Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/519/wUx7nQbajC21MUFHuUNXbhi5lVw.roa
File:                     wUx7nQbajC21MUFHuUNXbhi5lVw.roa (raw, json)
Hash identifier:          dXPSBvry5eg3lejeewdwH5IWBQ4tYUHnPCTw47J816k=
Subject key identifier:   C1:4C:7B:9D:06:DA:8C:2D:B5:31:41:47:B9:43:57:6E:18:B9:95:5C
Certificate issuer:       /CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE
Certificate serial:       05
Authority key identifier: 99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/wUx7nQbajC21MUFHuUNXbhi5lVw.roa
Signing time:             Wed 10 Jun 2026 06:40:47 +0000
ROA not before:           Wed 10 Jun 2026 06:40:47 +0000
ROA not after:            Thu 10 Jun 2027 06:10:17 +0000
asID:                     55383
IP address blocks:        103.1.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE
        Validity
            Not Before: Jun 10 06:40:47 2026 GMT
            Not After : Jun 10 06:10:17 2027 GMT
        Subject: CN=C14C7B9D06DA8C2DB5314147B943576E18B9955C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:ec:4b:d9:4d:fe:4a:20:f8:06:02:0e:4c:
                    de:1a:0d:c8:7a:b8:de:93:c2:28:d2:21:99:c0:1d:
                    c5:c8:4c:4b:56:24:e8:14:0f:33:6a:14:4e:0a:a5:
                    98:d2:18:5e:a4:ec:0f:39:ff:ce:2a:db:c5:e9:1f:
                    01:ff:cf:bd:e0:dc:78:c5:9e:b9:c6:16:7a:84:58:
                    2a:60:d1:1b:df:c2:22:fa:fe:f4:1a:6b:37:81:a1:
                    ff:50:0f:4b:b3:9b:b2:e1:f7:6a:55:fa:6a:95:6a:
                    e5:39:a5:68:94:a7:36:5d:95:22:f7:bb:0b:73:52:
                    03:be:52:a7:6b:08:cf:f9:7d:ee:47:41:3a:b7:6e:
                    7a:82:ab:b7:96:9f:d8:6c:16:f6:fb:b2:48:a1:ea:
                    8a:36:cb:4e:16:81:8d:4a:b8:1e:b0:90:13:1f:9b:
                    3f:5d:97:24:30:b7:38:5e:b2:e1:86:d4:bb:f9:b8:
                    5c:25:60:db:28:07:f9:05:73:6e:61:2c:de:a9:dc:
                    2e:81:e6:23:ce:c3:78:66:5a:1e:bc:8c:6d:12:d3:
                    03:1c:4a:e8:3c:63:d7:e6:d5:6e:ef:e9:ae:21:05:
                    c6:1c:1d:6d:56:60:0b:f6:fa:90:9b:81:b8:e0:68:
                    5b:07:b3:7b:47:60:a0:de:50:4a:d0:8c:e0:4f:6a:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4C:7B:9D:06:DA:8C:2D:B5:31:41:47:B9:43:57:6E:18:B9:95:5C
            X509v3 Authority Key Identifier:
                keyid:99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/wUx7nQbajC21MUFHuUNXbhi5lVw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:0b:91:18:52:de:6f:80:05:fa:9f:7f:a5:06:45:e0:b4:37:
         cd:42:2d:9b:13:d4:61:1b:48:02:16:b2:2c:86:be:31:ff:a2:
         50:ae:ec:91:9b:f8:20:c7:81:b2:31:4b:a2:95:ca:c4:1c:a4:
         72:f0:1a:b0:72:ae:fb:1a:fa:66:18:60:d5:42:5f:d9:3e:2b:
         67:65:07:d6:17:f1:48:59:66:60:ff:0e:04:c7:4e:01:a3:23:
         a8:3c:5a:db:08:1b:2e:d1:b5:06:23:90:0a:8b:60:59:be:7b:
         11:06:d2:5e:3c:e3:46:79:8c:9e:22:17:2b:7e:77:4f:40:bf:
         a5:e7:e2:52:cf:84:19:35:95:d3:be:7c:48:47:5e:fb:ee:1c:
         36:69:62:62:5c:ab:2a:64:33:d3:1d:38:83:78:bf:ed:91:9a:
         e6:c0:63:0e:c3:9e:20:94:bd:d0:63:26:29:9d:e9:4f:d2:b7:
         68:56:3a:d1:2c:d8:1a:b2:f9:84:8e:f1:57:2a:27:cd:18:2b:
         31:f1:bd:c8:92:00:23:9f:0b:aa:89:fd:90:e1:a0:79:6b:71:
         a3:c3:38:fe:ef:b5:3d:16:f2:d4:dd:a3:77:67:26:0b:a9:88:
         92:23:9c:54:e0:3a:fc:cf:78:3e:4e:be:ae:11:70:98:d0:fd:
         21:a2:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:53:44 2026 by rpki-client