Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/C6Lmeinygy5w1O9NRlK8-aDw-jk.roa
File:                     C6Lmeinygy5w1O9NRlK8-aDw-jk.roa (raw, json)
Hash identifier:          3LrdbCPbRtcNNH9kUBUbAQtStjoFnipdtCEBdabrTtI=
Subject key identifier:   0B:A2:E6:7A:29:F2:83:2E:70:D4:EF:4D:46:52:BC:F9:A0:F0:FA:39
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       50
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/C6Lmeinygy5w1O9NRlK8-aDw-jk.roa
Signing time:             Tue 19 May 2026 05:19:12 +0000
ROA not before:           Tue 19 May 2026 05:19:12 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        221.114.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 05:19:12 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=0BA2E67A29F2832E70D4EF4D4652BCF9A0F0FA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:d2:fc:4f:ac:45:14:f6:7c:74:26:5e:22:
                    3a:2c:ad:0f:bd:58:57:20:47:14:01:0e:78:cb:5c:
                    14:b4:62:aa:d5:29:f2:c2:62:ae:54:84:46:f4:6a:
                    c2:e6:d2:fb:79:e3:f7:47:d1:2d:51:5d:57:a8:3d:
                    5f:43:fa:aa:6f:74:d9:20:95:c3:9c:8b:bf:ce:e6:
                    01:3d:5f:5f:29:52:38:bf:36:e4:41:f8:a8:68:63:
                    44:62:af:d4:1f:a9:82:f6:54:18:dd:8f:11:a1:91:
                    4f:b7:c4:ce:b0:52:d6:f4:76:98:f7:10:32:11:83:
                    ab:8f:49:63:10:11:b6:8f:fa:b6:5d:d0:2d:d9:bc:
                    0d:bf:da:0e:5c:4d:f2:34:87:50:32:cb:81:75:f1:
                    f6:bd:f9:b3:27:5c:21:55:30:f8:86:17:ed:20:e7:
                    61:75:a3:20:c0:55:b8:f9:39:88:11:bd:30:61:85:
                    ea:56:1c:04:ce:9f:50:4f:b7:62:63:02:79:b7:98:
                    ff:9b:09:0c:e1:3b:23:80:5c:b6:3b:06:0c:3e:79:
                    b1:76:10:a3:36:54:6f:17:35:66:10:ac:eb:1a:6b:
                    2f:32:a6:75:62:85:8e:33:a0:a4:55:2d:3a:f0:46:
                    10:0c:19:1d:1d:15:17:53:f1:64:89:d9:f1:d8:a1:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A2:E6:7A:29:F2:83:2E:70:D4:EF:4D:46:52:BC:F9:A0:F0:FA:39
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/C6Lmeinygy5w1O9NRlK8-aDw-jk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.114.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b4:42:9c:96:3a:61:21:62:f8:79:66:c2:a7:46:39:91:aa:cb:
         1d:78:c9:83:1b:3d:e1:da:e8:c5:e3:9b:d2:cf:f7:54:1d:61:
         61:42:e7:8f:74:71:63:80:18:76:f1:60:4a:6f:dd:5a:b5:6a:
         b6:a4:f1:b1:72:09:3f:94:b2:a7:c2:48:90:58:6d:c2:f9:e8:
         bd:e9:1b:e3:20:e0:6a:5c:99:50:71:56:2f:a4:24:0c:e0:30:
         b3:05:b7:e6:f5:76:bf:f5:29:d9:0c:67:f4:0a:e9:da:5c:b1:
         5e:e2:2b:89:bc:83:30:c8:27:ed:ba:ff:32:4f:63:f0:16:a1:
         68:c4:b6:b2:e7:63:3e:05:c8:d1:0e:f7:bc:24:96:e7:d2:49:
         27:0b:10:5c:8c:d6:53:aa:0e:fb:96:0b:96:ba:79:27:06:0a:
         6d:24:06:08:59:ae:32:6b:82:ec:b7:97:64:b0:d1:e9:b7:28:
         22:32:a5:b9:f6:ed:11:0f:ab:44:1a:e4:4d:33:1d:c1:02:71:
         20:31:62:94:49:40:de:a6:5b:56:cb:29:cc:b5:e5:f3:7b:9b:
         dc:74:8c:95:d6:5b:18:01:74:d9:03:4b:db:35:30:0e:d3:0d:
         62:14:63:03:1f:8a:dd:8a:b9:e2:e6:61:3a:f3:c1:0d:1f:27:
         91:aa:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:47:59 2026 by rpki-client