Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/CPEEbeY8uZYUqrGqUVIdG7UZQP8.roa
File:                     CPEEbeY8uZYUqrGqUVIdG7UZQP8.roa (raw, json)
Hash identifier:          no2yhefja2UqkHyiQDI2vZKt884S3T6gTKluWaxs+h8=
Subject key identifier:   08:F1:04:6D:E6:3C:B9:96:14:AA:B1:AA:51:52:1D:1B:B5:19:40:FF
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       30
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CPEEbeY8uZYUqrGqUVIdG7UZQP8.roa
Signing time:             Mon 27 Apr 2026 02:53:59 +0000
ROA not before:           Mon 27 Apr 2026 02:53:59 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        116.92.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Apr 27 02:53:59 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=08F1046DE63CB99614AAB1AA51521D1BB51940FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:84:c2:ab:57:6a:b3:91:c3:45:0d:de:75:
                    1c:e6:1e:4b:3a:b1:8e:e7:72:cd:f3:5d:64:d7:77:
                    d6:11:a7:44:7e:2c:6a:c3:6c:15:e2:c3:c8:ee:59:
                    d0:be:92:c8:58:9f:06:c2:55:45:67:04:7d:45:e0:
                    6d:a2:c1:8b:53:e5:cb:b7:75:cf:5e:76:4d:bb:a6:
                    ae:48:5c:ad:c1:a1:d5:25:95:9e:f5:bf:b4:a7:ea:
                    69:81:96:fe:87:b8:35:f2:b4:35:8a:6f:68:21:63:
                    2b:13:f1:c3:75:a5:3d:c0:0d:e5:53:f7:ab:d2:4c:
                    b3:71:64:07:e4:09:8c:09:96:ad:1b:a2:6f:45:e7:
                    54:64:36:a5:a2:c7:85:3a:85:b3:06:07:e1:f6:94:
                    63:1f:d4:42:1b:88:3b:32:f9:ad:78:8b:e4:ca:88:
                    21:05:7b:f2:b9:4b:41:9e:a1:59:fa:65:ce:9c:9a:
                    8c:d7:59:8a:63:9d:48:23:40:03:ac:df:6d:d1:5b:
                    4d:47:ee:87:ba:17:6b:2c:02:71:98:3d:58:bb:4b:
                    0a:f8:93:f9:44:80:e0:1e:3b:8d:d5:6f:ca:14:3f:
                    0e:ed:09:b4:3f:d8:c3:c0:c7:db:1b:4a:f1:3f:60:
                    6f:c4:54:6d:28:8d:11:7d:1d:1d:7e:7a:34:00:c3:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F1:04:6D:E6:3C:B9:96:14:AA:B1:AA:51:52:1D:1B:B5:19:40:FF
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CPEEbeY8uZYUqrGqUVIdG7UZQP8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.92.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:82:10:4c:eb:1f:7e:48:11:09:29:9d:53:02:14:83:c1:
         9e:1f:76:18:59:10:91:fa:b8:2f:b4:5d:3f:d7:e0:a2:d5:af:
         1d:57:b2:8a:b5:eb:36:af:25:62:f7:a7:13:a2:7a:2e:52:cf:
         17:6e:24:39:e3:e7:e3:e1:e5:2c:ba:6e:8c:31:55:8c:f9:a0:
         81:f3:28:2d:ee:1e:48:02:14:b8:0d:93:2b:dc:11:42:24:91:
         a2:2e:7d:ef:e1:e6:a3:f1:83:9e:d5:c9:2c:70:f0:e3:c3:da:
         7e:19:bf:31:e4:8c:0d:81:26:df:e5:0e:f6:54:dd:6b:8e:2a:
         3a:48:0a:dc:12:18:30:1e:fe:6a:8b:ca:75:d3:f2:93:1a:c8:
         45:85:2b:8f:08:d8:d2:41:32:b0:fe:2a:08:ff:71:0e:89:6c:
         bd:80:06:13:59:f0:38:6f:cb:04:72:52:f0:dc:b0:09:3c:16:
         e0:50:46:ab:e3:cb:83:3b:86:fd:61:6b:a5:f7:dd:c9:d5:ca:
         5e:a8:cd:52:56:32:a0:0c:cf:4a:d3:18:79:a1:d6:91:90:7a:
         73:35:ce:e9:87:8b:9e:30:5f:54:e4:b6:de:92:1b:84:5a:f2:
         65:0b:2d:89:31:a5:4a:14:b0:fa:37:4e:f1:8c:c7:32:cd:ce:
         8c:d6:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:22 2026 by rpki-client