Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/wIqgsQ8TZMJI8Wvezgy4tzz-FzQ.roa
File:                     wIqgsQ8TZMJI8Wvezgy4tzz-FzQ.roa (raw, json)
Hash identifier:          LDoKgDOmDf555JhTMfAG7HmzRS+K6FD7r7i6rK6f4OQ=
Subject key identifier:   C0:8A:A0:B1:0F:13:64:C2:48:F1:6B:DE:CE:0C:B8:B7:3C:FE:17:34
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       68
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/wIqgsQ8TZMJI8Wvezgy4tzz-FzQ.roa
Signing time:             Wed 03 Jun 2026 18:18:53 +0000
ROA not before:           Wed 03 Jun 2026 18:18:53 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        122.208.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 13:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun  3 18:18:53 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=C08AA0B10F1364C248F16BDECE0CB8B73CFE1734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:92:71:37:dc:02:80:b7:3e:10:de:8f:ca:
                    7b:30:62:3f:11:f1:60:e4:b5:03:3c:1a:48:1c:fe:
                    4f:48:51:76:e1:73:78:41:29:3b:31:c6:11:6e:b9:
                    58:1c:e2:2e:34:e9:19:5e:a9:8e:1b:f6:ba:7e:0d:
                    fa:2c:1e:d2:71:d3:84:32:ef:8f:53:b2:34:7c:7e:
                    91:9c:c5:27:5b:bd:16:2f:52:35:ac:f5:f0:bb:d4:
                    43:08:9d:3c:5a:2e:0d:36:79:a5:b3:5a:e6:09:3a:
                    7a:be:d7:a2:25:c0:25:35:bd:5f:73:c8:35:e2:69:
                    4f:a4:91:1e:40:65:04:ea:b1:3c:3c:d6:95:ed:6c:
                    c8:86:95:90:64:68:0a:e8:7a:56:cf:a6:ad:cd:aa:
                    c0:b7:94:32:e7:2f:85:a8:25:69:bf:aa:81:97:15:
                    18:68:24:f6:a8:a5:27:82:78:02:58:8c:b0:dc:11:
                    97:8a:8b:ad:25:c2:d9:99:d5:75:55:63:ce:b5:e5:
                    61:f5:ba:92:ba:4e:f4:b8:2a:60:7c:88:df:d0:58:
                    27:2a:a4:21:97:a1:3f:e4:a8:e8:a6:7a:05:a3:8d:
                    e3:0b:4c:5c:7b:c0:b8:23:2c:76:28:f8:89:72:fe:
                    a3:e3:34:13:31:9f:71:45:cc:16:62:37:02:b8:55:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8A:A0:B1:0F:13:64:C2:48:F1:6B:DE:CE:0C:B8:B7:3C:FE:17:34
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/wIqgsQ8TZMJI8Wvezgy4tzz-FzQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.208.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:6c:cf:b4:26:a0:e7:cd:0e:d1:02:7d:7a:61:94:f2:e1:
         a5:a6:88:9c:d5:59:8e:41:01:94:f8:ce:d6:3d:4b:ce:28:9d:
         d3:23:32:a3:ff:bc:ff:ba:d9:14:1a:39:fb:c0:a7:23:fb:74:
         7b:df:50:cd:7a:a7:20:e6:f1:d4:d0:2f:fb:e3:44:e2:fc:74:
         07:d4:11:c2:f0:7e:07:b7:79:84:75:a6:9c:b0:05:1c:dd:f3:
         fe:47:bf:fa:08:5a:9e:1e:12:71:97:b2:61:c6:6b:f3:b0:a0:
         17:12:4a:84:54:dc:df:fb:3d:9c:6c:cb:40:c0:ac:c2:fa:ea:
         69:24:44:ad:00:4f:d8:a8:ca:dd:1e:19:2f:29:e3:49:97:59:
         4b:92:d3:7e:e4:6f:3d:b8:56:9a:86:17:a3:11:72:59:b8:58:
         08:e8:9f:28:b9:f1:e9:26:2b:16:7c:ad:03:e7:30:5f:a2:8e:
         1c:c0:1e:3c:54:bf:12:be:5e:f5:60:9d:50:63:99:4e:c7:24:
         65:a3:4f:6e:eb:f0:9b:e9:5a:0d:3d:ae:46:1d:42:51:96:ab:
         04:9b:87:5a:47:be:b8:08:f8:7e:ce:f4:9c:64:0d:82:f6:96:
         bf:d6:3e:89:f8:fb:81:0f:31:c6:17:89:6e:b4:cc:e2:cc:dd:
         79:27:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:37:07 2026 by rpki-client