Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/dZWoVTMqEcDPdbL9dn2FjI4pUJw.roa
File:                     dZWoVTMqEcDPdbL9dn2FjI4pUJw.roa (raw, json)
Hash identifier:          Q5eiu881WoyqqfQkn96pzvYH/cLO2JRCQc/SOpk7+SA=
Subject key identifier:   75:95:A8:55:33:2A:11:C0:CF:75:B2:FD:76:7D:85:8C:8E:29:50:9C
Certificate issuer:       /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial:       08
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/dZWoVTMqEcDPdbL9dn2FjI4pUJw.roa
Signing time:             Tue 07 Jul 2026 06:47:25 +0000
ROA not before:           Tue 07 Jul 2026 06:47:25 +0000
ROA not after:            Wed 07 Jul 2027 01:18:23 +0000
asID:                     59107
IP address blocks:        219.100.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
        Validity
            Not Before: Jul  7 06:47:25 2026 GMT
            Not After : Jul  7 01:18:23 2027 GMT
        Subject: CN=7595A855332A11C0CF75B2FD767D858C8E29509C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:c7:57:d6:56:44:14:f3:b4:af:40:19:ae:
                    b5:5a:ee:ad:e4:37:a0:c5:d6:6c:cf:5a:e2:b9:b9:
                    7f:1e:6e:45:4d:f5:21:a9:47:36:f9:82:4a:77:64:
                    52:09:79:e9:b3:42:84:27:83:55:79:26:1e:22:bb:
                    6a:94:aa:88:ed:82:b4:98:c1:68:39:dc:0c:f9:01:
                    76:65:7f:a4:90:56:3b:e3:80:38:2a:c6:c1:0e:59:
                    19:45:e6:94:14:f8:13:98:5f:6a:67:83:b6:9d:89:
                    8d:ad:fc:ce:ca:20:8d:e4:25:86:5c:08:41:ec:30:
                    b0:16:d6:37:61:36:c8:ee:c0:b7:4b:4b:6e:cb:ec:
                    25:5c:a2:83:ad:c7:a3:39:dc:67:8c:a8:62:40:c3:
                    06:02:ef:bc:01:9e:4f:6c:25:81:d1:94:81:e9:fe:
                    f3:ff:a5:18:b8:db:4c:ac:24:6f:1a:64:19:71:9c:
                    f9:61:2a:1a:42:43:d2:cb:5b:50:3a:ab:d1:ff:6d:
                    35:c1:a7:18:e7:cb:08:95:89:b1:79:08:b6:5d:59:
                    45:64:8e:b7:16:3a:4d:34:70:75:7e:2a:f6:b1:82:
                    25:02:87:4e:2a:6b:e3:10:76:be:5d:db:3e:aa:8f:
                    6a:aa:ba:34:67:11:13:c3:3e:2a:64:cc:d4:c3:2d:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:95:A8:55:33:2A:11:C0:CF:75:B2:FD:76:7D:85:8C:8E:29:50:9C
            X509v3 Authority Key Identifier:
                keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/dZWoVTMqEcDPdbL9dn2FjI4pUJw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:6e:61:61:55:45:53:36:9f:a4:68:b3:30:30:88:96:65:
         c6:de:44:c1:8c:4f:9f:60:74:a7:3e:b2:07:bc:4d:35:01:12:
         88:53:ce:88:2b:a0:93:ca:d4:a6:11:97:e7:1a:e9:03:bf:5a:
         b4:0e:50:46:98:b9:c6:53:ce:75:fd:e9:f4:88:69:98:10:98:
         16:83:92:70:4d:65:0b:fe:4f:cb:df:35:4d:bd:70:a7:05:c7:
         68:cd:de:72:b6:59:e8:45:bc:08:be:c5:d4:fd:05:3f:6e:de:
         1a:0a:94:03:71:c5:8e:3b:a3:02:59:7f:fd:e4:eb:a2:d9:77:
         84:4f:2d:61:d7:a6:7e:d9:13:84:f3:00:4e:36:42:95:a0:20:
         cc:7f:76:e0:83:41:03:5f:ef:d1:43:83:5d:23:7d:51:62:f7:
         f3:e3:df:89:3a:2f:f4:9b:6c:08:8e:40:1f:08:0f:af:03:95:
         6e:d0:0d:d7:85:00:27:71:72:8e:a4:88:0b:46:fc:02:97:0b:
         11:1c:84:06:05:9c:a1:0b:3c:88:23:d9:31:45:e2:01:56:ec:
         a4:15:e7:e7:85:9f:d8:87:47:fe:e6:12:a8:12:a0:36:61:fa:
         ed:bb:47:c8:0f:6b:c2:40:58:8e:e0:6d:3a:5f:c2:21:4e:2e:
         d7:8e:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:28:25 2026 by rpki-client