Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/bOE-gqKm6wTLDzJ7XqfYo5z--oY.roa
File:                     bOE-gqKm6wTLDzJ7XqfYo5z--oY.roa (raw, json)
Hash identifier:          ZMES21eeKiRaYxQC82y89PETmz5Cr0UQleGp0q5rsuU=
Subject key identifier:   6C:E1:3E:82:A2:A6:EB:04:CB:0F:32:7B:5E:A7:D8:A3:9C:FE:FA:86
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       B9
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/bOE-gqKm6wTLDzJ7XqfYo5z--oY.roa
Signing time:             Tue 26 May 2026 08:50:32 +0000
ROA not before:           Tue 26 May 2026 08:50:32 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     131937
IP address blocks:        126.251.32.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 13:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: May 26 08:50:32 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=6CE13E82A2A6EB04CB0F327B5EA7D8A39CFEFA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:db:fc:2d:cc:72:2d:38:8c:df:31:45:16:
                    91:d8:d7:75:9d:3c:69:fc:8a:8e:e4:14:24:0c:d4:
                    31:65:75:55:53:47:2e:15:ae:b5:69:d9:65:19:6f:
                    08:50:16:2b:36:0d:ff:0d:2d:b0:3d:09:03:07:35:
                    53:75:2b:d3:98:c6:c2:47:cf:a6:37:0d:59:e7:31:
                    e7:78:2a:ee:59:90:f2:41:0e:70:2d:4f:c6:ff:8e:
                    a7:9f:49:b8:c6:ac:b8:34:26:b2:ec:da:15:c0:a1:
                    9b:51:25:b9:48:fb:03:d9:ca:1b:0a:76:c2:60:55:
                    9b:7c:c6:d1:63:0d:40:3b:17:11:db:3d:5e:14:50:
                    5f:94:8c:33:a9:d9:20:d0:01:61:1d:be:7d:64:e5:
                    ca:ae:5d:a7:d6:76:ae:06:b8:a4:bc:e0:c8:41:14:
                    dd:97:57:48:5c:d3:df:c5:e2:70:3b:da:f9:79:f3:
                    a5:bf:50:eb:00:bf:43:81:50:8a:cc:33:f8:c4:b4:
                    2e:65:be:54:c8:e4:3c:8d:13:ec:4e:74:9b:6e:64:
                    ea:7a:a6:c4:56:47:6f:ed:6e:95:f0:9d:54:95:f8:
                    06:98:91:99:a0:e7:8b:ed:c6:20:2e:49:96:07:fe:
                    c9:d4:14:5b:0d:5c:5c:a6:95:89:61:b1:f6:12:bd:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E1:3E:82:A2:A6:EB:04:CB:0F:32:7B:5E:A7:D8:A3:9C:FE:FA:86
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/bOE-gqKm6wTLDzJ7XqfYo5z--oY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.251.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:51:6e:8e:61:6f:9e:f4:c0:05:e9:b2:fa:e0:06:e8:a1:
         af:1b:8b:cd:92:48:1b:8b:75:04:2b:0c:25:61:63:82:4d:df:
         09:62:ad:03:f3:10:2d:46:5b:59:43:00:7e:16:52:7d:2c:2d:
         87:18:94:58:44:55:9b:54:58:cd:5e:bf:77:c4:8a:9a:24:05:
         55:dc:47:2c:04:6e:d3:ee:2b:5d:61:91:98:e4:ec:98:2e:c5:
         ef:a5:e4:cb:a7:ba:63:ed:ec:1c:ce:fc:47:d4:07:02:f2:9c:
         50:23:8e:b0:d7:c3:d1:f4:b1:d5:13:07:f7:14:d5:75:54:7c:
         61:57:c4:57:d2:ce:78:2c:ca:2b:fc:c7:4e:9d:74:8a:df:f3:
         c7:cd:35:a0:5a:ec:a8:9b:c3:bb:af:77:a0:e3:e4:d0:3d:a2:
         9f:3a:cf:45:97:6c:95:77:e6:c3:fd:07:16:f2:27:02:02:0c:
         cc:ec:1f:38:97:ec:22:4f:98:d5:75:72:fc:dd:59:93:c2:8a:
         3c:d5:22:5e:fb:a1:00:13:f7:0c:75:dd:3e:ed:5d:05:0f:aa:
         ba:20:4b:64:63:16:0f:25:0b:3f:33:29:81:2f:cd:9e:e6:7c:
         1d:b7:ea:f7:2a:c6:d7:46:47:c8:86:21:b4:41:f1:c5:a6:f6:
         be:bd:ee:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:46 2026 by rpki-client