Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20295/7M7QZVAugXByid5d42A5pAgCc_U.roa
File:                     7M7QZVAugXByid5d42A5pAgCc_U.roa (raw, json)
Hash identifier:          9HU7mz9az1kGlY5XqWZrbW6Gw0b9imMb34DMyTvMzRA=
Subject key identifier:   EC:CE:D0:65:50:2E:81:70:72:89:DE:5D:E3:60:39:A4:08:02:73:F5
Certificate issuer:       /CN=66E704038D2265B5B15E5BAD196BD9C390F40A17
Certificate serial:       08
Authority key identifier: 66:E7:04:03:8D:22:65:B5:B1:5E:5B:AD:19:6B:D9:C3:90:F4:0A:17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZucEA40iZbWxXlutGWvZw5D0Chc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/7M7QZVAugXByid5d42A5pAgCc_U.roa
Signing time:             Wed 17 Jun 2026 08:19:45 +0000
ROA not before:           Wed 17 Jun 2026 08:19:45 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     138352
IP address blocks:        162.4.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZucEA40iZbWxXlutGWvZw5D0Chc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E704038D2265B5B15E5BAD196BD9C390F40A17
        Validity
            Not Before: Jun 17 08:19:45 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=ECCED065502E81707289DE5DE36039A4080273F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:38:54:71:21:87:1b:ce:e7:3a:bf:b2:a8:
                    19:b2:e9:bc:cb:c3:86:2b:95:73:bc:f4:9d:bb:a8:
                    e5:d2:08:0a:e9:52:e6:a2:23:e6:a4:d1:99:00:25:
                    ad:77:e2:aa:48:1b:34:81:1b:56:71:bd:38:62:42:
                    0b:a2:fc:27:62:09:7c:58:15:2f:67:bf:36:58:26:
                    f5:0e:01:35:97:34:37:a3:6f:7d:c3:ff:a0:f6:43:
                    47:67:5b:3f:ae:e7:8d:96:f6:b5:af:a2:5f:43:31:
                    44:99:3e:a9:1f:35:ee:62:41:03:87:1a:8b:97:ec:
                    7c:fa:02:ab:aa:3a:3a:08:c4:93:7f:54:0d:d8:2d:
                    46:0c:28:6c:b7:57:b9:72:9f:7f:b0:1b:a9:b6:3c:
                    af:e6:b9:4b:97:64:a9:43:43:60:0a:50:d9:41:45:
                    21:b4:e6:57:e1:90:83:6d:06:d6:fc:8b:f8:33:b6:
                    eb:b2:57:5c:b6:3c:da:1d:aa:d6:89:68:d2:47:67:
                    47:6b:3b:c7:82:92:cd:9a:3a:8e:6e:65:2b:81:2e:
                    c8:43:f2:e3:67:34:95:49:bc:0d:c2:db:c3:85:b5:
                    02:ae:3d:6b:75:f8:20:72:85:5f:2a:0c:9f:4b:19:
                    73:17:95:9a:b8:a2:b0:8c:2b:65:d7:b8:ed:1e:34:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:D0:65:50:2E:81:70:72:89:DE:5D:E3:60:39:A4:08:02:73:F5
            X509v3 Authority Key Identifier:
                keyid:66:E7:04:03:8D:22:65:B5:B1:5E:5B:AD:19:6B:D9:C3:90:F4:0A:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/ZucEA40iZbWxXlutGWvZw5D0Chc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZucEA40iZbWxXlutGWvZw5D0Chc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20295/7M7QZVAugXByid5d42A5pAgCc_U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:55:2e:53:99:8e:34:ba:e5:f7:fd:e9:de:91:bb:0e:85:a1:
         e1:55:9b:68:c0:c6:c2:15:98:82:fd:38:c8:7f:3f:b0:13:0b:
         03:4d:27:e5:15:e1:f2:fe:7a:09:a5:e1:3b:47:5c:bc:74:a6:
         77:0c:05:41:1c:e8:cf:3d:02:81:5d:a9:9a:58:83:72:dd:1b:
         d9:5a:40:5d:b6:af:d9:96:26:b5:8b:ec:1a:93:11:43:81:9d:
         63:9e:a2:80:5b:b5:c9:98:1a:7d:95:cb:5e:6d:c1:87:8d:c6:
         5d:33:2d:72:40:98:6a:74:74:a1:be:f1:c9:7d:73:31:54:f1:
         de:fa:ed:b4:cc:be:37:59:00:99:69:9e:5a:76:de:02:8b:42:
         c9:82:c1:d4:66:8d:b1:c0:65:ba:2e:9e:cc:9f:c8:1a:4c:7c:
         9f:bb:91:68:c9:08:c1:f7:c5:50:a0:06:7d:b3:43:27:5f:d1:
         4f:26:f8:7b:11:be:45:b9:8b:6e:90:ff:96:a6:43:cd:52:86:
         d2:53:23:73:7c:74:62:c7:81:20:c6:8e:f6:1f:b7:24:8f:9f:
         27:24:be:e7:a0:75:1c:0d:65:a6:4e:3c:8d:d4:98:bd:9e:55:
         b8:87:15:0a:22:60:60:c2:3b:99:a5:a2:b9:3e:14:39:af:18:
         af:76:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:49:14 2026 by rpki-client