Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa
File:                     sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa (raw, json)
Hash identifier:          S1aYuo1Nxv05Xyt8ZzshE3xxD2xhebn1V1bzzs38Q9k=
Subject key identifier:   B0:73:A5:A7:4C:38:04:A2:80:C3:C5:C4:75:11:BE:FC:C8:45:3C:BB
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       5F
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa
Signing time:             Wed 20 May 2026 05:10:02 +0000
ROA not before:           Wed 20 May 2026 05:10:02 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        222.228.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: May 20 05:10:02 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=B073A5A74C3804A280C3C5C47511BEFCC8453CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:c2:a2:4e:8a:04:6a:e2:35:8a:e1:26:f6:
                    53:73:5f:81:d8:ac:c4:10:c4:61:5e:4f:55:3d:28:
                    c2:7c:8d:5e:bc:07:0a:e4:39:70:b5:68:39:41:68:
                    cb:0f:b5:32:aa:15:9d:b1:10:8a:9b:5c:94:cf:b8:
                    ca:41:ac:9b:34:62:ca:98:f7:8b:46:d2:a5:be:9f:
                    6e:4c:f0:9b:50:f6:aa:0e:f9:7b:8d:d9:00:1e:44:
                    b7:7c:de:f4:30:d9:df:95:be:02:41:0e:0b:62:99:
                    9c:b2:c7:b5:90:30:eb:30:a1:e8:21:3b:2c:68:a0:
                    c1:4b:b1:c2:ce:b0:00:12:78:19:2f:34:f9:1f:9c:
                    43:ed:f5:03:61:db:b5:06:5f:bc:52:3f:56:28:28:
                    86:52:38:bc:73:b3:f6:80:15:57:38:71:f2:a5:16:
                    e4:a9:dc:6c:01:02:cb:28:3c:e2:04:22:f6:a7:5b:
                    04:7d:bc:5d:36:84:a9:5c:47:08:63:c4:1b:c4:45:
                    8d:7c:2e:f6:4b:1c:85:cf:48:14:4e:e8:6d:c6:a8:
                    81:5c:cd:9b:b1:42:d0:e4:4c:d1:9b:62:17:39:fa:
                    67:40:4b:16:9c:bd:fb:8e:4c:42:06:ad:7e:15:f2:
                    df:03:0a:87:ea:3a:0d:1c:7b:71:52:7a:e0:e2:72:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:73:A5:A7:4C:38:04:A2:80:C3:C5:C4:75:11:BE:FC:C8:45:3C:BB
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.228.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:b8:6e:20:96:6b:2b:bf:cd:72:bb:6d:b6:f6:41:b1:74:
         a1:4a:14:92:f4:00:e0:cd:7a:ef:62:3b:77:f8:2a:44:66:7e:
         1b:76:53:f0:c3:80:99:c2:87:17:32:60:5d:2d:22:f3:f2:27:
         fc:98:cd:60:ce:a8:ae:9b:91:46:3b:97:cd:ec:8d:29:da:5e:
         99:66:aa:79:24:7e:ea:80:8d:49:39:90:51:b2:7d:32:1d:bf:
         1c:f9:c8:b6:28:7c:47:01:66:81:b7:3e:3b:3d:34:81:33:9f:
         ac:31:8c:25:7f:71:46:fb:6a:54:c4:0c:d6:3f:6b:38:41:23:
         c4:7a:ec:a9:3e:7e:9d:33:32:49:d1:a8:ba:7f:42:d2:19:64:
         af:81:e8:07:0f:d0:10:72:df:5a:04:c3:9c:c5:a3:58:68:b4:
         45:bd:81:50:66:53:09:db:16:39:8c:22:c6:ab:aa:ad:1c:ed:
         2a:2d:83:1e:e3:c4:0e:6e:ce:92:26:56:e2:ac:db:d6:8d:ff:
         5a:d9:16:89:1c:36:6b:fc:8d:7d:b9:e6:51:cf:c6:85:06:d9:
         0a:2e:38:0d:6c:a0:dc:0b:8b:2f:82:f0:b6:f2:d6:3b:71:10:
         7f:94:d6:7b:d7:e8:bd:6c:47:77:c6:1d:1f:89:5a:d3:11:1e:
         5c:f1:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:13 2026 by rpki-client