Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/3jD3QY-b3II3CeJngXYcZZjwFJs.roa
File:                     3jD3QY-b3II3CeJngXYcZZjwFJs.roa (raw, json)
Hash identifier:          ZpmhdmyU9KY1ipZ28usOduiG3vccOm6+v3O37fcgk2c=
Subject key identifier:   DE:30:F7:41:8F:9B:DC:82:37:09:E2:67:81:76:1C:65:98:F0:14:9B
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       54
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/3jD3QY-b3II3CeJngXYcZZjwFJs.roa
Signing time:             Thu 06 Aug 2026 02:27:11 +0000
ROA not before:           Thu 06 Aug 2026 02:27:11 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.124.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:27:11 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=DE30F7418F9BDC823709E26781761C6598F0149B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:4f:90:2a:2a:3d:2b:ab:aa:27:27:eb:ca:
                    3e:58:fd:24:52:72:99:ac:a2:3e:98:3e:95:9b:9b:
                    b6:5a:1d:fe:8e:7c:03:2c:0f:d9:24:e5:2c:ce:8f:
                    6a:e0:33:81:7c:ff:64:91:37:4b:bf:29:d0:6e:b1:
                    57:f2:1b:ae:28:d9:d1:3f:58:12:8b:38:ae:e7:d9:
                    ec:75:a9:ea:e7:ae:6d:94:36:3f:59:ac:01:b9:5c:
                    76:cd:b7:5b:a4:b1:46:e3:6a:f2:0a:58:fd:d8:a7:
                    5f:6a:b2:51:7a:70:85:3d:49:20:67:91:e6:6e:94:
                    18:16:41:1e:13:d0:8c:4b:7a:6d:00:ae:59:1c:55:
                    ba:60:c9:8a:51:75:31:55:5c:53:a4:5a:9e:ad:86:
                    07:fd:8b:80:05:66:80:22:b4:22:c0:7d:6c:41:57:
                    6e:bb:6a:0b:7c:0f:6d:cb:43:c9:4c:9c:8b:36:9c:
                    8d:3f:cc:b6:0b:89:c2:77:33:4c:06:32:68:62:81:
                    2e:e1:3d:b3:6e:03:bd:4b:b3:d2:2d:89:88:0a:de:
                    7e:d2:4d:0a:e3:01:02:15:89:96:44:1d:03:c6:c7:
                    98:77:03:62:f3:fe:40:6b:14:e6:da:43:14:41:4b:
                    9c:0e:4b:de:38:88:02:dc:3c:88:d5:3e:08:89:f3:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:F7:41:8F:9B:DC:82:37:09:E2:67:81:76:1C:65:98:F0:14:9B
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/3jD3QY-b3II3CeJngXYcZZjwFJs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:35:ca:07:98:d7:26:bf:05:de:6f:67:d5:4a:2c:ad:63:
         bd:d6:85:1d:77:76:64:f9:72:dc:77:d4:48:0d:52:00:00:52:
         53:1a:78:28:65:6f:7f:95:99:29:8b:6c:15:a6:df:1d:7c:7d:
         9f:93:27:2b:2e:21:ec:55:ba:1b:9f:89:d4:d2:9c:98:16:e9:
         9b:7b:00:30:69:48:11:03:79:91:7d:3d:a3:9f:4a:43:96:6e:
         bd:07:04:11:ac:8f:a6:c9:67:04:61:7b:be:0a:81:99:fb:81:
         3e:87:17:ec:95:bb:e9:c0:df:8f:f6:02:83:80:d1:ba:3c:42:
         41:96:63:4d:9b:5d:6e:87:76:87:18:fb:4a:bb:6f:2a:22:bb:
         46:3b:6e:c9:e7:e5:3b:5c:f0:8f:ce:b9:ea:a9:81:34:1f:ae:
         ce:fd:95:0d:f6:4f:7e:06:7d:9e:a2:90:3c:27:80:7c:35:7f:
         27:5b:6b:ec:ee:e2:1e:e1:ca:23:25:34:a4:63:f9:ff:9a:93:
         e0:32:67:82:2c:09:ac:d2:86:36:cf:02:4c:84:26:56:ea:de:
         b6:0e:65:a7:d4:01:ff:16:9d:fd:6b:ae:eb:c0:a4:5b:d0:44:
         e6:1f:6a:db:c2:a1:74:9b:0c:02:53:6d:c8:4a:5d:66:eb:2d:
         8d:ae:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:04 2026 by rpki-client