Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/dv1Y1eHHTyB0yn-AKUUQhb04_E4.roa
File:                     dv1Y1eHHTyB0yn-AKUUQhb04_E4.roa (raw, json)
Hash identifier:          AQTIPohIRQ83HsOwuxhn1Lvv59CXD9hsx2pAQQBjBFg=
Subject key identifier:   76:FD:58:D5:E1:C7:4F:20:74:CA:7F:80:29:45:10:85:BD:38:FC:4E
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       88
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/dv1Y1eHHTyB0yn-AKUUQhb04_E4.roa
Signing time:             Tue 30 Jun 2026 02:07:44 +0000
ROA not before:           Tue 30 Jun 2026 02:07:44 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.91.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun 30 02:07:44 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=76FD58D5E1C74F2074CA7F8029451085BD38FC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:78:12:ca:97:90:85:96:4d:dc:6f:e3:8e:
                    49:ae:99:c1:37:aa:08:3d:99:b4:47:b1:bc:56:75:
                    34:31:d8:21:1a:dd:ab:d3:75:27:e4:f1:3f:bc:84:
                    90:0e:da:78:fd:f5:f2:33:35:49:5a:6b:00:54:f8:
                    85:21:0a:3a:c1:41:2d:1a:7b:e3:3d:13:9c:a8:2c:
                    a2:ed:f0:9f:44:40:63:91:b8:07:a9:9e:a8:79:a9:
                    bf:75:9e:58:5b:25:fd:d8:d5:32:71:5f:e3:5b:f0:
                    f2:40:00:c0:ea:0a:ac:24:ef:bc:3d:54:a5:79:ae:
                    48:14:8a:4b:cb:de:58:56:a1:da:21:26:b2:cc:f0:
                    c2:59:c0:84:3d:19:07:ab:4b:39:9e:cf:d3:62:ed:
                    fe:47:f3:d9:d7:c0:7b:ab:f0:93:74:1b:57:c5:38:
                    da:b5:b6:d9:57:9a:95:2a:8f:65:b0:5e:83:75:f6:
                    57:46:fa:85:04:65:86:28:b4:ce:a4:0b:c8:0b:52:
                    49:50:c7:34:e2:ea:67:81:4d:14:3b:d9:6a:49:1a:
                    cc:89:ef:eb:fe:fd:f0:56:60:95:3b:2b:7b:38:69:
                    ca:0a:b1:11:ce:de:c4:67:45:5f:10:42:af:d3:8d:
                    36:d6:5c:ed:de:95:00:ed:ba:c6:e1:0c:f8:a2:e7:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:58:D5:E1:C7:4F:20:74:CA:7F:80:29:45:10:85:BD:38:FC:4E
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/dv1Y1eHHTyB0yn-AKUUQhb04_E4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:ff:11:b1:bb:87:83:5f:8f:dd:91:8d:99:8d:ed:9f:ea:
         e7:39:ed:6b:cb:07:8f:d7:55:22:f2:92:84:00:42:bd:92:35:
         26:6a:75:64:77:57:7c:fc:39:5d:aa:c6:9e:9b:85:bf:46:12:
         c1:0f:bc:a6:55:8a:83:94:81:a7:00:72:e1:de:3e:d7:f1:52:
         67:05:57:c4:24:9a:f2:73:50:50:7e:54:9b:bc:35:a9:59:49:
         14:2d:ad:60:dd:cc:fd:68:5b:2a:b6:96:99:07:45:6d:91:8d:
         f9:92:d6:06:e9:25:86:04:61:64:e6:b0:a3:e2:d0:22:da:ce:
         79:34:35:d3:da:c5:a8:8a:bc:02:51:41:85:30:ed:38:74:fa:
         a6:70:e8:9a:16:9f:d1:ad:e6:58:d4:27:13:55:38:d9:af:97:
         1a:f8:6f:2b:1f:f8:04:d5:a6:16:2f:2a:d5:98:0e:e4:5d:e4:
         67:83:6c:6c:1c:33:d5:29:d5:32:5e:a7:d6:f2:93:eb:95:04:
         12:da:d6:73:47:08:6d:c3:10:4c:1f:ba:83:0a:dd:79:74:51:
         55:49:74:7e:d9:bc:af:41:07:38:b1:59:81:90:d4:ce:7e:28:
         6b:e1:24:e4:77:40:6c:1c:07:43:f6:53:5f:5e:30:38:92:47:
         69:32:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:19 2026 by rpki-client