Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/M-6sqjRaSV1vppAc6BleZJNXLQA.roa
File:                     M-6sqjRaSV1vppAc6BleZJNXLQA.roa (raw, json)
Hash identifier:          x07qprSng/Ku8IwL+AwcsHBGd2gtKxuyRCTcoXMDm+c=
Subject key identifier:   33:EE:AC:AA:34:5A:49:5D:6F:A6:90:1C:E8:19:5E:64:93:57:2D:00
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       A4
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/M-6sqjRaSV1vppAc6BleZJNXLQA.roa
Signing time:             Wed 29 Jul 2026 06:17:37 +0000
ROA not before:           Wed 29 Jul 2026 06:17:37 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        122.103.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 06:17:37 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=33EEACAA345A495D6FA6901CE8195E6493572D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:34:43:33:3a:d2:c8:9f:fd:c7:a5:e9:f5:
                    72:f9:c9:9d:d9:71:49:9a:6c:f2:7c:74:5a:82:5a:
                    a8:a8:8b:7d:9e:b2:31:ef:57:96:6c:54:35:51:83:
                    e9:35:c9:74:37:0b:05:da:74:81:a9:14:7a:54:52:
                    ff:12:97:9e:8d:12:0d:db:54:82:7c:d3:e6:46:3f:
                    eb:83:4b:80:03:b3:e1:de:c1:b1:b9:a0:7e:66:7f:
                    8d:98:90:5d:21:46:b4:fa:15:3b:83:cd:1e:6a:f4:
                    f5:27:40:2d:c9:3e:78:06:ba:f5:a1:f6:c7:35:71:
                    a0:6b:ec:04:0a:95:93:66:b2:48:92:d5:d0:c8:91:
                    de:cf:5d:31:5a:51:61:1b:e0:a6:77:cd:69:ec:e3:
                    4b:28:38:e3:26:12:9a:f5:4d:87:2a:78:04:44:c7:
                    19:4c:cf:27:5d:5b:f6:a0:3f:59:e2:8e:a1:bb:ea:
                    02:90:af:38:72:e8:f1:a0:8f:17:5e:57:54:40:3c:
                    d5:12:19:89:c0:e0:d8:23:e8:f2:98:f8:49:35:71:
                    3b:8e:44:c3:1c:6e:18:af:07:1b:d2:3a:90:7e:95:
                    3b:cd:f7:e5:0e:a4:15:a2:6b:7d:a3:7b:b4:90:9e:
                    6c:70:b0:e1:6e:8a:57:1e:6a:6a:f9:e3:c7:83:ff:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:AC:AA:34:5A:49:5D:6F:A6:90:1C:E8:19:5E:64:93:57:2D:00
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/M-6sqjRaSV1vppAc6BleZJNXLQA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.103.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:37:86:f1:79:83:69:3b:b8:c4:ed:71:26:b0:81:17:f7:
         6c:99:a0:8c:a7:35:d2:08:f3:5b:f2:fc:f2:aa:10:a1:a1:e7:
         66:30:1e:57:40:5e:77:f9:83:d6:1d:c9:b1:f4:9a:2b:58:22:
         ef:44:a6:96:ef:31:fd:d8:df:49:30:2f:49:6e:54:42:2a:6a:
         8e:02:b4:ba:11:a8:2d:bd:9a:d0:4e:cd:2d:ad:8d:7e:ca:c7:
         6c:45:3c:e2:c9:c6:40:3c:bf:b7:8a:9c:41:ee:f8:bc:9f:58:
         30:ad:a0:54:49:b7:1e:0f:5d:9f:33:3e:59:d6:4f:dd:87:fd:
         95:20:b8:54:0c:4b:f7:82:71:d1:55:2a:2c:20:16:32:26:95:
         ad:91:86:d4:30:eb:7c:a4:f4:1e:c1:5b:12:61:51:18:8a:19:
         16:ff:3c:75:8c:ec:73:94:d1:3b:2c:b0:8b:f2:2e:2c:86:e5:
         87:2d:7b:b3:59:40:2a:28:ea:c9:56:ea:7b:45:ce:e5:ef:90:
         e0:80:7f:12:42:df:71:01:cd:35:fc:6e:76:83:c6:c9:02:71:
         f8:10:36:67:be:67:4e:40:77:fd:e4:ae:6b:88:fa:6e:64:14:
         f3:80:e8:87:e5:c2:87:05:3a:d5:14:0a:85:6d:ec:dd:33:57:
         41:8d:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:15 2026 by rpki-client