Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/i30UxySSGwTfhVmX0EGMqzdHQ3w.roa
File:                     i30UxySSGwTfhVmX0EGMqzdHQ3w.roa (raw, json)
Hash identifier:          dvcDCVRMJU2oQjjXF29te0LAaDZi0Ll/kTeaLZ5sm1c=
Subject key identifier:   8B:7D:14:C7:24:92:1B:04:DF:85:59:97:D0:41:8C:AB:37:47:43:7C
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       94
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/i30UxySSGwTfhVmX0EGMqzdHQ3w.roa
Signing time:             Mon 27 Jul 2026 07:04:36 +0000
ROA not before:           Mon 27 Jul 2026 07:04:36 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        122.223.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 27 07:04:36 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=8B7D14C724921B04DF855997D0418CAB3747437C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:39:bf:57:a4:35:9a:70:eb:09:c4:b1:16:
                    cb:d4:a6:a9:e3:d4:cf:b6:ab:fc:77:8f:21:2d:8f:
                    d5:24:eb:2e:d6:d2:3f:2e:dd:86:45:71:84:21:bc:
                    df:e8:aa:ee:18:dc:4f:85:8c:8b:1b:5d:8e:a0:89:
                    14:bf:19:4f:14:33:e5:53:58:ce:bd:6c:ec:39:cc:
                    cc:82:f3:05:54:ea:fa:de:06:bf:dd:5e:42:81:d1:
                    57:ab:b3:45:62:6a:7c:ea:70:6d:bd:67:8b:19:7f:
                    d2:31:85:80:29:5f:34:f1:80:23:a5:e9:97:31:bd:
                    ce:20:30:51:4c:23:4b:19:3b:de:45:dd:14:d0:89:
                    2c:ee:12:a5:07:7b:14:35:1a:69:71:f4:5e:e8:12:
                    07:43:d1:e8:7f:69:73:21:86:b9:c6:c6:bf:e3:5a:
                    8e:79:33:11:a5:5d:14:3a:b3:67:ad:cf:be:17:a0:
                    4d:fe:27:7c:f1:ff:59:e6:7c:8e:dc:07:d4:07:90:
                    ee:c4:31:dc:22:f3:1c:aa:3d:e2:38:2c:29:83:43:
                    b2:d0:88:62:f1:fd:b0:cb:ec:82:43:ef:1f:fe:8d:
                    a4:fd:58:0c:4b:06:4a:a6:fb:33:6f:0b:ed:8d:9d:
                    3e:0a:4e:f5:2f:e9:9f:19:e4:20:77:1b:d9:6e:5c:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:14:C7:24:92:1B:04:DF:85:59:97:D0:41:8C:AB:37:47:43:7C
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/i30UxySSGwTfhVmX0EGMqzdHQ3w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:7d:4c:a4:89:13:a2:a7:7f:d9:f6:6c:79:cc:1f:f9:62:91:
         06:5a:56:5c:4d:ab:81:e7:51:c5:b6:21:3c:5c:38:2b:b5:06:
         6e:bd:a2:0a:54:7b:4f:4e:02:15:a3:63:9c:8a:82:81:78:9e:
         3a:70:19:65:ad:ab:5f:a9:19:00:21:b8:b9:d1:ed:c7:92:49:
         13:ae:ff:c8:f5:d6:63:3c:1d:dc:68:99:ff:5c:c3:2f:25:4a:
         2e:ba:28:77:64:6e:e3:36:64:85:ce:36:fc:67:e5:9f:89:d2:
         3c:77:c1:38:65:df:7f:e9:6c:b4:96:75:5b:36:7e:ab:06:92:
         1e:81:4f:25:83:d0:ce:20:e6:34:59:b8:2d:62:d5:97:21:22:
         ef:57:02:d2:98:fa:c3:91:27:6b:41:38:cd:8a:c6:e5:2e:e7:
         10:9f:f9:02:f5:e0:5e:8b:98:01:89:b3:87:93:66:08:50:4c:
         8e:3b:8a:c8:0c:c5:72:cc:17:e3:90:ac:3a:07:61:1a:b4:06:
         f7:d3:58:ba:de:8d:17:16:61:1a:fd:b6:dd:6a:33:2a:d3:a5:
         e6:ca:3d:52:6c:6c:00:52:15:ae:94:68:c7:45:f9:5c:6e:7c:
         7c:ae:19:29:e3:42:43:43:07:7a:a8:4b:f7:bb:64:74:00:fd:
         84:41:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:30 2026 by rpki-client