Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/o8YOLO6KAlHqAGlycVXtFaAPPQE.roa
File:                     o8YOLO6KAlHqAGlycVXtFaAPPQE.roa (raw, json)
Hash identifier:          xc49e3iWrs3WsQOEWnnflKTZP0jihf+qPCn3dpqj0qI=
Subject key identifier:   A3:C6:0E:2C:EE:8A:02:51:EA:00:69:72:71:55:ED:15:A0:0F:3D:01
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       73
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/o8YOLO6KAlHqAGlycVXtFaAPPQE.roa
Signing time:             Mon 29 Jun 2026 04:43:01 +0000
ROA not before:           Mon 29 Jun 2026 04:43:01 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        36.2.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun 29 04:43:01 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=A3C60E2CEE8A0251EA0069727155ED15A00F3D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:15:8d:18:c3:4a:b4:d1:3e:eb:e7:85:62:71:
                    08:d3:27:0e:68:58:4e:99:3c:5b:bc:3f:d0:9f:fe:
                    b7:4a:45:16:d4:46:2f:09:b0:f3:86:4a:fd:ff:0f:
                    97:05:0b:9b:ad:91:17:a3:ca:fb:86:47:8d:47:0b:
                    a5:8e:b2:90:ba:c9:99:25:30:61:53:67:79:a8:85:
                    b6:65:e0:db:4d:6c:6c:0d:a8:ed:bb:9c:95:a6:2f:
                    41:69:1c:2c:3c:e5:64:3d:b0:63:4c:a7:66:5b:4a:
                    98:ea:ab:6b:ac:a7:f0:1f:8c:82:81:38:68:c6:cd:
                    b4:ab:7a:e1:f5:dc:31:e9:ed:69:7e:dc:69:ca:cf:
                    ad:58:e7:c4:0b:2f:7e:b4:80:f5:ec:28:9b:fa:90:
                    a2:88:0e:53:67:fa:b9:2d:4e:04:3c:3e:4b:3e:04:
                    8f:bc:0a:d9:c5:59:68:d6:2b:af:86:45:65:ef:a5:
                    ab:3f:61:0c:d4:23:58:a6:04:78:a5:6b:5d:18:ee:
                    dd:06:81:18:13:3d:1f:05:81:cc:d5:71:23:dc:eb:
                    5b:bf:55:c1:82:60:19:34:76:86:86:22:84:fc:40:
                    52:7a:28:d7:09:96:08:53:32:94:c9:53:e2:74:7e:
                    02:12:ba:23:e7:bd:55:1f:f9:af:48:18:58:b7:87:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:0E:2C:EE:8A:02:51:EA:00:69:72:71:55:ED:15:A0:0F:3D:01
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/o8YOLO6KAlHqAGlycVXtFaAPPQE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:34:99:1f:81:13:f6:9d:f5:86:1f:71:de:f0:cc:6d:c3:
         83:3f:99:3f:ae:32:f8:8a:f4:b8:d4:67:d0:c6:41:26:65:71:
         0b:c8:0a:32:ac:78:53:e8:98:5f:c3:ed:e1:1c:cb:47:11:9a:
         a1:8e:ae:61:a1:16:e3:0c:b4:dd:3d:be:4c:72:4f:a8:7d:f4:
         ac:41:c3:62:f0:0c:6e:63:ea:7e:4d:d7:22:41:3a:0f:b2:f5:
         71:f0:0b:dc:fc:10:e9:de:bc:45:1e:ec:94:80:12:75:03:cd:
         41:20:0a:04:db:94:46:25:0d:ef:b0:5c:d2:8c:e0:9e:83:35:
         8a:09:0c:b1:f9:9d:c9:45:21:2d:e9:21:28:89:ed:4a:41:da:
         6e:f7:f5:16:a7:4c:55:00:40:d7:09:c2:e5:09:4e:2f:75:0b:
         39:21:74:94:3e:c7:8b:00:1b:85:ac:9c:bb:1c:4d:26:3f:a3:
         b9:36:77:dd:8b:02:6a:5e:0d:c6:0a:e9:0b:6e:d7:73:ef:13:
         a0:11:d9:02:23:8c:9c:e3:d6:9f:3d:34:4b:f4:7c:4f:05:13:
         62:22:98:bd:44:4e:15:9f:27:58:10:b8:cf:15:d9:c2:5e:7b:
         6e:a8:91:26:97:eb:e0:24:b3:66:92:f0:fa:24:09:ac:a2:6a:
         84:42:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:27 2026 by rpki-client