Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/gmw4rPHDXagOmK6l2W01wC1e-54.roa
File:                     gmw4rPHDXagOmK6l2W01wC1e-54.roa (raw, json)
Hash identifier:          gQmnP1Cfq+4jQpBmBGeCTcELKi52BzdGOimtwe2Dd60=
Subject key identifier:   82:6C:38:AC:F1:C3:5D:A8:0E:98:AE:A5:D9:6D:35:C0:2D:5E:FB:9E
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       6B
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gmw4rPHDXagOmK6l2W01wC1e-54.roa
Signing time:             Wed 03 Jun 2026 18:57:47 +0000
ROA not before:           Wed 03 Jun 2026 18:57:47 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        122.222.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun  3 18:57:47 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=826C38ACF1C35DA80E98AEA5D96D35C02D5EFB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:82:65:ce:0e:87:7e:9f:57:a6:21:ba:ad:
                    dc:e9:44:c2:78:25:04:ee:ea:7d:ed:2c:ce:c3:05:
                    f7:14:e2:a2:ff:d7:8b:46:dd:35:e0:30:5a:ad:ec:
                    ae:21:d5:aa:b4:0f:e3:e5:9d:8e:8e:24:99:eb:2d:
                    aa:83:62:51:c1:b5:e3:e1:87:77:b0:b1:4b:8d:46:
                    92:84:93:0d:01:a5:eb:59:66:ca:00:59:6d:46:c2:
                    42:47:3c:20:33:79:70:22:cf:81:07:a6:8e:78:af:
                    ad:9d:f3:57:2e:c0:fe:19:bd:d9:c3:44:c4:91:dd:
                    4c:35:f0:34:72:94:be:72:0b:49:f3:91:21:0f:75:
                    35:66:2d:6b:57:94:7c:6e:c7:cf:5c:5f:5e:f2:a1:
                    25:86:d1:a8:03:04:f5:d2:34:2d:e0:25:87:e0:c1:
                    2f:2b:23:bc:ad:2c:16:ae:53:37:00:d1:be:35:87:
                    37:b5:22:fa:c5:c2:49:b5:f1:e5:be:dc:40:41:a9:
                    84:db:e8:4f:fd:d1:67:04:3a:ab:ff:86:7d:88:95:
                    92:af:e9:d0:5b:87:74:3f:3f:82:c2:84:18:fa:12:
                    fe:c2:20:e6:bd:d2:c2:df:1e:0c:a0:d9:06:7a:ba:
                    d9:a2:4c:4d:0a:64:70:33:4a:66:40:96:f9:c9:06:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6C:38:AC:F1:C3:5D:A8:0E:98:AE:A5:D9:6D:35:C0:2D:5E:FB:9E
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gmw4rPHDXagOmK6l2W01wC1e-54.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.222.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:4c:a4:84:9f:81:69:a7:64:a0:f4:60:57:29:70:84:87:
         2c:01:3b:b2:04:64:83:d9:a1:49:cb:6a:3f:f6:7c:b7:26:ad:
         3f:8c:f6:9e:77:4d:6e:5c:68:d5:22:88:dc:e8:2c:d0:e2:a3:
         81:d4:a6:d9:40:5b:d6:f8:47:67:43:04:29:bd:e8:e1:d9:74:
         a4:a9:12:7c:eb:58:37:ab:42:2c:9d:1e:6a:71:af:27:a5:34:
         5c:a7:76:c3:44:eb:06:69:b1:c9:68:03:ea:79:d1:6f:94:ab:
         87:66:30:f9:e3:61:7c:31:e7:32:d4:53:16:ca:b5:05:c4:ff:
         3c:59:12:1a:1e:a9:23:62:be:7b:71:19:3f:0c:14:44:37:6a:
         0c:dc:f0:a6:0d:5d:f2:cf:2a:1e:eb:68:f9:6f:e8:b6:51:8a:
         62:8d:d2:8c:94:37:0f:65:50:4d:b1:e0:3e:f7:58:d0:90:75:
         45:ce:21:ef:41:4e:ee:52:4f:49:cc:52:86:b6:ad:5c:78:d4:
         05:db:43:ab:8f:dc:34:87:20:cf:12:66:4f:e2:ee:ad:2f:29:
         71:69:e0:9c:41:b2:a2:62:4b:aa:f4:3b:d6:f2:2d:2a:ea:34:
         23:42:e4:c2:7d:b1:97:02:91:51:92:ec:8d:95:31:c5:82:58:
         71:a2:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:11 2026 by rpki-client