Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/gEPaq3JpcD2EZvAogDJlnjGhppQ.roa
File:                     gEPaq3JpcD2EZvAogDJlnjGhppQ.roa (raw, json)
Hash identifier:          D5+ArTDSx+ITDNWPhDWXKMT6bSKCw+R9/t3tRiBO7XI=
Subject key identifier:   80:43:DA:AB:72:69:70:3D:84:66:F0:28:80:32:65:9E:31:A1:A6:94
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       63
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gEPaq3JpcD2EZvAogDJlnjGhppQ.roa
Signing time:             Wed 20 May 2026 07:16:21 +0000
ROA not before:           Wed 20 May 2026 07:16:21 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        222.229.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 20 07:16:21 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=8043DAAB7269703D8466F0288032659E31A1A694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:0c:28:df:a5:e0:12:b4:b2:68:5b:18:e5:
                    49:29:29:8a:41:31:31:c2:86:f8:24:06:d3:9c:0b:
                    50:d8:b0:fa:cb:72:ae:38:10:6e:ca:4e:80:5e:ba:
                    5c:aa:80:7d:c6:1b:94:b1:ec:3f:66:dc:6a:25:c9:
                    88:7f:7e:f0:62:e7:65:d9:91:67:a9:9f:90:cc:3b:
                    93:52:59:b8:59:c7:56:6c:5e:2f:7d:33:3b:31:0e:
                    29:72:d1:df:65:a2:90:80:ce:d3:fd:67:e8:81:1c:
                    21:19:04:4c:e8:3e:29:ee:d4:e3:14:35:d1:de:c0:
                    af:47:f1:af:77:a1:f0:1b:58:15:94:04:84:97:c3:
                    13:9f:90:bf:d2:de:b5:d4:19:54:80:e3:76:3e:3c:
                    59:8c:95:bf:16:84:de:d6:35:92:bf:4f:bc:a6:5f:
                    42:5c:fa:37:db:ea:50:31:0b:9c:68:98:5a:bd:db:
                    92:88:6f:aa:5b:d6:63:3a:88:3f:24:ba:b1:0f:b6:
                    2e:14:91:49:cd:50:08:21:53:3a:be:f7:d2:6b:2a:
                    d7:68:fd:ba:bd:27:25:81:c6:45:bf:69:ec:29:ab:
                    68:0d:59:d5:82:5d:b7:38:66:3a:93:49:b7:4e:73:
                    7e:ee:ae:85:a8:24:0a:48:d6:34:1d:41:88:80:0c:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:43:DA:AB:72:69:70:3D:84:66:F0:28:80:32:65:9E:31:A1:A6:94
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gEPaq3JpcD2EZvAogDJlnjGhppQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.229.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c5:a1:fe:22:4d:f9:30:99:e4:92:90:6d:ba:bd:28:b3:b4:ec:
         07:3b:54:b6:ac:27:05:95:4d:f5:cb:78:4a:cc:18:1f:b7:6a:
         cc:2d:64:59:a5:f2:dd:ee:52:1c:54:86:93:e5:ef:4c:d3:f7:
         0e:6e:98:48:36:a7:d0:01:52:cb:fa:e6:d6:6a:73:be:f5:fb:
         4c:2f:27:33:53:db:99:75:37:5b:33:66:7d:f0:13:ef:7b:11:
         d4:44:d6:c5:3a:8d:dc:1c:3b:a8:75:a8:4d:ad:90:fe:ce:e5:
         57:34:8b:d0:23:74:95:3b:11:34:cd:6b:9e:c4:a4:a6:12:e7:
         2f:23:4f:37:f1:d4:33:a1:fc:b2:7c:2c:4d:8f:72:88:2c:94:
         38:0d:b7:e3:55:4b:c9:f7:6c:32:d4:c7:02:98:8b:47:46:5a:
         72:13:83:5c:a3:7f:0e:45:4a:25:7e:27:35:0d:d0:f6:86:55:
         b7:cc:d9:34:e8:a7:a9:c4:c0:9c:86:f0:aa:c3:e6:f0:17:98:
         ca:59:8e:9d:f1:57:d4:b8:50:33:a1:e1:15:a9:b3:84:b3:d6:
         50:ae:46:e8:c9:0e:96:12:0f:52:41:a0:f1:91:68:d8:83:a9:
         be:8b:b4:7c:20:f3:ff:74:65:13:77:e6:d7:c2:20:bd:a0:06:
         c4:55:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:06 2026 by rpki-client