Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa
File:                     CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa (raw, json)
Hash identifier:          c/cNPcOWaYFpVZBgEXksN9SJCbL8wYSwlBaBtn27vw0=
Subject key identifier:   08:4F:1A:F6:58:7B:52:9F:4A:46:58:28:E5:CA:4A:8E:DA:D9:92:DD
Certificate issuer:       /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial:       04
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa
Signing time:             Tue 07 Jul 2026 06:47:22 +0000
ROA not before:           Tue 07 Jul 2026 06:47:22 +0000
ROA not after:            Wed 07 Jul 2027 01:18:23 +0000
asID:                     59107
IP address blocks:        103.49.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
        Validity
            Not Before: Jul  7 06:47:22 2026 GMT
            Not After : Jul  7 01:18:23 2027 GMT
        Subject: CN=084F1AF6587B529F4A465828E5CA4A8EDAD992DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:94:bd:4c:08:7e:5d:29:c0:3a:7b:3f:e2:
                    de:6c:8d:68:48:4e:ee:66:3b:e3:c8:3a:68:89:99:
                    60:22:0a:02:22:6e:ff:a1:ef:5d:5f:29:e3:10:e3:
                    a1:75:4f:cc:64:26:d9:85:dd:13:c9:3e:2e:bd:d3:
                    26:d5:6d:89:d9:c2:3b:61:ec:8e:7e:aa:f7:ee:b7:
                    b7:c5:31:a4:7c:6a:0e:78:f2:48:1d:57:68:d0:ca:
                    ee:29:aa:db:e6:ef:a0:ed:1d:05:fd:80:16:6e:39:
                    c0:a0:7b:cf:d5:ac:c8:15:0a:e3:f5:53:7a:90:8c:
                    2a:06:06:84:70:24:dc:dc:67:91:a2:cc:ac:bb:9c:
                    ad:32:1c:9d:d3:ec:22:ab:3f:9e:f4:02:05:0f:70:
                    08:02:48:31:6a:a4:0d:ef:65:37:e8:d7:49:34:7e:
                    e8:9f:24:95:5e:48:b0:55:34:a0:0b:b1:8e:bc:b9:
                    b9:93:06:06:66:6b:32:15:1a:06:b0:7f:a3:37:8f:
                    8c:40:9e:ca:1e:d4:ed:df:01:ec:b1:a7:30:07:e0:
                    cd:d4:e3:9b:8f:3a:1b:f4:85:27:cf:46:6f:33:76:
                    05:77:07:e8:17:fe:ff:5f:2a:aa:01:4d:a7:9d:8d:
                    c3:72:20:68:cd:35:a4:1b:2d:b6:6a:70:b8:6b:cc:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4F:1A:F6:58:7B:52:9F:4A:46:58:28:E5:CA:4A:8E:DA:D9:92:DD
            X509v3 Authority Key Identifier:
                keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:22:f0:37:59:37:eb:34:7a:b1:b5:3b:4f:4b:1b:a5:4d:e0:
         a1:e2:02:b7:bb:04:a9:67:fa:11:d7:19:37:e6:28:81:bb:21:
         85:38:21:e9:71:03:19:79:a3:60:13:85:4d:8e:b3:6f:05:60:
         03:2e:dc:03:95:44:12:c3:10:82:fe:ca:0a:fd:d3:dc:db:b4:
         26:b5:4f:d7:3c:f7:68:b4:b8:1f:e7:6d:fe:e4:e9:d5:18:dd:
         f2:80:12:d2:b0:25:d6:5e:7d:02:e8:24:9d:f5:eb:a5:7b:24:
         6c:8b:33:0d:03:fa:5f:25:e9:35:c0:3c:f6:dd:96:45:ab:cc:
         6b:b8:b9:66:06:68:e5:70:c7:85:df:80:db:84:17:d3:b2:d3:
         fa:cc:34:52:c3:d1:1b:16:9a:23:20:79:c3:ca:d3:a1:f1:14:
         e5:0e:0d:e0:1f:57:c6:b7:bd:65:26:e3:df:93:d2:f4:61:a3:
         30:cc:77:3a:48:7d:01:d4:cc:e9:4d:ca:7e:15:04:79:a5:2c:
         fa:23:97:96:e0:49:69:d9:e1:ff:e1:14:52:a9:50:0f:57:4f:
         73:64:39:45:89:cb:d5:86:82:77:c0:8f:46:3a:18:dc:a8:e1:
         9d:60:7f:f7:4d:74:9d:d6:41:06:67:49:ef:9d:1e:a6:71:aa:
         54:7f:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:29:23 2026 by rpki-client