Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa
File:                     CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa (raw, json)
Hash identifier:          c+VcgT/V8xX13G2JbnjhIov5aS7AQxWVhd2YaTHIsDI=
Subject key identifier:   09:4A:5E:2C:19:66:05:86:DD:48:F5:6D:50:81:0F:85:48:74:A9:8C
Certificate issuer:       /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial:       02
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa
Signing time:             Tue 07 Jul 2026 06:40:43 +0000
ROA not before:           Tue 07 Jul 2026 06:40:43 +0000
ROA not after:            Wed 07 Jul 2027 01:18:23 +0000
asID:                     59107
IP address blocks:        126.52.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
        Validity
            Not Before: Jul  7 06:40:43 2026 GMT
            Not After : Jul  7 01:18:23 2027 GMT
        Subject: CN=094A5E2C19660586DD48F56D50810F854874A98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:19:df:75:2d:1a:4d:f4:57:cc:3e:81:0f:
                    77:88:bb:56:e5:49:17:cc:f8:ea:8c:cf:1a:a2:44:
                    b5:10:bd:1b:6b:92:d8:fe:d5:45:59:32:89:58:57:
                    11:6f:2f:87:67:46:3c:ec:f0:83:5e:04:84:32:73:
                    72:e3:66:c2:2f:d3:5d:a1:65:9a:59:62:f7:e3:f8:
                    4f:2b:95:84:73:b0:3e:f5:26:df:af:4a:89:43:61:
                    44:0c:fe:05:61:54:27:ae:4f:b8:77:79:a0:cf:61:
                    c8:9c:fb:d0:90:0b:d3:e6:f2:83:07:a5:24:e1:9e:
                    85:0c:8f:6d:1d:48:e8:6c:78:02:44:a5:29:11:85:
                    60:85:76:af:64:cd:5b:2b:38:c9:c1:b7:5b:65:8f:
                    a9:a6:c9:6b:52:8b:bc:48:f2:eb:e9:25:89:17:48:
                    d2:b8:bb:c5:3f:7e:a7:83:d4:59:34:cb:43:8d:5d:
                    6b:18:05:fe:70:bd:42:89:d7:3d:2d:9c:4c:83:34:
                    d1:c6:94:fd:72:0c:08:0e:56:e5:bd:b6:49:4d:9b:
                    ea:10:fd:fb:87:88:b7:ce:d3:f2:9d:fa:04:ca:90:
                    d5:e6:d9:03:8c:8f:e7:08:1d:4a:14:5e:f5:ee:84:
                    b2:d4:6f:e3:4b:cf:34:00:e1:2a:78:58:e1:e8:dc:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4A:5E:2C:19:66:05:86:DD:48:F5:6D:50:81:0F:85:48:74:A9:8C
            X509v3 Authority Key Identifier:
                keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:75:08:cb:f2:14:b0:8b:20:0a:40:ba:e2:69:66:6d:2f:b2:
         3f:5d:29:a8:af:e5:4c:d5:11:33:0b:92:90:c9:10:71:16:a9:
         6d:61:13:b7:c2:34:82:e5:c4:6e:51:01:c3:c7:82:1f:1e:53:
         4e:5a:43:5c:f6:74:ba:68:98:5e:84:78:4a:2b:57:e2:02:39:
         b0:36:ea:47:78:40:95:2a:f4:26:d3:9d:f6:0d:d9:95:e3:0a:
         27:d5:b3:f0:78:ff:d1:72:73:65:13:b8:78:39:08:a7:5e:c8:
         00:4f:13:b9:cd:73:e2:7a:0a:d7:dd:cb:09:05:53:69:db:7d:
         75:cc:0b:32:c6:0f:ef:32:50:a4:e9:a5:d1:11:7e:7f:cf:22:
         f6:bd:1e:cd:a4:bc:86:6c:8e:f9:4d:9d:a5:f4:93:48:06:75:
         07:24:fe:f8:b9:ea:44:74:b3:19:0a:47:a3:9f:f6:c9:e9:40:
         bf:d7:0d:2e:48:f0:d4:ea:4a:fc:37:54:bf:a7:36:8f:f5:3d:
         9f:36:b5:5e:f9:d6:6b:9c:e6:d7:59:8c:ee:1f:87:d6:ba:b6:
         cd:73:d5:e9:bb:75:ce:f0:3f:99:78:e8:54:c6:0e:5d:0e:5c:
         32:c1:3f:26:19:e9:26:18:9d:20:1b:84:04:d9:03:1b:c9:ac:
         6e:91:0a:b2
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNUYx
Njc0RDBDNjlENDI3NEMzNDE2RDdGOTU1QkE0MzkzNjkzNjA3MB4XDTI2MDcwNzA2
NDA0M1oXDTI3MDcwNzAxMTgyM1owMzExMC8GA1UEAxMoMDk0QTVFMkMxOTY2MDU4
NkRENDhGNTZENTA4MTBGODU0ODc0QTk4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMjNGd91LRpN9FfMPoEPd4i7VuVJF8z46ozPGqJEtRC9G2uS2P7V
RVkyiVhXEW8vh2dGPOzwg14EhDJzcuNmwi/TXaFlmlli9+P4TyuVhHOwPvUm369K
iUNhRAz+BWFUJ65PuHd5oM9hyJz70JAL0+bygwelJOGehQyPbR1I6Gx4AkSlKRGF
YIV2r2TNWys4ycG3W2WPqabJa1KLvEjy6+kliRdI0ri7xT9+p4PUWTTLQ41daxgF
/nC9QonXPS2cTIM00caU/XIMCA5W5b22SU2b6hD9+4eIt87T8p36BMqQ1ebZA4yP
5wgdShRe9e6EstRv40vPNADhKnhY4ejc5wMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQJSl4sGWYFht1I9W1QgQ+FSHSpjDAfBgNVHSMEGDAWgBSl8WdNDGnUJ0w0Ftf5
VbpDk2k2BzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTgyL3BmRm5UUXhwMUNkTU5CYlgtVlc2UTVOcE5nYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BmRm5UUXhwMUNkTU5CYlgtVlc2UTVO
cE5nYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81ODIvQ1VwZUxCbG1CWWJkU1BWdFVJRVBoVWgwcVl3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAn40ZDANBgkqhkiG9w0BAQsFAAOCAQEA
V3UIy/IUsIsgCkC64mlmbS+yP10pqK/lTNURMwuSkMkQcRapbWETt8I0guXEblEB
w8eCHx5TTlpDXPZ0umiYXoR4SitX4gI5sDbqR3hAlSr0JtOd9g3ZleMKJ9Wz8Hj/
0XJzZRO4eDkIp17IAE8Tuc1z4noK193LCQVTadt9dcwLMsYP7zJQpOml0RF+f88i
9r0ezaS8hmyO+U2dpfSTSAZ1ByT++LnqRHSzGQpHo5/2yelAv9cNLkjw1OpK/DdU
v6c2j/U9nza1XvnWa5zm11mM7h+H1rq2zXPV6bt1zvA/mXjoVMYOXQ5cMsE/Jhnp
JhidIBuEBNkDG8msbpEKsg==
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:29:11 2026 by rpki-client