Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/CE59lusxZlesootgSk0X-tbrCvk.roa
File:                     CE59lusxZlesootgSk0X-tbrCvk.roa (raw, json)
Hash identifier:          KWJsDJuy7FWDsp0L8ihFhFnwVGoBY9+P1qxPCRxsTmk=
Subject key identifier:   08:4E:7D:96:EB:31:66:57:AC:A2:8B:60:4A:4D:17:FA:D6:EB:0A:F9
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       F2
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/CE59lusxZlesootgSk0X-tbrCvk.roa
Signing time:             Tue 31 Mar 2026 07:39:00 +0000
ROA not before:           Tue 31 Mar 2026 07:39:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        122.130.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=084E7D96EB316657ACA28B604A4D17FAD6EB0AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:26:df:9f:9c:32:96:4c:5e:20:d9:f8:66:
                    37:2c:c0:23:24:a4:7c:d9:22:3c:9b:02:64:ff:f6:
                    3c:63:82:fc:20:06:8d:8b:75:f9:38:19:bc:05:7f:
                    fa:e6:13:f2:ea:3b:9b:70:24:df:d8:af:01:e2:b9:
                    ec:f9:45:dc:b7:85:cb:7c:6a:83:86:aa:76:5a:7f:
                    64:cd:57:6c:15:b7:e2:ba:7b:75:01:42:c7:6c:05:
                    8b:9d:25:e8:87:fe:41:a5:c5:bd:b0:ae:88:d8:ce:
                    f1:e1:a5:c3:e2:4d:95:d4:e8:06:45:a6:e7:f7:bb:
                    84:d4:31:e4:3b:4d:d2:a3:b0:bb:09:76:41:5c:fa:
                    0e:f7:de:d0:2f:5d:06:9a:4c:c0:fe:6d:35:7f:b1:
                    5c:8c:9b:fa:45:ae:50:a3:43:2c:a8:02:3f:4c:07:
                    85:5a:30:49:59:7c:72:a2:bd:5e:9f:6f:99:1a:8a:
                    79:a7:a1:95:5e:fa:f3:6c:2b:2e:2f:71:31:32:c1:
                    c5:be:5b:ce:78:c8:9a:27:00:6f:90:5d:a2:d3:05:
                    3a:b4:19:25:4c:ef:21:6f:5f:8d:1a:89:f1:b4:26:
                    24:44:38:21:e4:24:6e:f6:31:7f:8d:0e:9d:0d:41:
                    ae:5e:01:3b:df:7f:4e:35:60:9f:fe:45:d6:b9:da:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4E:7D:96:EB:31:66:57:AC:A2:8B:60:4A:4D:17:FA:D6:EB:0A:F9
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/CE59lusxZlesootgSk0X-tbrCvk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.130.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         63:59:4c:ec:9b:0c:19:ff:44:74:09:c4:17:2a:c7:0f:08:49:
         91:f4:06:79:ad:50:e4:53:70:0c:7c:7c:45:e0:9f:ad:53:3d:
         41:f2:19:4d:c3:e5:6c:14:0f:83:c2:35:40:2b:4b:29:f8:7d:
         2c:0b:e7:0e:cb:f6:20:ae:ff:ae:9d:9f:cb:10:81:b9:fd:29:
         80:ed:c0:6c:01:25:f4:a5:f7:3d:6b:09:e8:9d:2b:f8:e7:2c:
         76:04:a1:72:d0:75:e6:37:c3:43:dc:32:5b:c0:bb:e6:c7:db:
         4a:09:06:71:46:75:74:d3:d0:51:fe:a8:52:4e:0b:0a:a7:de:
         75:03:b2:83:02:4a:dd:e0:d3:09:2c:13:b7:3d:e7:76:89:cd:
         a1:6d:2e:0e:dd:bf:f3:5c:53:c9:91:47:4f:f8:ec:40:7f:37:
         53:d9:af:78:73:0a:56:a4:50:a8:35:7d:3a:e9:b0:8c:ab:1b:
         39:96:8d:b1:31:e5:86:c1:28:ca:18:6d:38:23:69:38:5a:ff:
         32:9e:81:ef:f3:bd:81:e5:e8:2b:f1:c1:26:e6:6f:bd:43:65:
         b8:5c:69:34:e3:76:8c:f2:d0:70:6c:9c:34:7d:7a:f1:15:31:
         37:69:dc:bc:b2:a4:ef:db:fb:b7:5b:2c:9e:56:b5:7e:7b:77:
         57:15:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:45 2026 by rpki-client