Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/_OK4MJ_XzHpre32kM8UflrC9aeE.roa
File:                     _OK4MJ_XzHpre32kM8UflrC9aeE.roa (raw, json)
Hash identifier:          IRByItYs+KxMM16f/syrpVpYljv5R617PIBhqIu4L8k=
Subject key identifier:   FC:E2:B8:30:9F:D7:CC:7A:6B:7B:7D:A4:33:C5:1F:96:B0:BD:69:E1
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       7D
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/_OK4MJ_XzHpre32kM8UflrC9aeE.roa
Signing time:             Tue 30 Jun 2026 01:19:35 +0000
ROA not before:           Tue 30 Jun 2026 01:19:35 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        58.4.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun 30 01:19:35 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=FCE2B8309FD7CC7A6B7B7DA433C51F96B0BD69E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:f9:35:41:a4:d7:4e:cc:0b:fe:4c:34:e1:
                    62:9a:31:e9:f5:e2:e5:ee:9a:84:23:0b:00:c7:0b:
                    ea:4a:78:d7:27:6f:9d:0a:29:58:d1:a5:a5:0e:13:
                    1f:0e:8e:b6:19:93:61:f9:d8:af:40:f1:d2:f4:4d:
                    12:e0:90:52:96:a2:d6:48:d4:0e:37:a8:e4:b5:dc:
                    b9:33:52:94:1c:e1:c1:d4:86:1b:16:49:67:41:08:
                    76:b7:04:a4:90:39:15:34:e5:55:cb:98:80:93:8f:
                    85:71:aa:b1:bb:c1:e4:66:a7:4a:4b:b6:a0:ca:86:
                    a4:5f:d4:7c:8e:4b:c1:ab:0f:d5:3b:02:3b:46:71:
                    00:a4:99:32:49:b1:6a:e4:e6:8d:4e:dd:3a:ab:a6:
                    a9:95:83:22:b6:37:4a:2d:64:53:1b:df:6d:58:8e:
                    7b:d2:5f:f5:67:f4:fe:0a:e1:44:a8:34:e0:87:9f:
                    eb:b5:30:77:81:49:96:21:c0:ae:fa:55:9e:70:8d:
                    dd:a0:21:1d:c5:9d:91:0b:c3:a3:c4:a5:22:0b:f3:
                    68:43:39:a4:bc:6b:54:bf:15:94:43:9b:01:69:31:
                    49:41:c3:e0:58:02:2f:0b:b8:3d:18:ec:c6:b4:5b:
                    2c:0f:ff:0f:0c:59:c2:95:0d:18:ee:13:26:be:c4:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E2:B8:30:9F:D7:CC:7A:6B:7B:7D:A4:33:C5:1F:96:B0:BD:69:E1
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/_OK4MJ_XzHpre32kM8UflrC9aeE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.4.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b7:1f:d6:b3:75:f1:0a:aa:92:9e:d6:33:57:87:5a:cd:5e:8b:
         02:2f:d2:1d:6d:a3:90:29:24:8e:43:87:b9:9a:eb:10:fa:9c:
         27:ec:11:37:2a:cb:4c:7c:d6:44:88:f6:f6:39:4e:56:7e:29:
         7f:f2:41:76:3e:9d:03:65:06:8a:51:aa:4c:a7:39:2b:0f:79:
         7c:f1:cb:fe:d7:5c:be:0a:f2:cc:f3:f7:dc:42:6e:12:8e:96:
         75:31:ee:0c:d4:82:09:2a:43:0c:6b:50:51:8f:e8:a6:8a:97:
         5c:7a:71:d9:4a:1a:0f:cc:8f:af:39:df:f3:dc:7a:7c:14:5e:
         e1:9b:bf:b4:46:ac:fb:2c:ee:b3:09:2a:b0:64:d4:e0:08:ea:
         78:79:7a:0e:c9:cf:53:5e:b3:92:87:8e:7f:39:28:dc:f1:a8:
         12:84:3b:ad:f0:5a:6f:1b:a1:7d:79:9a:1a:33:f6:20:da:7a:
         84:fc:92:8c:d3:78:ea:77:2d:cf:25:2f:71:ce:9c:05:0a:c5:
         62:80:c6:65:69:8f:75:55:47:99:0a:02:af:49:32:58:0e:04:
         8e:3f:b9:2a:fa:62:ed:75:65:10:60:67:ed:70:c5:33:b4:dc:
         a3:7d:df:e5:6c:dc:3d:e7:ae:18:f7:f6:4a:05:7d:5a:f0:5a:
         bc:76:1b:de
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDYzMDAx
MTkzNVoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRkNFMkI4MzA5RkQ3Q0M3
QTZCN0I3REE0MzNDNTFGOTZCMEJENjlFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJNC+TVBpNdOzAv+TDThYpox6fXi5e6ahCMLAMcL6kp41ydvnQop
WNGlpQ4THw6OthmTYfnYr0Dx0vRNEuCQUpai1kjUDjeo5LXcuTNSlBzhwdSGGxZJ
Z0EIdrcEpJA5FTTlVcuYgJOPhXGqsbvB5GanSku2oMqGpF/UfI5LwasP1TsCO0Zx
AKSZMkmxauTmjU7dOqumqZWDIrY3Si1kUxvfbViOe9Jf9Wf0/grhRKg04Ief67Uw
d4FJliHArvpVnnCN3aAhHcWdkQvDo8SlIgvzaEM5pLxrVL8VlEObAWkxSUHD4FgC
Lwu4PRjsxrRbLA//DwxZwpUNGO4TJr7El/8CAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBT84rgwn9fMemt7faQzxR+WsL1p4TAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvX09LNE1KX1h6SHByZTMya004VWZsckM5YWVFLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAToEMA0GCSqGSIb3DQEBCwUAA4IBAQC3
H9azdfEKqpKe1jNXh1rNXosCL9IdbaOQKSSOQ4e5musQ+pwn7BE3KstMfNZEiPb2
OU5Wfil/8kF2Pp0DZQaKUapMpzkrD3l88cv+11y+CvLM8/fcQm4SjpZ1Me4M1IIJ
KkMMa1BRj+imipdcenHZShoPzI+vOd/z3Hp8FF7hm7+0Rqz7LO6zCSqwZNTgCOp4
eXoOyc9TXrOSh45/OSjc8agShDut8FpvG6F9eZoaM/Yg2nqE/JKM03jqdy3PJS9x
zpwFCsVigMZlaY91VUeZCgKvSTJYDgSOP7kq+mLtdWUQYGftcMUztNyjfd/lbNw9
564Y9/ZKBX1a8Fq8dhve
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client