Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/d6KWcqPnovBw9P0uvH9ZX0b2C6Y.roa
File:                     d6KWcqPnovBw9P0uvH9ZX0b2C6Y.roa (raw, json)
Hash identifier:          XZp6h8jADrIj2K/snp0QGbgwKL1MN8YHjLnCRp8bLDA=
Subject key identifier:   77:A2:96:72:A3:E7:A2:F0:70:F4:FD:2E:BC:7F:59:5F:46:F6:0B:A6
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       4C
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/d6KWcqPnovBw9P0uvH9ZX0b2C6Y.roa
Signing time:             Tue 19 May 2026 04:55:08 +0000
ROA not before:           Tue 19 May 2026 04:55:08 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        219.123.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 19 04:55:08 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=77A29672A3E7A2F070F4FD2EBC7F595F46F60BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:30:e4:1b:b8:e8:3d:a5:9c:ec:6f:83:90:
                    9d:01:91:f0:97:db:9a:77:7d:65:d6:e4:0f:28:49:
                    8f:8f:4c:2d:dc:28:e2:d7:1a:3a:94:9c:c1:3e:74:
                    89:f7:1c:e3:23:7c:63:3e:33:19:6c:4f:19:f9:95:
                    f3:c8:77:c0:e5:d1:c3:02:c9:63:0d:a6:5d:8e:0c:
                    df:a7:77:5d:7d:6e:52:a7:97:7d:0f:5d:84:22:1f:
                    82:ff:f5:e4:be:ec:ce:99:77:05:2c:57:69:2b:87:
                    f4:dc:44:c1:0a:70:fc:df:92:4b:8b:91:31:ad:72:
                    52:3c:5e:14:cc:8a:e7:54:99:f7:e6:c0:db:a8:48:
                    8a:59:fa:9f:96:e0:81:f3:f0:c0:30:5e:96:31:83:
                    c9:23:54:0f:29:5c:46:b1:13:5d:e1:c9:40:30:21:
                    25:c1:03:c6:e2:76:a4:d3:f0:13:01:cf:db:b8:c3:
                    17:6a:fc:b8:43:c6:44:ed:6b:ee:b4:89:fa:e9:d9:
                    e1:db:02:07:48:97:a7:42:21:2f:e3:6f:af:fc:5b:
                    0f:59:71:6e:9d:34:09:0d:a5:ab:da:ce:59:a9:8c:
                    8f:da:a8:3a:e3:60:dc:8e:cf:a2:5c:a8:98:6d:1e:
                    e8:89:fb:ed:6c:30:43:96:fc:76:72:4f:7e:27:4e:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A2:96:72:A3:E7:A2:F0:70:F4:FD:2E:BC:7F:59:5F:46:F6:0B:A6
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/d6KWcqPnovBw9P0uvH9ZX0b2C6Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:97:c4:e4:ea:d6:2b:0b:60:a7:0d:9d:ff:be:50:4f:8d:
         67:72:75:5f:9a:b8:33:34:79:c8:5d:cd:b6:59:c4:43:75:10:
         f4:3c:df:8b:fb:89:cb:65:f9:bf:1e:40:0e:29:e6:f2:ab:ac:
         b1:62:ac:b9:78:24:85:62:b8:73:de:bc:5b:78:46:f7:e7:f4:
         46:d2:f0:f3:67:e5:39:60:10:fb:a8:a1:d2:e8:7a:01:17:fa:
         b8:7b:c1:de:82:ed:f5:46:50:94:31:d3:eb:ac:fc:22:67:0e:
         b7:03:c7:d2:91:55:ae:53:1e:91:ef:72:f9:f1:4b:dc:7f:b1:
         55:bf:16:bd:46:b2:07:59:0f:e6:ef:fe:a3:91:45:31:9a:4f:
         a2:0b:76:44:b0:79:4f:05:f8:50:e6:34:c1:63:44:76:5d:df:
         44:69:20:d7:8f:71:52:ad:22:73:26:60:2a:de:b3:7b:61:7d:
         40:6c:a9:33:fe:66:cf:69:42:2b:74:ad:45:64:6c:4b:42:f6:
         4c:c6:d2:20:5c:24:ca:d1:f7:0b:b2:77:26:57:26:a7:8f:c2:
         f2:88:7d:77:30:70:f1:57:82:ab:a1:4f:9e:e3:38:ef:d1:33:
         2d:f9:59:24:00:14:00:45:31:75:97:d5:94:e0:8c:22:5a:d4:
         b1:7f:a9:36
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTA0
NTUwOFoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNzdBMjk2NzJBM0U3QTJG
MDcwRjRGRDJFQkM3RjU5NUY0NkY2MEJBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMBsMOQbuOg9pZzsb4OQnQGR8Jfbmnd9ZdbkDyhJj49MLdwo4tca
OpScwT50ifcc4yN8Yz4zGWxPGfmV88h3wOXRwwLJYw2mXY4M36d3XX1uUqeXfQ9d
hCIfgv/15L7szpl3BSxXaSuH9NxEwQpw/N+SS4uRMa1yUjxeFMyK51SZ9+bA26hI
iln6n5bggfPwwDBeljGDySNUDylcRrETXeHJQDAhJcEDxuJ2pNPwEwHP27jDF2r8
uEPGRO1r7rSJ+unZ4dsCB0iXp0IhL+Nvr/xbD1lxbp00CQ2lq9rOWamMj9qoOuNg
3I7PolyomG0e6In77WwwQ5b8dnJPfidOkRMCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBR3opZyo+ei8HD0/S68f1lfRvYLpjAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvZDZLV2NxUG5vdkJ3OVAwdXZIOVpYMGIyQzZZLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANt7MA0GCSqGSIb3DQEBCwUAA4IBAQAv
gpfE5OrWKwtgpw2d/75QT41ncnVfmrgzNHnIXc22WcRDdRD0PN+L+4nLZfm/HkAO
Kebyq6yxYqy5eCSFYrhz3rxbeEb35/RG0vDzZ+U5YBD7qKHS6HoBF/q4e8Hegu31
RlCUMdPrrPwiZw63A8fSkVWuUx6R73L58Uvcf7FVvxa9RrIHWQ/m7/6jkUUxmk+i
C3ZEsHlPBfhQ5jTBY0R2Xd9EaSDXj3FSrSJzJmAq3rN7YX1AbKkz/mbPaUIrdK1F
ZGxLQvZMxtIgXCTK0fcLsncmVyanj8LyiH13MHDxV4KroU+e4zjv0TMt+VkkABQA
RTF1l9WU4IwiWtSxf6k2
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:09 2026 by rpki-client