Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/Strx_-cb5HBT1Te0BitLgS00Um0.roa
File:                     Strx_-cb5HBT1Te0BitLgS00Um0.roa (raw, json)
Hash identifier:          /lelt/Y5Zq7ZY0eY9ttpHrJiwuZmlw/lSFAY7GlWb+4=
Subject key identifier:   4A:DA:F1:FF:E7:1B:E4:70:53:D5:37:B4:06:2B:4B:81:2D:34:52:6D
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       7A
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/Strx_-cb5HBT1Te0BitLgS00Um0.roa
Signing time:             Thu 09 Jul 2026 08:01:04 +0000
ROA not before:           Thu 09 Jul 2026 08:01:04 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        202.211.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 19:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Jul  9 08:01:04 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=4ADAF1FFE71BE47053D537B4062B4B812D34526D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:3f:6e:19:69:ff:24:a1:09:40:25:76:7e:
                    28:25:27:50:57:98:5e:09:1f:ba:86:d7:df:cb:26:
                    33:7e:4b:9a:29:bd:98:e4:bf:38:d9:ac:b4:a5:ed:
                    73:dc:da:2a:cf:c3:97:31:f3:83:db:48:d6:ca:b0:
                    f7:41:32:20:2f:13:7a:3a:98:a3:83:77:7e:19:bd:
                    96:b3:d2:72:dc:57:95:88:d0:af:69:0a:20:e4:a8:
                    97:59:6b:31:e8:39:86:f4:e6:05:7b:7d:f1:7e:d9:
                    5a:fc:68:94:02:70:58:dd:7e:7b:5e:19:e1:44:a4:
                    c4:e3:61:39:20:17:a3:79:f8:10:84:be:77:dc:76:
                    da:93:c6:15:a5:dd:6a:a3:6a:42:b3:cd:ac:cd:cf:
                    73:c8:17:15:de:5d:45:06:c9:ad:d3:13:99:6f:44:
                    1a:80:61:7c:fc:e4:92:9a:d7:3c:f4:a7:c7:4e:7e:
                    29:3e:05:c1:cf:cd:3f:e7:40:ce:50:8d:8f:52:1f:
                    be:17:09:80:f2:a7:9f:20:93:2c:e2:7e:16:be:33:
                    91:e0:de:d2:07:00:71:68:c6:bd:ce:50:ee:a2:1d:
                    32:ef:5c:4d:b9:8d:e8:50:50:23:9e:18:b6:f2:1b:
                    75:47:bb:93:6b:a5:ce:35:8a:94:51:47:39:1e:aa:
                    ea:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DA:F1:FF:E7:1B:E4:70:53:D5:37:B4:06:2B:4B:81:2D:34:52:6D
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/Strx_-cb5HBT1Te0BitLgS00Um0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.211.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:30:73:c0:c1:7a:0a:47:21:a8:51:f9:53:23:e2:3b:66:4e:
         33:d5:81:54:ed:26:d7:8b:ea:48:7e:30:8d:fb:39:67:27:0e:
         6a:d2:75:e8:f5:e8:d0:22:32:83:41:4f:d0:1e:be:7f:30:12:
         e3:d5:0b:b7:cb:2e:8f:c1:48:e3:b2:88:18:df:da:9c:9f:18:
         39:c6:b5:1a:49:47:1d:92:15:e2:07:04:4f:6a:12:13:cb:61:
         ee:99:9e:26:6b:00:9e:fb:20:0a:5e:09:c6:7e:ca:cb:55:05:
         e3:ca:3d:6d:46:b3:9c:db:70:b9:37:80:fd:d3:93:b8:86:23:
         d3:a0:85:02:7d:42:80:4c:47:37:cb:8b:d7:a6:97:63:3b:46:
         fb:bb:72:cd:81:49:68:b0:4f:0a:90:89:a8:8e:6c:c7:46:39:
         94:04:eb:9a:94:8a:8e:06:90:a6:9f:9a:3e:2b:7e:a3:bb:b0:
         06:69:c6:a3:b9:87:a6:52:4f:68:0b:ca:e5:2c:ed:53:67:c1:
         ba:c5:9d:47:a8:e3:be:99:69:df:2a:10:b8:52:95:4a:22:17:
         54:34:f4:c6:9e:66:70:9a:18:25:9a:aa:bf:4e:a7:ec:96:c2:
         2a:45:6b:6f:cd:55:bd:ca:8c:6c:8a:43:8a:8b:43:3f:14:6a:
         aa:62:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:05:50 2026 by rpki-client