Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/7ooqjBtgS6lQ60cynYcLD5ANMg0.roa
File:                     7ooqjBtgS6lQ60cynYcLD5ANMg0.roa (raw, json)
Hash identifier:          zb5hYLqeyX84Kfq6oCBTzvIQSw5dZNKVeVvCZjyqY9k=
Subject key identifier:   EE:8A:2A:8C:1B:60:4B:A9:50:EB:47:32:9D:87:0B:0F:90:0D:32:0D
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       9F
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/7ooqjBtgS6lQ60cynYcLD5ANMg0.roa
Signing time:             Wed 29 Jul 2026 02:51:44 +0000
ROA not before:           Wed 29 Jul 2026 02:51:44 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        133.32.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 02:51:44 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=EE8A2A8C1B604BA950EB47329D870B0F900D320D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:9b:c2:83:51:0c:83:2c:7c:52:db:71:a0:
                    90:53:a2:cc:e0:2c:57:fb:14:7f:c0:f5:0f:07:4f:
                    f9:5a:af:c7:26:0e:39:68:6a:c7:6a:a7:45:f0:9a:
                    89:6b:d7:c2:2e:a3:8e:e4:35:05:d0:de:4a:0a:eb:
                    0c:e8:ce:3b:7f:6c:98:d0:9d:64:e5:1c:e8:41:4e:
                    7d:67:f1:46:21:b0:06:08:15:d2:c0:e8:84:c0:17:
                    22:9b:c7:7e:d8:55:81:35:8b:c3:9b:68:23:1f:47:
                    56:1f:42:e5:75:3d:e2:5d:d2:24:fb:4c:1c:8a:6c:
                    91:d5:c1:58:b9:d9:21:e2:6a:54:0d:15:10:cd:c8:
                    fb:a3:b8:96:17:59:8b:38:1b:ca:83:11:58:0c:34:
                    ea:e0:c7:78:47:b6:39:61:3d:19:8f:a5:fa:34:a9:
                    07:11:52:74:ed:7a:bf:75:2e:74:37:88:73:40:04:
                    e8:94:0f:04:43:39:04:4e:eb:a6:1e:a7:fc:2d:c4:
                    df:a5:49:e0:0c:ae:69:8d:cf:cb:f2:bd:01:02:54:
                    94:ca:7c:31:52:dc:ef:a5:fb:62:6c:fc:39:b8:32:
                    0a:26:a2:2f:f7:ca:18:97:08:7d:8b:f7:36:88:74:
                    49:88:16:9d:65:2d:88:bf:22:af:e1:ea:e4:f5:68:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8A:2A:8C:1B:60:4B:A9:50:EB:47:32:9D:87:0B:0F:90:0D:32:0D
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/7ooqjBtgS6lQ60cynYcLD5ANMg0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:45:31:4e:86:fe:26:87:e1:89:84:62:c6:de:65:47:17:
         94:05:d1:4c:41:76:fb:52:4e:08:4b:df:10:d8:e6:22:3e:1b:
         96:2a:28:20:d1:3b:5b:d8:1b:5e:b8:33:ee:9e:e6:d8:a9:42:
         38:9e:3c:60:ee:6f:58:2a:2c:0d:d4:10:3b:03:e6:b3:e8:35:
         37:96:63:e1:f0:1c:f6:66:cb:1e:26:2c:28:47:d9:ff:cc:26:
         57:38:15:17:a3:ec:1a:e6:cd:15:e2:2b:1b:31:59:7b:4d:25:
         fa:b5:0a:d9:c8:58:91:19:5a:43:e2:47:a0:f0:04:6d:01:75:
         52:10:a2:d5:79:2d:3f:5a:29:34:81:18:dd:80:b6:1d:5d:62:
         71:d6:e1:f8:bf:f0:ab:95:c2:b6:4d:1a:85:a0:b5:e2:96:13:
         45:4f:4a:1f:33:ad:fb:16:8a:4e:3d:74:df:a8:2d:7f:c2:51:
         82:fb:ce:16:dc:ff:65:1b:2e:df:b5:e4:07:dc:9e:6f:45:f6:
         d6:01:79:d7:e2:52:78:f5:d1:3b:95:b0:89:15:1d:a9:d7:a4:
         23:b7:81:a9:b8:c4:6f:ba:d5:5e:83:c1:34:07:ed:61:a1:9f:
         ff:f3:3a:7f:58:3b:e3:b2:a2:bc:07:63:bf:c9:ca:fa:a7:64:
         d5:63:5d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:42:32 2026 by rpki-client