Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/8JAV_5seM9lQdYircijFPT_wOgo.roa
File:                     8JAV_5seM9lQdYircijFPT_wOgo.roa (raw, json)
Hash identifier:          qdMU9NDQi4ci3bHK+uc4ILg0fm8O4nupsSSAb9aqJRs=
Subject key identifier:   F0:90:15:FF:9B:1E:33:D9:50:75:88:AB:72:28:C5:3D:3F:F0:3A:0A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       57
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/8JAV_5seM9lQdYircijFPT_wOgo.roa
Signing time:             Thu 06 Aug 2026 02:31:05 +0000
ROA not before:           Thu 06 Aug 2026 02:31:05 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        61.124.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:31:05 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=F09015FF9B1E33D9507588AB7228C53D3FF03A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:db:96:62:cf:7a:af:b1:82:db:5e:f7:05:
                    65:a2:9d:80:2c:04:0b:b0:2e:3a:59:74:55:ea:06:
                    1e:55:a5:08:cf:9e:c6:e6:3a:11:29:90:63:71:98:
                    b1:e1:09:4f:d8:6b:77:3c:1b:b5:31:5c:89:e0:91:
                    7b:d5:b6:02:10:cf:66:46:08:ae:41:db:4a:cc:a9:
                    09:3a:56:4b:87:48:15:33:51:81:42:bd:aa:12:07:
                    7f:bf:0c:36:c2:1a:b2:d6:dd:08:f3:bf:a8:c2:54:
                    8b:42:66:8a:4c:b5:54:bc:44:b5:6a:a7:f6:b6:91:
                    51:d3:38:04:11:8e:85:5b:05:a3:c2:f9:50:7e:b0:
                    15:00:3b:00:8a:fe:08:e2:e8:2d:69:1d:6f:45:6f:
                    06:28:82:1b:68:33:43:cd:66:d9:28:3c:6e:50:5a:
                    d2:bb:ef:1b:12:05:80:bc:38:13:3c:78:db:da:a5:
                    89:f4:cf:ef:2f:f2:b9:cb:63:bf:23:33:c8:41:53:
                    8c:b2:81:24:89:52:60:e1:72:34:ca:57:ea:13:2a:
                    47:40:17:4f:b9:ab:ed:88:f8:e8:e9:3c:cf:04:23:
                    fc:45:76:1b:52:a5:e1:98:1b:ef:38:7c:a8:ee:99:
                    98:47:e7:e1:d7:d7:17:d4:41:13:08:73:6d:7f:18:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:90:15:FF:9B:1E:33:D9:50:75:88:AB:72:28:C5:3D:3F:F0:3A:0A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/8JAV_5seM9lQdYircijFPT_wOgo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:1a:fd:7f:31:54:b5:4c:69:61:36:5d:46:b0:ba:1c:5f:
         85:2b:31:8c:6c:f1:4f:48:82:e3:96:a9:68:1f:4c:63:7f:0d:
         fa:99:82:97:16:01:db:81:b2:44:ec:6b:61:38:50:3d:34:a0:
         c1:2a:e5:4a:e3:20:9d:e1:ba:95:1c:41:d4:99:8e:b7:f3:eb:
         98:a2:bc:a1:0b:81:7b:3c:d9:bb:b8:bb:d1:0c:ec:44:e6:4d:
         c7:d5:98:9b:8d:02:e3:73:3a:4c:8c:83:25:62:0b:01:81:99:
         c4:11:74:9c:c0:c3:ec:7c:49:f9:59:f4:06:ff:ae:f0:63:2e:
         85:04:44:85:cb:53:f1:bb:84:ba:1b:a1:90:69:70:89:d8:90:
         f7:85:5d:be:76:9d:0e:13:26:5a:45:e7:fe:ec:0b:d4:d5:06:
         d5:55:63:da:c4:2f:ba:81:90:3f:10:f9:82:82:7d:61:33:5d:
         c2:f0:09:42:e2:e8:57:5b:4e:f2:b8:bb:11:bb:89:3e:3d:f6:
         e1:93:28:3f:a2:67:d1:18:c9:56:41:62:b7:4f:87:60:3f:df:
         db:35:30:7f:ef:c7:77:c4:5e:ec:2b:80:bc:c6:6b:5e:a9:20:
         29:96:f2:a0:da:53:60:a3:00:17:e0:5b:23:f2:0c:0b:f3:a1:
         50:e9:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:18 2026 by rpki-client