Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/hOzyHC50YmZXV0WynhuFjQLPqKg.roa
File:                     hOzyHC50YmZXV0WynhuFjQLPqKg.roa (raw, json)
Hash identifier:          7PdbAU6lJAfgZHR81HE5AisyLRITAM96bhsQt8wGYFI=
Subject key identifier:   84:EC:F2:1C:2E:74:62:66:57:57:45:B2:9E:1B:85:8D:02:CF:A8:A8
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       76
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/hOzyHC50YmZXV0WynhuFjQLPqKg.roa
Signing time:             Mon 29 Jun 2026 04:43:04 +0000
ROA not before:           Mon 29 Jun 2026 04:43:04 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        36.2.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun 29 04:43:04 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=84ECF21C2E746266575745B29E1B858D02CFA8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:59:9e:76:44:be:17:69:06:6c:a8:12:e5:eb:
                    72:16:e8:4c:b9:90:74:1b:86:4c:34:33:b2:02:ea:
                    60:3c:38:8b:1b:c5:1f:b4:2e:d8:f9:a7:8d:b2:a4:
                    bb:cc:3f:66:8f:32:9c:17:64:69:de:f4:c6:23:d5:
                    ce:4f:93:52:6f:ef:65:2d:9b:72:01:18:c9:8a:d6:
                    9e:b7:aa:a7:2f:a1:6f:ce:63:a8:e0:54:5e:7a:8e:
                    3d:f8:de:9b:ed:ec:a9:c4:53:6f:57:94:5e:d3:b6:
                    00:82:62:a2:2d:ef:c8:f7:88:13:f9:f2:31:94:a3:
                    18:47:f4:be:bb:79:8e:ff:c8:3d:18:61:64:2f:39:
                    b1:a6:2c:5f:05:ac:59:bf:ab:dc:da:cc:97:5f:a5:
                    fa:06:c5:12:72:fe:3b:4a:34:2c:a6:c0:48:33:39:
                    57:53:1d:0d:79:1f:06:ff:f7:a3:9f:72:fa:21:4b:
                    f4:e5:58:09:ca:e5:7e:e4:1f:16:81:13:05:ef:11:
                    af:50:f4:c3:6b:8c:38:08:26:2e:35:5d:6b:af:08:
                    fe:ae:b8:6e:c6:e6:21:76:23:7c:79:1a:5a:7b:40:
                    89:cc:5f:1a:9d:f5:77:96:5a:ec:b9:47:97:2b:e2:
                    24:c2:85:6c:d4:cc:5a:c1:a8:84:96:76:cb:fb:7a:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:F2:1C:2E:74:62:66:57:57:45:B2:9E:1B:85:8D:02:CF:A8:A8
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/hOzyHC50YmZXV0WynhuFjQLPqKg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:b5:a2:5a:38:81:35:48:67:c1:69:76:94:c7:81:02:85:
         bb:70:d9:05:28:7c:e9:c3:cb:d8:e0:e8:ec:4d:7c:06:14:b1:
         e7:49:4c:bd:2c:3d:b5:f3:7a:7f:5d:e2:fb:8d:2f:f6:56:b1:
         f4:22:b0:98:36:34:1c:ec:1e:dd:52:01:33:54:5c:37:3c:81:
         34:73:8b:20:35:6b:13:f6:ca:c1:a5:75:99:1c:31:9b:7b:8b:
         cd:30:b8:96:5a:13:5f:59:fe:d3:9c:bf:78:9f:11:78:d2:f9:
         86:a4:c4:fc:87:d8:84:46:da:43:f3:a5:43:12:22:f4:11:d2:
         7a:98:24:f3:55:00:52:b4:79:26:f1:28:fb:81:8c:ef:8a:ea:
         9e:ca:5c:23:bc:5f:5f:33:ac:57:e0:25:ff:fd:4c:ed:b8:6c:
         1c:0c:68:92:2c:03:53:04:84:8e:2d:3d:ec:e0:f6:f3:e1:8a:
         0a:de:f5:26:52:3d:96:35:c2:c7:89:6d:0f:0d:e8:ae:50:f2:
         fd:d2:8f:06:25:11:08:5c:fb:8a:7d:fa:fc:89:84:5d:80:9e:
         4c:be:57:cc:31:31:cf:25:56:66:61:4f:75:43:f9:59:ec:65:
         f4:6d:10:77:86:1c:b8:0b:45:3f:1e:77:65:4c:7d:16:57:0d:
         e4:5d:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:27 2026 by rpki-client