Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/pLFOmkWCMagPXk3h-I5xGLo2RZk.roa
File:                     pLFOmkWCMagPXk3h-I5xGLo2RZk.roa (raw, json)
Hash identifier:          dj45TpmLlZaxo8D7KPdimjPv9/OwINhuo5347GEALRE=
Subject key identifier:   A4:B1:4E:9A:45:82:31:A8:0F:5E:4D:E1:F8:8E:71:18:BA:36:45:99
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       80
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pLFOmkWCMagPXk3h-I5xGLo2RZk.roa
Signing time:             Tue 30 Jun 2026 02:01:42 +0000
ROA not before:           Tue 30 Jun 2026 02:01:42 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        59.87.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun 30 02:01:42 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=A4B14E9A458231A80F5E4DE1F88E7118BA364599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:05:9e:cd:d4:24:ce:aa:99:8c:22:a6:01:
                    ca:45:a6:61:33:8d:d5:bf:3a:17:8c:3a:e2:26:8e:
                    06:d1:0d:0f:6f:88:36:4f:fd:7d:b3:8c:a8:dd:21:
                    1b:b2:d8:08:e1:bc:8c:cf:5f:a4:8e:31:75:04:89:
                    fe:5a:1e:3a:33:c8:04:35:0c:5f:50:b7:31:79:5b:
                    0a:0c:44:22:89:79:73:6e:6b:81:d3:d3:95:6e:41:
                    9a:1c:51:71:0f:cd:ed:da:30:9c:a7:b6:18:22:c5:
                    28:eb:a5:81:7c:b0:99:1f:48:e8:50:ab:93:52:2f:
                    32:c3:82:ce:ee:d1:49:db:31:3a:86:b3:52:3d:49:
                    82:12:07:28:87:85:e9:a9:af:11:2d:25:24:a0:70:
                    d5:fe:53:4b:d1:c8:ba:37:66:4b:7f:eb:6e:0b:ad:
                    4d:cf:d2:a4:45:5c:a9:4f:9e:ff:c9:51:50:10:ea:
                    8f:25:4b:aa:92:75:3a:06:bb:ce:22:70:6f:1b:f2:
                    a7:a9:ca:05:5e:2e:f3:3e:58:3a:5a:4f:ee:6b:29:
                    49:ff:17:a6:0e:76:23:0e:33:aa:0e:95:0f:12:e0:
                    88:3e:4a:cf:1d:0a:d8:a3:0c:cf:54:e8:3a:24:9b:
                    07:43:79:22:a7:31:cc:a6:8d:6d:e6:1f:d1:7a:b0:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B1:4E:9A:45:82:31:A8:0F:5E:4D:E1:F8:8E:71:18:BA:36:45:99
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pLFOmkWCMagPXk3h-I5xGLo2RZk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:ba:bf:ef:cd:d9:fa:52:91:8d:f2:07:d7:51:42:0e:e7:36:
         c0:70:fd:3b:c6:04:c5:24:93:4c:3f:89:af:5b:9f:53:19:d1:
         d7:fb:6e:6c:7d:f5:6d:02:4d:84:05:46:fb:b0:93:68:e8:e4:
         1b:b6:78:2b:7f:2e:f1:40:1b:77:5a:11:5e:f1:60:d8:fa:08:
         0f:ff:cc:a0:73:6b:66:8e:34:a9:24:9d:bb:94:32:60:ee:c3:
         50:49:ad:bc:38:c8:a5:35:72:fe:65:7e:a5:ed:2f:d1:75:41:
         8c:18:56:8b:99:e0:bb:48:f8:02:ca:58:f3:a8:1c:eb:6b:b4:
         81:34:6b:2d:96:5c:ca:e3:28:c7:eb:c2:7b:2a:93:0f:2e:51:
         9d:cf:d3:a7:b5:5b:a3:03:23:51:4a:48:5e:b5:20:49:51:cd:
         3a:37:f6:d2:56:2e:fd:45:83:0c:73:62:91:3a:d0:7d:43:b9:
         25:8e:21:d7:59:a3:fd:b1:8b:aa:bd:2a:e7:7b:b8:88:68:ba:
         fc:65:ab:70:7b:0d:9d:7b:b7:71:11:bc:af:fd:c3:1f:79:fd:
         7c:a5:28:cd:1e:8b:58:be:61:e9:93:27:dc:bf:54:89:af:e5:
         38:ca:a4:bf:91:03:25:06:cd:45:85:ad:ba:51:77:91:71:86:
         2e:8d:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:59 2026 by rpki-client