Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/GXQ_wUaiov9jsoUSJjiRpP1Ftzw.roa
File:                     GXQ_wUaiov9jsoUSJjiRpP1Ftzw.roa (raw, json)
Hash identifier:          OAFPB4NoeJSfsuCdQjoIu6WjrnzVZ3BSio0FJT/qmIs=
Subject key identifier:   19:74:3F:C1:46:A2:A2:FF:63:B2:85:12:26:38:91:A4:FD:45:B7:3C
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       63
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/GXQ_wUaiov9jsoUSJjiRpP1Ftzw.roa
Signing time:             Fri 24 Jul 2026 12:22:37 +0000
ROA not before:           Fri 24 Jul 2026 12:22:37 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     45674
IP address blocks:        2001:260:321::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Jul 24 12:22:37 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=19743FC146A2A2FF63B28512263891A4FD45B73C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:9f:3e:17:1d:dd:02:a4:e5:81:7b:b6:59:
                    66:6a:e1:72:a2:a2:a7:8f:d2:fc:49:a6:f7:71:01:
                    aa:23:f6:b7:dc:ce:95:b9:6b:0f:3b:7e:d3:44:a6:
                    3f:ca:4e:40:39:55:26:37:55:fa:b9:d5:91:2e:00:
                    1d:22:27:e4:b6:06:6b:02:4e:02:af:74:f4:3a:5c:
                    4e:87:ad:81:59:26:a9:11:67:27:d0:18:d0:99:c8:
                    22:27:07:24:21:bd:44:3e:21:c0:89:1d:86:f3:4c:
                    83:56:a6:80:ba:6a:49:17:63:ee:eb:9a:34:01:c5:
                    a1:d4:df:77:b5:66:63:21:bb:c7:db:38:90:af:b6:
                    43:22:42:14:12:93:c5:b4:0b:12:29:38:f1:17:14:
                    20:c4:ac:78:cc:41:26:3c:09:4c:56:e7:d2:b1:8c:
                    ae:4b:f0:d5:80:e3:fe:38:b2:23:12:c6:ca:71:26:
                    88:68:3a:03:a1:bb:9b:5d:30:46:b9:56:3d:28:55:
                    d0:6e:4b:e7:91:3c:96:1d:3a:0c:8f:b0:36:76:f2:
                    a6:9c:15:43:0b:97:b9:af:23:8a:93:b2:b3:2a:e4:
                    91:13:9a:bd:cc:c6:07:c4:79:71:ca:00:bd:8d:7a:
                    da:d6:fc:15:0f:7d:ba:96:3d:85:b4:1f:e5:35:c9:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:74:3F:C1:46:A2:A2:FF:63:B2:85:12:26:38:91:A4:FD:45:B7:3C
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/GXQ_wUaiov9jsoUSJjiRpP1Ftzw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:260:321::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:fd:26:21:9c:f2:a1:6c:1a:6c:87:e4:9a:63:bb:3f:79:32:
         0b:d2:ea:e3:26:bb:98:00:47:dd:54:ed:31:a0:c9:c2:0f:64:
         a1:ed:56:6b:38:c8:08:92:94:6e:f5:7c:89:77:2f:63:3e:98:
         e8:e8:98:c8:bc:2a:87:78:d0:d1:a1:a5:78:d2:50:d4:b8:d9:
         82:fc:17:46:9d:25:65:ca:c7:c6:86:ad:1b:f4:9f:8d:fc:91:
         ad:aa:75:9f:61:d7:96:f0:16:a0:6e:9d:c7:9a:bc:bf:cc:f6:
         12:a1:5a:31:09:79:ca:f1:ac:ca:37:aa:3f:bc:63:78:59:02:
         81:62:1d:93:ed:fa:5f:10:00:27:5c:68:de:16:a0:17:8e:8f:
         9f:0e:cb:d1:d1:78:11:56:9d:1d:50:e2:1d:18:9b:56:f7:1b:
         fc:be:f6:72:35:6a:c0:d8:4a:fa:3c:c2:b8:12:04:23:8f:3b:
         2f:41:c8:72:70:14:d8:07:03:aa:9b:23:56:16:2f:fa:f8:c4:
         ff:0d:1c:9e:b4:ee:e2:85:f1:fe:cf:f3:b8:b4:1a:1f:ba:ab:
         c3:83:66:18:85:a9:57:8e:d4:62:8b:be:4b:5d:4b:94:f2:1e:
         21:b2:d8:ed:e6:53:0f:05:3d:28:36:03:89:69:fa:91:76:30:
         09:06:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:08 2026 by rpki-client