Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/LnjggD-DqMtG0iUv_to1RwpHZ-0.roa
File:                     LnjggD-DqMtG0iUv_to1RwpHZ-0.roa (raw, json)
Hash identifier:          VO2aNp7bHZzh3L2w0+Ku1pRjhf6eEFU7C7VSkq6cxAw=
Subject key identifier:   2E:78:E0:80:3F:83:A8:CB:46:D2:25:2F:FE:DA:35:47:0A:47:67:ED
Certificate issuer:       /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial:       03
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/LnjggD-DqMtG0iUv_to1RwpHZ-0.roa
Signing time:             Tue 07 Jul 2026 06:40:47 +0000
ROA not before:           Tue 07 Jul 2026 06:40:47 +0000
ROA not after:            Wed 07 Jul 2027 01:18:23 +0000
asID:                     59107
IP address blocks:        126.52.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
        Validity
            Not Before: Jul  7 06:40:47 2026 GMT
            Not After : Jul  7 01:18:23 2027 GMT
        Subject: CN=2E78E0803F83A8CB46D2252FFEDA35470A4767ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:54:02:ea:1b:9c:41:ef:09:13:48:a8:07:
                    29:82:01:93:cb:33:9e:9c:21:7f:31:bf:d3:5e:b8:
                    db:cc:4d:51:b4:f5:2e:7b:ce:dd:7e:3a:43:f1:72:
                    82:99:36:25:4c:28:6b:68:87:e2:a5:74:35:f4:00:
                    b4:64:81:5d:ce:29:9f:2c:e3:7d:d3:b1:25:a9:9c:
                    fc:8c:0f:3f:d1:1e:04:0e:62:1d:dd:d9:36:86:0c:
                    61:08:71:d1:1d:4e:60:0e:7c:03:67:52:c0:92:5e:
                    05:74:85:bd:d9:ed:98:41:56:1b:f1:cd:ba:a1:a3:
                    cd:46:ee:81:3a:b6:2b:f8:86:0f:49:f3:0d:35:eb:
                    14:1b:f7:c9:b1:f2:77:ca:ac:74:82:b6:26:89:21:
                    3b:21:fe:12:76:7f:1f:09:b5:be:6a:25:c8:71:bc:
                    9f:58:1f:05:8f:04:9e:35:19:85:68:42:93:9a:ef:
                    ae:9b:56:ea:85:6b:4e:0b:f6:37:91:04:e6:c5:ce:
                    78:01:7e:66:5c:80:20:64:aa:80:61:96:b1:c7:2d:
                    0b:f3:88:81:e1:7a:df:4d:9d:d4:33:4a:69:5a:b5:
                    9c:b4:6c:19:a8:45:33:82:bc:b0:30:38:32:09:b5:
                    10:f9:c6:9b:c0:3a:8e:71:83:b5:41:d9:81:7c:22:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:78:E0:80:3F:83:A8:CB:46:D2:25:2F:FE:DA:35:47:0A:47:67:ED
            X509v3 Authority Key Identifier:
                keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/LnjggD-DqMtG0iUv_to1RwpHZ-0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:45:3a:13:6c:d8:8c:e7:2d:03:31:95:24:bd:8e:bd:1a:
         01:48:b5:57:75:95:ab:14:aa:81:91:87:93:94:10:3b:74:c9:
         e5:cc:a6:e0:37:10:0e:8c:e3:d7:30:7a:29:7d:39:13:fa:37:
         f4:22:7d:03:db:2f:8d:ea:51:d4:c4:50:78:a7:c7:cd:01:10:
         9a:9d:5a:61:a3:e6:29:c2:de:81:07:4e:ad:91:fc:e2:16:64:
         c2:75:e2:0e:00:8f:49:74:18:ae:f6:29:71:c5:5c:81:5c:cc:
         e6:d3:96:6b:8c:50:01:e2:62:80:55:cb:84:93:46:e0:cf:39:
         1a:5f:52:bc:44:08:87:d9:e9:ea:ba:55:85:d0:8a:66:40:11:
         a1:fe:da:56:5d:22:e1:7e:27:09:f8:fd:1a:cf:82:15:58:5d:
         52:a4:6e:43:e4:ad:d4:48:a4:16:89:f7:a1:90:07:8b:a3:5e:
         70:e1:80:e0:0b:f0:2c:de:59:24:5e:36:de:fa:32:c4:dd:1d:
         f8:df:70:3c:60:23:c4:e2:35:a0:5c:d9:60:4a:b9:9e:b5:61:
         21:55:9c:c3:dd:58:1e:39:19:24:ce:bb:8c:9c:60:fe:4d:bc:
         69:c7:0a:11:e7:7e:02:ce:c5:ab:7d:c6:06:26:65:93:fc:a3:
         27:e4:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:30:16 2026 by rpki-client