Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/558/sTYIRKG7zSiOAObNb5qS3-aRMNI.roa
File:                     sTYIRKG7zSiOAObNb5qS3-aRMNI.roa (raw, json)
Hash identifier:          wu8gpl7gz6gHrpmtcIHAiQb9j0i0qOKMDiJLnFxaNnA=
Subject key identifier:   B1:36:08:44:A1:BB:CD:28:8E:00:E6:CD:6F:9A:92:DF:E6:91:30:D2
Certificate issuer:       /CN=8D2B19F5135BFDD9942FD372736661A19CC2CCDE
Certificate serial:       03
Authority key identifier: 8D:2B:19:F5:13:5B:FD:D9:94:2F:D3:72:73:66:61:A1:9C:C2:CC:DE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/sTYIRKG7zSiOAObNb5qS3-aRMNI.roa
Signing time:             Tue 09 Jun 2026 07:36:00 +0000
ROA not before:           Tue 09 Jun 2026 07:36:00 +0000
ROA not after:            Wed 09 Jun 2027 07:11:07 +0000
asID:                     58789
IP address blocks:        103.17.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2B19F5135BFDD9942FD372736661A19CC2CCDE
        Validity
            Not Before: Jun  9 07:36:00 2026 GMT
            Not After : Jun  9 07:11:07 2027 GMT
        Subject: CN=B1360844A1BBCD288E00E6CD6F9A92DFE69130D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:6d:04:4a:df:37:a6:86:ae:7b:8a:ec:d7:
                    f4:55:60:9e:3c:ac:0f:ab:9e:e1:90:e3:9d:71:13:
                    09:f4:cf:76:74:a4:d2:2c:e7:64:64:3a:17:f3:27:
                    44:78:32:48:54:8d:17:cb:a2:43:34:20:05:0d:ae:
                    d6:9d:a9:04:05:2b:25:06:22:b5:c8:d6:59:6f:e6:
                    f9:a9:95:da:2e:c9:5c:98:e1:13:b0:b6:02:35:78:
                    c1:b1:6b:fd:45:99:82:9e:f5:ed:ce:89:0b:a7:04:
                    2d:99:1b:40:76:9b:43:74:96:c1:28:81:85:0f:a2:
                    f1:fe:32:18:61:02:01:67:7c:a3:ea:82:a4:a5:a3:
                    dd:ff:ea:5a:50:64:1b:bb:a1:48:91:bf:86:dd:a8:
                    a9:55:6e:bb:88:40:33:78:e5:58:37:9a:d1:3a:c9:
                    bc:40:c9:ed:95:6a:d8:3d:b2:85:34:bf:05:f5:28:
                    00:fa:67:77:05:ff:21:56:8c:ec:8b:c5:13:0d:df:
                    94:bb:4a:48:4c:4f:2b:97:f6:7c:61:40:81:d6:66:
                    63:07:07:c8:32:a0:58:5e:55:57:ee:56:14:3e:69:
                    5f:2d:85:41:9f:a0:4c:05:0a:9a:31:22:92:80:54:
                    d4:ab:d6:6c:5d:c0:dd:95:c2:3f:75:28:ea:18:0a:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:36:08:44:A1:BB:CD:28:8E:00:E6:CD:6F:9A:92:DF:E6:91:30:D2
            X509v3 Authority Key Identifier:
                keyid:8D:2B:19:F5:13:5B:FD:D9:94:2F:D3:72:73:66:61:A1:9C:C2:CC:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/sTYIRKG7zSiOAObNb5qS3-aRMNI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:a8:4d:55:84:f5:d5:45:97:5b:23:5c:bb:b2:53:65:82:
         a7:d4:57:f2:b4:c3:8f:55:8b:02:5a:6c:a5:aa:9b:fb:49:cf:
         f1:49:24:3c:96:bc:55:83:ff:96:79:ca:49:88:de:29:4d:e8:
         9a:63:94:bf:2e:5d:4c:db:61:92:85:03:77:b5:cf:34:be:a3:
         a1:5f:0f:db:79:97:5f:bc:e9:d7:67:96:ec:ad:86:83:89:75:
         d5:59:d2:4d:7b:63:80:ee:70:01:22:a4:ae:16:8a:95:ea:ec:
         d1:6e:9b:20:6a:01:27:58:94:db:a9:ed:09:78:ad:91:f4:34:
         33:d8:25:62:69:99:26:f2:6a:ac:f5:77:63:a9:77:3f:7b:f9:
         c6:83:11:86:b1:0b:9f:7e:7c:31:e6:20:d4:c4:9c:a6:f2:61:
         76:d0:93:93:b0:00:08:25:c2:5b:ef:ad:55:9a:4d:19:83:25:
         02:9c:c5:da:b0:6f:9b:18:aa:b0:7a:bd:4a:30:17:54:69:15:
         82:09:66:08:f3:1b:89:83:68:44:d2:59:4d:c1:4b:c2:a1:33:
         6f:29:4a:98:a7:4e:6a:e7:a2:c1:54:8d:80:bd:6a:0b:de:ac:
         2f:29:e7:09:33:48:c7:05:9e:b3:39:1d:12:9c:5c:ef:51:69:
         74:7b:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:57:54 2026 by rpki-client