Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/K95GQ_LeOTtgYXSzNHwDMpcpPnU.roa
File:                     K95GQ_LeOTtgYXSzNHwDMpcpPnU.roa (raw, json)
Hash identifier:          0SyKvp4StC9Do2FEjA10W3KFospyjonvAtkjc6DO7+g=
Subject key identifier:   2B:DE:46:43:F2:DE:39:3B:60:61:74:B3:34:7C:03:32:97:29:3E:75
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       A5
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/K95GQ_LeOTtgYXSzNHwDMpcpPnU.roa
Signing time:             Wed 29 Jul 2026 06:25:43 +0000
ROA not before:           Wed 29 Jul 2026 06:25:43 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        122.216.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 06:25:43 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=2BDE4643F2DE393B606174B3347C033297293E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:a9:5a:17:ea:15:75:3a:0e:b1:d4:e4:a9:
                    9a:9e:8a:c7:5c:54:9e:21:d2:4a:af:b5:81:4f:23:
                    63:61:1e:da:65:d8:04:2d:e6:f9:a1:f9:f7:6e:13:
                    b2:ee:09:0d:c8:4d:52:03:e4:43:bb:67:fb:fe:90:
                    0b:ad:0a:5a:e3:64:15:59:04:77:32:22:d8:2c:14:
                    f9:7d:8e:ab:85:e3:8c:38:f8:14:55:70:17:b1:44:
                    98:b7:18:f4:66:c7:11:f8:a6:c4:4b:fa:ec:6c:84:
                    78:55:1e:06:df:24:fa:de:ea:e8:71:8c:40:73:df:
                    e1:78:66:ef:37:84:1a:81:e0:3b:45:36:a6:e1:e3:
                    26:e7:db:0f:fe:37:ec:6d:bf:cc:b9:4f:96:57:22:
                    0e:73:e3:3c:ee:c8:94:be:7a:db:7c:c8:7d:25:95:
                    a1:80:41:07:6f:97:57:31:4c:f3:12:58:26:08:97:
                    9f:ab:07:50:6b:16:55:86:b6:12:34:49:c2:0d:2e:
                    12:18:d0:42:d0:1e:2c:28:81:6b:14:f1:f4:79:f5:
                    43:74:57:ad:34:e4:db:19:93:3f:3c:23:88:08:d8:
                    ef:33:9b:8c:65:80:24:fb:9b:2d:ab:d1:30:9a:a7:
                    62:a3:04:07:c4:91:07:9e:b5:8f:8b:9f:dd:23:86:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DE:46:43:F2:DE:39:3B:60:61:74:B3:34:7C:03:32:97:29:3E:75
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/K95GQ_LeOTtgYXSzNHwDMpcpPnU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:53:13:c8:78:33:4f:b9:bd:21:6b:70:d1:99:40:91:2f:
         56:91:34:f9:34:11:fa:32:06:20:50:a5:91:81:e9:31:8d:c5:
         55:a8:03:75:9a:7c:41:ee:a4:95:76:f9:91:28:79:6c:ca:58:
         bd:23:fb:f5:5d:30:8d:ce:7f:1b:1e:02:0e:65:85:59:97:45:
         b8:a8:dd:dd:61:7c:d0:50:ae:86:a9:98:38:ae:b3:e4:ba:db:
         e4:f6:50:18:21:03:69:21:73:d3:dc:5d:89:fa:69:a9:68:74:
         c4:f2:16:eb:25:1c:ec:cf:f7:da:cb:2f:bb:3c:c8:13:c5:7d:
         40:eb:87:9f:eb:e1:84:d4:27:63:d0:50:92:24:f9:bf:2b:fc:
         87:a0:23:4e:f6:c4:21:49:26:99:b3:e6:b3:bd:86:13:65:b4:
         7f:1b:47:f2:6d:c2:7f:fe:c9:93:34:05:e5:aa:a0:ef:fe:89:
         34:3c:8b:21:c7:5b:cb:6d:47:60:8b:fc:c9:6a:9b:31:64:4c:
         6b:af:1f:ad:c1:9c:09:a9:0b:19:a2:f4:0f:9c:19:f8:b0:b1:
         77:b1:fb:bd:9d:96:75:72:13:50:a1:6e:9e:ae:46:c4:7c:98:
         b0:a3:ae:e8:c7:64:36:85:f2:f9:e8:34:36:89:90:a1:fc:07:
         de:f4:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:34:39 2026 by rpki-client