Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/8CB5rH_64fMIpyiOrZnCsg1Gips.roa
File:                     8CB5rH_64fMIpyiOrZnCsg1Gips.roa (raw, json)
Hash identifier:          QAcS8LQ0N11Zzk5QPrOFlJCmdMNdZlkmHe7opZgIr/Y=
Subject key identifier:   F0:20:79:AC:7F:FA:E1:F3:08:A7:28:8E:AD:99:C2:B2:0D:46:8A:9B
Certificate issuer:       /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial:       06
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/8CB5rH_64fMIpyiOrZnCsg1Gips.roa
Signing time:             Tue 07 Jul 2026 06:47:25 +0000
ROA not before:           Tue 07 Jul 2026 06:47:25 +0000
ROA not after:            Wed 07 Jul 2027 01:18:23 +0000
asID:                     59107
IP address blocks:        150.9.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
        Validity
            Not Before: Jul  7 06:47:25 2026 GMT
            Not After : Jul  7 01:18:23 2027 GMT
        Subject: CN=F02079AC7FFAE1F308A7288EAD99C2B20D468A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:95:57:de:9b:9d:1f:31:42:5b:c4:33:f2:
                    3e:70:7b:b7:d7:6c:75:52:ba:9d:88:7c:49:1f:62:
                    8f:ee:99:45:52:83:00:04:1d:f1:13:92:e3:0a:e3:
                    01:ce:17:7c:21:67:f4:3c:98:c3:43:de:70:44:70:
                    f2:c3:04:ce:aa:75:b7:49:5f:df:f2:06:02:4c:58:
                    04:b3:7a:10:2d:6c:55:07:9c:5b:35:10:83:40:f3:
                    14:54:8c:a1:de:7a:b0:3a:18:c2:3a:dc:04:a8:de:
                    10:b2:a4:13:ff:27:72:9b:33:3d:d6:c8:5a:95:a2:
                    f5:c6:9b:cb:cf:e4:32:9a:60:82:33:0f:1f:94:fd:
                    06:2a:ef:a4:f0:e9:c0:9c:17:14:e1:bd:61:b0:89:
                    7a:55:7e:c1:3f:36:99:b4:22:c4:f3:dc:53:eb:39:
                    81:bc:f4:c3:f5:77:92:1d:34:bd:17:98:cf:a8:0c:
                    cd:1a:2f:58:85:78:b3:c3:55:ad:62:4d:92:f3:98:
                    d9:4f:59:69:da:25:1b:1e:8d:b0:3e:b1:5d:4e:4b:
                    d0:4e:b8:b6:cb:a8:31:dd:d8:70:c5:ba:9e:97:ed:
                    a9:60:f0:07:f0:88:6a:88:4e:92:5c:d9:6f:79:54:
                    9a:e5:e6:96:b5:0d:2c:76:84:6c:d5:97:37:0e:4a:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:20:79:AC:7F:FA:E1:F3:08:A7:28:8E:AD:99:C2:B2:0D:46:8A:9B
            X509v3 Authority Key Identifier:
                keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/8CB5rH_64fMIpyiOrZnCsg1Gips.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:78:5b:22:46:6a:b7:42:9d:fa:92:8a:90:ff:55:e5:e4:a8:
         b7:81:3a:de:1f:de:46:d1:3e:17:02:8c:7a:6b:54:64:85:70:
         a7:51:00:40:55:5a:b8:3c:35:87:bd:22:73:40:9c:5d:26:2b:
         ef:0c:99:3f:ea:4c:15:e5:b3:0e:b9:32:8b:00:fa:eb:33:62:
         73:b5:30:3f:f3:c7:98:70:72:7a:ec:83:82:49:66:e4:22:ab:
         f9:10:47:a9:42:38:14:3c:7a:81:78:9e:82:7f:a3:13:4d:ca:
         0e:2d:2c:b5:29:5a:86:93:d7:cd:01:00:6b:ba:47:c7:f2:80:
         33:6d:ab:82:03:b8:4e:f0:4d:2c:a2:f9:93:b5:37:1b:c1:e3:
         10:f6:8a:1f:5e:68:86:b7:02:60:f4:63:57:af:5d:c4:18:43:
         05:51:52:48:6d:f0:d4:bb:47:7a:4a:52:89:bc:9d:59:18:fd:
         1f:3a:dc:48:1a:79:3c:39:11:d2:36:79:2c:88:2f:48:37:8c:
         26:58:b0:f8:19:a5:82:5b:33:0a:34:c8:c1:28:9c:8a:d6:05:
         5f:f7:ca:62:1f:02:fe:cb:b0:da:56:24:0c:cd:49:dd:69:13:
         08:05:6a:20:01:a9:ae:a0:07:5e:11:aa:b0:1a:80:1a:4f:b2:
         0d:ff:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:28:24 2026 by rpki-client