Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/3UP4fqG2MpPuyMsuiz_PhHh8j5E.roa
File:                     3UP4fqG2MpPuyMsuiz_PhHh8j5E.roa (raw, json)
Hash identifier:          ev/T7h/bGtDCUSYL6RyRqVgO1TpPHo+QOpDba0qkka0=
Subject key identifier:   DD:43:F8:7E:A1:B6:32:93:EE:C8:CB:2E:8B:3F:CF:84:78:7C:8F:91
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       63
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/3UP4fqG2MpPuyMsuiz_PhHh8j5E.roa
Signing time:             Mon 10 Aug 2026 05:15:09 +0000
ROA not before:           Mon 10 Aug 2026 05:15:09 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     0
IP address blocks:        61.124.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 10 05:15:09 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=DD43F87EA1B63293EEC8CB2E8B3FCF84787C8F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0c:f9:e8:ac:ec:55:f2:05:e3:20:72:e0:fb:
                    6a:f0:3d:1b:92:52:1a:f2:9c:7e:37:31:52:68:fc:
                    36:b7:ce:96:d3:f5:43:e2:21:7c:00:ff:65:14:3b:
                    70:e0:e3:ed:68:dd:8a:5f:76:cb:1f:ad:45:9b:2a:
                    1d:34:5d:49:05:4a:92:ae:32:7b:cd:49:df:d9:f4:
                    a3:3a:11:81:d7:d0:69:8a:a7:ff:af:10:75:7e:b8:
                    99:d2:48:51:b8:61:8a:67:bb:a1:34:89:79:70:8b:
                    94:6c:17:27:8c:d6:bd:55:ad:c9:69:ab:40:39:41:
                    c1:be:21:05:c8:f2:d2:be:63:9f:57:6f:94:62:73:
                    b9:03:21:33:39:66:22:88:6d:19:44:d6:98:79:17:
                    86:ce:17:15:c7:33:a9:29:00:a9:29:22:22:30:b4:
                    3b:c5:56:2d:32:42:34:97:44:a0:a2:66:66:02:01:
                    a5:0f:1e:1f:52:0a:ab:95:70:83:47:fd:8f:28:6a:
                    5b:4d:55:5c:8f:d7:e6:ca:72:1e:66:1b:47:6a:c8:
                    5d:61:95:17:06:ae:e0:82:30:83:bc:2c:96:df:eb:
                    a1:4b:64:fe:f9:07:76:3f:f2:64:d8:42:8b:d1:88:
                    d8:ff:d5:76:37:08:c5:c5:a9:cb:c1:09:eb:aa:b7:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:F8:7E:A1:B6:32:93:EE:C8:CB:2E:8B:3F:CF:84:78:7C:8F:91
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/3UP4fqG2MpPuyMsuiz_PhHh8j5E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:11:74:4a:77:b8:94:44:41:68:fc:72:27:e8:05:4a:f7:db:
         87:18:4c:3c:86:7d:03:31:aa:57:14:e7:9d:a4:ed:68:41:43:
         fa:09:b6:48:64:f4:55:5b:e7:a3:07:c8:b9:48:70:da:8a:9a:
         0b:34:b9:a8:3d:5a:8b:d0:37:ee:dc:61:4a:08:b8:19:2c:ca:
         fd:53:3d:7b:90:a2:09:c0:f0:07:b6:29:a3:21:7c:63:e6:66:
         13:81:dd:4e:09:31:c2:29:cb:a0:53:5a:e7:7e:7e:0d:34:96:
         fc:6b:1f:36:4a:b9:85:a7:49:cb:11:64:e9:34:e8:b5:b8:e0:
         fc:82:11:81:4a:6e:21:bc:4a:6b:d7:47:76:05:9a:81:f6:b6:
         e5:17:92:01:65:a2:7f:8d:ad:c6:dc:7e:86:c7:8f:ee:e2:ab:
         40:a5:e9:a6:13:6d:c5:bb:13:9e:3b:7c:aa:c0:32:4c:fc:1f:
         d4:07:73:6e:60:08:57:fb:9a:3a:95:29:6a:28:4a:52:69:66:
         3e:c5:74:74:8d:59:a0:f2:ff:67:ac:83:21:a0:4d:8d:0a:41:
         c3:fa:4e:21:24:ae:93:15:b0:d4:6f:92:94:cf:8f:8c:4f:a7:
         6e:5f:14:b8:29:d4:fe:25:57:f9:a4:b9:2c:f3:5a:f1:98:55:
         ac:f5:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:48 2026 by rpki-client