Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/_PfsXxhbcQ_IucNnqn21M2YN2rs.roa
File:                     _PfsXxhbcQ_IucNnqn21M2YN2rs.roa (raw, json)
Hash identifier:          iSnjPJ5ez+wpMRs8GFoGFq0xlIaelUWgNp2ffxnT4HU=
Subject key identifier:   FC:F7:EC:5F:18:5B:71:0F:C8:B9:C3:67:AA:7D:B5:33:66:0D:DA:BB
Certificate issuer:       /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial:       07
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/_PfsXxhbcQ_IucNnqn21M2YN2rs.roa
Signing time:             Tue 07 Jul 2026 06:47:25 +0000
ROA not before:           Tue 07 Jul 2026 06:47:25 +0000
ROA not after:            Wed 07 Jul 2027 01:18:23 +0000
asID:                     59107
IP address blocks:        150.9.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
        Validity
            Not Before: Jul  7 06:47:25 2026 GMT
            Not After : Jul  7 01:18:23 2027 GMT
        Subject: CN=FCF7EC5F185B710FC8B9C367AA7DB533660DDABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:f9:c9:d6:40:fa:62:a8:b2:a3:cd:e9:33:
                    c8:3e:a1:f7:ca:25:a6:12:cf:f3:26:d6:17:3e:d8:
                    75:da:00:af:f5:4e:75:ee:63:d6:2f:ef:07:d9:07:
                    d6:ce:bb:28:a0:e9:b0:6c:c3:ab:38:f2:7d:a4:1b:
                    b9:c4:1c:f0:79:60:5d:93:04:88:26:33:c4:c6:19:
                    64:cd:2b:c2:cc:54:f6:78:53:95:54:54:0f:50:ca:
                    2b:d9:e0:fd:dc:3c:57:2a:3a:2f:1c:61:4e:3f:21:
                    e6:13:94:68:63:35:d3:df:ed:aa:ae:b2:20:3d:00:
                    5d:98:9a:8b:7a:09:16:01:33:f9:a9:b7:04:42:f9:
                    ce:a7:8c:28:58:fa:9b:dd:3f:c9:95:7c:3d:39:c2:
                    e9:3c:97:17:48:d8:b6:77:6e:2f:19:9e:c6:7f:c6:
                    5a:b3:24:41:df:b3:42:3c:29:dd:6e:3f:3e:a1:5a:
                    eb:e0:91:fe:e1:f7:5a:2e:d3:05:df:e7:5c:d2:7d:
                    e8:8d:cd:44:06:b4:10:85:d8:02:91:2a:0c:c3:e6:
                    65:01:2b:14:20:8b:56:72:0f:bc:cf:74:7b:31:5c:
                    55:32:1f:d1:f0:4d:25:cf:1b:bb:60:e5:aa:16:06:
                    42:d7:23:01:ae:65:e9:c1:79:7d:e9:db:cd:77:85:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:EC:5F:18:5B:71:0F:C8:B9:C3:67:AA:7D:B5:33:66:0D:DA:BB
            X509v3 Authority Key Identifier:
                keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/_PfsXxhbcQ_IucNnqn21M2YN2rs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:91:fe:bf:c2:d7:72:e1:52:31:1b:3e:f0:df:71:e3:04:02:
         7f:32:7f:3e:ea:90:cd:c0:0b:2b:9f:19:b6:75:7a:72:bd:86:
         5d:c6:5b:45:bb:76:58:b7:70:d9:df:4f:78:2b:22:26:bc:7a:
         31:19:9e:9b:00:aa:11:e6:6a:fe:36:df:e5:b5:f6:63:31:e0:
         4c:1e:91:3b:38:d1:7a:b7:1a:2f:57:ed:a3:35:56:cd:8c:d7:
         40:ac:13:71:7a:c9:df:dc:ce:30:60:1f:59:d9:8b:94:99:60:
         39:25:3d:9a:ee:61:4f:a5:b8:bb:ce:0b:6e:1c:0a:a5:96:0f:
         04:cd:d8:40:84:64:26:a5:9c:ed:b0:bc:ad:ed:96:77:62:21:
         2d:ca:7b:d9:d9:3f:b6:7d:36:cb:28:a2:41:1d:d6:1a:90:c2:
         27:00:12:19:1d:ab:fc:43:44:38:9e:27:fe:bd:eb:0a:91:5b:
         ef:5e:1a:5e:f2:9e:0f:2b:77:4e:91:f1:00:9c:a8:fa:9f:d9:
         9e:17:b3:e1:a5:b2:40:78:f8:a4:4e:be:43:4b:af:2e:69:56:
         71:5c:38:5e:9b:5a:42:45:e7:fa:e4:fb:44:a1:19:c6:35:6e:
         28:08:a7:5e:5e:2c:ea:2d:19:de:e2:00:aa:96:65:c9:4b:12:
         77:7c:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:29:10 2026 by rpki-client