Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/EQKPix24h4R-tVOyXTdvZQ2vWdg.roa
File:                     EQKPix24h4R-tVOyXTdvZQ2vWdg.roa (raw, json)
Hash identifier:          GcNgAk/AEy14azXoD1wLzMtkAWS90Bb0NX1/wGESec0=
Subject key identifier:   11:02:8F:8B:1D:B8:87:84:7E:B5:53:B2:5D:37:6F:65:0D:AF:59:D8
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       BA
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/EQKPix24h4R-tVOyXTdvZQ2vWdg.roa
Signing time:             Tue 26 May 2026 08:50:32 +0000
ROA not before:           Tue 26 May 2026 08:50:32 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     131937
IP address blocks:        126.251.112.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: May 26 08:50:32 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=11028F8B1DB887847EB553B25D376F650DAF59D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:c9:cd:c0:9d:61:0f:46:97:71:b2:17:d4:
                    ab:8e:63:28:31:09:a6:c2:3f:81:42:24:28:b1:45:
                    e3:9a:fc:ca:82:4f:09:1a:f0:cf:91:65:0b:c2:c9:
                    c4:55:96:a4:12:d3:e7:1d:c4:86:28:9b:67:c2:89:
                    52:77:b4:d7:dd:40:85:4a:a0:53:19:87:d7:96:26:
                    66:6d:65:90:94:9c:d8:92:8d:9e:07:71:d1:62:9a:
                    90:09:2f:43:bc:c9:19:51:65:c3:b5:da:fa:33:86:
                    fe:a5:d9:67:44:f4:1d:e8:72:2e:3b:44:ad:b9:9a:
                    c0:55:93:d1:e5:fb:78:5e:a1:9f:3c:80:1d:69:84:
                    6e:bf:e5:75:46:df:c2:f8:e4:cc:de:ea:97:d2:2a:
                    0c:18:31:db:3b:67:93:48:ea:48:94:a3:b7:95:c2:
                    27:a2:42:31:bb:94:ea:3f:25:eb:b0:e9:62:2e:cf:
                    39:63:3d:56:6d:39:e3:85:b7:ce:17:ab:65:05:22:
                    f0:94:54:be:92:5b:f0:d2:cd:80:9a:b2:35:5a:da:
                    e1:44:d2:8b:ec:10:f0:76:44:c9:0e:f8:25:10:31:
                    e4:a6:97:c0:db:bb:41:75:ff:3e:be:7e:94:48:78:
                    c8:61:5f:90:f8:a7:0c:c5:40:2f:52:b3:45:e6:59:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:02:8F:8B:1D:B8:87:84:7E:B5:53:B2:5D:37:6F:65:0D:AF:59:D8
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/EQKPix24h4R-tVOyXTdvZQ2vWdg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.251.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:72:46:c2:e8:cd:47:b1:24:cb:a7:f8:65:c3:5c:ae:64:
         40:2e:12:29:6f:76:e3:d2:19:1e:35:9c:db:bb:70:f3:5e:b9:
         f7:82:99:f4:d2:a6:a9:b8:09:95:2a:20:93:68:17:40:c9:42:
         b4:f4:ed:af:05:3b:8a:67:27:45:c5:af:47:8e:2a:05:eb:75:
         ef:f4:e8:97:44:ed:7c:30:89:d4:fc:74:62:cc:33:31:e3:8f:
         dc:9d:f0:19:2d:0e:ef:d1:59:58:a1:4b:39:7e:71:56:9a:95:
         64:89:4d:b7:51:ef:45:20:59:1d:18:75:28:e9:99:29:de:46:
         e8:e6:45:af:f2:70:57:b7:1c:a0:91:29:6e:7c:80:25:cd:6a:
         34:83:64:c3:dd:9e:ef:b0:ad:8d:e7:25:2c:fe:21:ab:ea:df:
         ef:74:d3:4e:54:4a:60:a1:81:b2:45:1e:07:03:8a:a5:7b:37:
         42:15:30:44:09:4b:1c:61:47:f6:a8:46:15:6e:67:95:16:98:
         b7:18:f8:73:2c:2c:1c:fd:ae:da:fe:6a:15:a3:ea:a9:c6:0c:
         cb:0c:dd:e3:8f:26:da:bc:71:4b:55:21:d6:87:57:da:5f:91:
         b2:da:af:ae:aa:c6:dc:49:98:ba:c8:1e:b6:6d:92:c3:3e:ea:
         d5:ad:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:56 2026 by rpki-client