Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/4_voevI-VBCNcIFlTvo1NhkJKFk.roa
File:                     4_voevI-VBCNcIFlTvo1NhkJKFk.roa (raw, json)
Hash identifier:          e2glBBBXUjVX0AxCJtwq9BYgPHYh4OJxXBXwZoR/IWM=
Subject key identifier:   E3:FB:E8:7A:F2:3E:54:10:8D:70:81:65:4E:FA:35:36:19:09:28:59
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       93
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/4_voevI-VBCNcIFlTvo1NhkJKFk.roa
Signing time:             Mon 27 Jul 2026 06:56:29 +0000
ROA not before:           Mon 27 Jul 2026 06:56:29 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        122.223.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 27 06:56:29 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=E3FBE87AF23E54108D7081654EFA353619092859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:94:e3:58:95:c2:f1:ca:af:c9:fa:63:ec:
                    83:1b:b6:4b:25:c2:8a:63:76:f4:56:94:ff:f7:72:
                    69:4c:16:de:0c:bf:7d:8d:8a:24:28:2e:e9:88:6d:
                    ff:3e:b8:6c:72:59:c6:25:25:5a:d7:4c:1d:2f:19:
                    82:70:65:e8:f6:8f:44:53:77:61:a0:fe:7d:8d:31:
                    97:e4:5c:15:53:49:66:d6:bb:e6:0e:78:d8:da:91:
                    ac:79:76:bc:a5:d1:39:76:e7:4f:12:c9:1c:34:57:
                    10:b9:c6:bb:0b:5e:f8:0c:db:9a:1a:0c:10:fe:4f:
                    12:86:1c:29:dd:77:f4:bf:f3:70:21:88:77:45:77:
                    8f:5b:5a:0c:b9:2e:cd:5f:8a:fc:e3:c1:d0:00:fc:
                    30:71:bc:8b:49:b4:e0:16:ed:3f:70:8b:b1:63:43:
                    c9:aa:cc:b5:51:95:0b:8c:a4:12:88:b3:3d:f1:76:
                    75:77:08:c9:f4:35:21:03:da:4f:e7:26:40:78:3f:
                    9f:c7:e5:a5:db:53:1e:ee:21:c0:fc:94:1a:3f:38:
                    8c:50:24:3b:7b:b9:a7:c8:9c:5b:9f:6e:33:5f:7a:
                    62:cc:13:fe:91:5f:c3:a5:96:28:61:a5:9d:36:af:
                    51:98:a6:f7:20:b7:29:8b:fe:ff:1a:a3:55:08:9f:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:E8:7A:F2:3E:54:10:8D:70:81:65:4E:FA:35:36:19:09:28:59
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/4_voevI-VBCNcIFlTvo1NhkJKFk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:6b:57:b9:f3:ca:5d:32:3b:74:ba:b2:e2:3a:05:e0:9d:
         44:8b:da:77:04:7f:17:b9:11:ea:08:b2:8b:85:50:7d:12:89:
         79:6a:34:a2:e4:2b:5c:8a:da:5d:03:9b:3a:83:fa:45:b1:77:
         b2:43:42:89:aa:5c:8c:07:af:4b:6c:ee:48:4b:d1:87:56:38:
         48:a0:a1:23:ec:a2:5a:b6:b2:13:7b:28:ac:5a:aa:72:9d:7c:
         88:56:ac:ee:cb:59:3b:b9:b9:b3:dc:b7:fa:d1:d9:5b:19:70:
         b6:02:c5:6d:31:73:a3:81:03:14:8a:d4:4e:8a:f7:ba:16:56:
         c3:da:b8:4a:79:88:ec:0d:0d:77:dc:07:1e:83:05:c6:fd:41:
         24:79:3c:13:5f:a0:fc:c3:09:ca:99:d5:ce:b0:d1:d3:7a:57:
         6c:ac:9e:43:70:0a:a1:0b:b7:46:1e:5a:c5:fd:26:f8:62:a2:
         c7:fc:f7:35:db:4c:d1:e3:12:22:e2:44:a6:d6:12:05:cb:02:
         4a:1e:13:40:32:79:d8:21:a7:1c:5d:6d:c0:4e:70:13:2c:eb:
         0d:eb:78:90:6a:ba:eb:1d:d3:84:c4:e1:7c:72:b4:dc:6e:59:
         81:bc:e5:63:06:40:e9:57:8f:01:17:92:7d:53:46:df:0c:c2:
         69:3a:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:02:55 2026 by rpki-client