Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/519/79KUoe8fBJI3ZEGu2n5lfBklH3M.roa
File:                     79KUoe8fBJI3ZEGu2n5lfBklH3M.roa (raw, json)
Hash identifier:          HYP98Byue8cSwPLrhJGIr/wfCFGsJ65xYh4Pya4lyw0=
Subject key identifier:   EF:D2:94:A1:EF:1F:04:92:37:64:41:AE:DA:7E:65:7C:19:25:1F:73
Certificate issuer:       /CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE
Certificate serial:       07
Authority key identifier: 99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/79KUoe8fBJI3ZEGu2n5lfBklH3M.roa
Signing time:             Wed 10 Jun 2026 06:40:48 +0000
ROA not before:           Wed 10 Jun 2026 06:40:48 +0000
ROA not after:            Thu 10 Jun 2027 06:10:17 +0000
asID:                     58789
IP address blocks:        103.1.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE
        Validity
            Not Before: Jun 10 06:40:48 2026 GMT
            Not After : Jun 10 06:10:17 2027 GMT
        Subject: CN=EFD294A1EF1F0492376441AEDA7E657C19251F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c6:86:f2:06:fd:9b:fb:6c:f6:4a:86:cf:9f:
                    e5:94:14:a6:85:7d:6c:e3:d5:fe:ce:cf:6c:bb:26:
                    2d:d2:ad:25:b1:d1:21:83:2f:5f:82:01:bb:2b:ae:
                    cf:69:88:f1:e5:53:8e:e9:e1:bf:ac:58:4d:8b:29:
                    5b:fd:26:2f:b8:4e:4e:37:38:5c:e3:d4:e0:2e:d8:
                    bd:09:0b:27:0a:f1:71:54:41:7c:0c:d4:42:1e:cf:
                    d9:b1:42:73:31:72:3a:20:27:c5:11:88:a2:ba:6d:
                    39:0a:a1:ef:38:5c:27:dd:3d:dd:c1:50:0b:a0:60:
                    e9:97:23:e0:a6:1f:ec:62:30:4e:a1:08:fc:0a:34:
                    c4:56:83:20:f5:58:d5:eb:b4:aa:37:81:4c:7a:d8:
                    21:91:e8:74:e0:aa:42:d7:2e:82:25:71:a1:57:76:
                    4c:83:40:28:01:65:0b:41:97:2a:3f:eb:9d:05:8f:
                    e2:1e:84:ff:8c:18:0c:57:b2:e5:bf:b0:44:68:68:
                    94:bf:9f:86:63:4d:4d:43:9a:47:a3:cf:5d:dc:45:
                    c2:74:79:70:84:bb:8c:42:b3:68:2e:1a:76:e4:35:
                    76:cd:8a:ae:a6:56:e9:85:f9:5e:34:36:c0:6e:2b:
                    b5:1e:4b:2f:70:f7:46:ea:a2:b6:61:38:c4:a6:b0:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:94:A1:EF:1F:04:92:37:64:41:AE:DA:7E:65:7C:19:25:1F:73
            X509v3 Authority Key Identifier:
                keyid:99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/79KUoe8fBJI3ZEGu2n5lfBklH3M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:57:4c:e5:83:40:46:b3:d7:21:f9:af:5a:1f:97:38:38:
         b9:14:38:79:5c:b5:e3:70:16:c3:bd:63:f0:07:43:b1:bd:8b:
         8a:49:e1:32:0d:78:ab:ad:eb:5e:ab:7b:18:90:3a:c9:69:5c:
         d4:49:0b:e7:3e:22:60:a4:33:39:7c:04:ba:b0:ca:1e:c1:18:
         69:41:0d:f5:4c:e8:2f:f9:9c:39:37:8e:a7:f1:96:18:28:61:
         0b:c3:e6:86:7a:e2:87:42:a6:1e:88:5d:25:b9:6c:5f:0f:14:
         99:b5:b7:cd:bb:21:dd:35:73:f2:3b:6e:68:2d:86:05:92:48:
         2c:8c:38:29:bb:76:7e:14:b2:69:73:a9:98:47:ec:04:5b:8e:
         b2:39:9e:3a:28:aa:e6:2d:e1:63:f7:25:82:eb:31:6e:31:9d:
         6d:38:9a:14:99:80:ad:15:42:04:af:e9:c4:83:9b:4e:94:33:
         1d:b7:3f:d6:de:19:8c:a7:89:ca:57:6e:86:c7:2c:ad:72:bd:
         69:37:29:01:c4:66:a0:bd:6c:f7:fa:6e:37:02:be:43:17:11:
         08:08:57:2b:44:be:fb:b2:81:29:f8:81:7f:fc:00:ad:d1:32:
         85:55:15:76:80:1f:48:dd:39:8e:46:b1:0c:cc:21:27:58:ff:
         22:f8:ab:6c
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OUE3
NEMxQUYwN0IxQkY2ODNBNEM2NEE0MjNENjUxODVGNUZFQ0FFMB4XDTI2MDYxMDA2
NDA0OFoXDTI3MDYxMDA2MTAxN1owMzExMC8GA1UEAxMoRUZEMjk0QTFFRjFGMDQ5
MjM3NjQ0MUFFREE3RTY1N0MxOTI1MUY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOPGhvIG/Zv7bPZKhs+f5ZQUpoV9bOPV/s7PbLsmLdKtJbHRIYMv
X4IBuyuuz2mI8eVTjunhv6xYTYspW/0mL7hOTjc4XOPU4C7YvQkLJwrxcVRBfAzU
Qh7P2bFCczFyOiAnxRGIorptOQqh7zhcJ9093cFQC6Bg6Zcj4KYf7GIwTqEI/Ao0
xFaDIPVY1eu0qjeBTHrYIZHodOCqQtcugiVxoVd2TINAKAFlC0GXKj/rnQWP4h6E
/4wYDFey5b+wRGholL+fhmNNTUOaR6PPXdxFwnR5cIS7jEKzaC4aduQ1ds2KrqZW
6YX5XjQ2wG4rtR5LL3D3RuqitmE4xKawx3sCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTv0pSh7x8EkjdkQa7afmV8GSUfczAfBgNVHSMEGDAWgBSZp0wa8Hsb9oOkxkpC
PWUYX1/srjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTE5L21hZE1HdkI3R19hRHBNWktRajFsR0Y5ZjdLNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21hZE1HdkI3R19hRHBNWktRajFsR0Y5
ZjdLNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MTkvNzlLVW9lOGZCSkkzWkVHdTJuNWxmQmtsSDNNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcB+DANBgkqhkiG9w0BAQsFAAOCAQEA
WFpXTOWDQEaz1yH5r1oflzg4uRQ4eVy143AWw71j8AdDsb2LiknhMg14q63rXqt7
GJA6yWlc1EkL5z4iYKQzOXwEurDKHsEYaUEN9UzoL/mcOTeOp/GWGChhC8Pmhnri
h0KmHohdJblsXw8UmbW3zbsh3TVz8jtuaC2GBZJILIw4Kbt2fhSyaXOpmEfsBFuO
sjmeOiiq5i3hY/clgusxbjGdbTiaFJmArRVCBK/pxIObTpQzHbc/1t4ZjKeJyldu
hscsrXK9aTcpAcRmoL1s9/puNwK+QxcRCAhXK0S++7KBKfiBf/wArdEyhVUVdoAf
SN05jkaxDMwhJ1j/IvirbA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:57:54 2026 by rpki-client