /CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
Certificate serial:       11
Authority key identifier: 2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/8eoGPjT6wpdKiJOJVUQ2LkrvWO0.roa
Signing time:             Thu 18 Jun 2026 04:52:25 +0000
ROA not before:           Thu 18 Jun 2026 04:52:25 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9999
IP address blocks:        119.59.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
        Validity
            Not Before: Jun 18 04:52:25 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=F1EA063E34FAC2974A8893895544362E4AEF58ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:da:66:fd:64:ff:f5:7e:57:2b:d1:41:3c:
                    c0:cd:21:96:79:8f:04:ef:f8:8c:20:58:9b:68:57:
                    48:1b:39:26:e9:87:34:4b:a4:8f:b0:06:e1:a8:1f:
                    00:21:7e:00:ae:3e:69:52:da:81:1f:11:bb:09:a8:
                    20:c1:aa:e1:f7:88:e2:97:98:67:46:2e:8a:e6:0c:
                    46:16:91:50:0e:bb:6c:ae:0a:e0:1e:49:f4:68:f4:
                    25:0d:61:cb:9a:2c:3e:7f:8a:5d:31:91:85:1a:57:
                    d0:9e:08:58:66:9c:b8:50:aa:28:07:9c:ec:f0:e7:
                    54:19:b9:15:e8:ed:a8:fb:ff:a2:dc:be:3a:99:ed:
                    ee:99:47:16:33:df:fc:4c:ee:cc:af:41:5b:4f:81:
                    a6:a3:df:27:4a:da:1f:52:88:31:f7:71:5c:09:f2:
                    51:f4:c1:19:9e:1d:b3:ab:5b:16:5f:26:01:4c:e6:
                    ae:3c:d3:32:37:67:37:6e:07:b5:b5:07:dc:5e:ac:
                    b8:dc:d5:5c:91:47:bc:e6:32:53:e4:5e:83:7b:fc:
                    39:27:d1:cd:0e:7c:59:d2:aa:c1:33:36:b8:cb:a2:
                    d6:26:3b:a0:1a:12:55:26:d1:6c:8c:8f:ff:fa:7c:
                    8c:51:c9:10:d5:32:8b:d6:5c:dc:0f:46:15:e1:62:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EA:06:3E:34:FA:C2:97:4A:88:93:89:55:44:36:2E:4A:EF:58:ED
            X509v3 Authority Key Identifier:
                keyid:2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/8eoGPjT6wpdKiJOJVUQ2LkrvWO0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:83:c3:f8:f6:06:c2:22:22:e7:8e:72:f9:3d:c5:56:0c:
         47:08:91:1a:af:cb:3f:ce:96:74:e5:be:cb:bc:8f:07:27:a2:
         23:33:1c:0b:a7:23:84:2f:3c:08:f6:1e:d5:44:52:c8:b3:2a:
         46:db:30:66:b2:d5:1d:c9:05:ae:17:66:b9:a2:13:8a:3e:91:
         06:49:b9:df:96:52:0c:ff:48:45:62:1f:2f:22:83:3e:6b:fa:
         db:56:30:e4:19:06:7a:fb:6c:b8:92:dc:17:2d:d1:85:99:6c:
         91:d5:b4:c0:60:73:4d:7b:92:16:86:7e:27:e3:ec:87:b9:12:
         67:a9:a6:8f:95:c9:d4:14:1a:76:25:c5:cc:b4:16:d1:75:ff:
         bb:be:79:62:5f:68:a8:0f:e1:24:08:d3:27:39:61:e6:ae:38:
         a5:bd:c6:60:dd:44:ed:1a:71:07:af:a9:4c:ed:02:f4:c4:17:
         4f:c2:24:69:e6:ae:62:98:95:c3:1a:5f:cf:49:fb:03:9b:a2:
         0b:92:53:a9:27:63:4f:0f:02:aa:9b:be:64:76:71:a6:d2:ad:
         b8:31:bf:b2:65:62:d8:98:a4:cd:ea:24:3d:2d:dd:f2:a1:dd:
         5b:cc:68:4f:80:88:52:44:8c:94:b5:8b:3d:6b:eb:8c:61:ff:
         46:60:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:25 2026 by rpki-client