Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/C_i-HykSTWXXWoX0HnK_XzmUxSA.roa
File:                     C_i-HykSTWXXWoX0HnK_XzmUxSA.roa (raw, json)
Hash identifier:          sItLpwKwCGLsNg4y8Y+OiP/bYDgw2wH7PkxzEF8jDuA=
Subject key identifier:   0B:F8:BE:1F:29:12:4D:65:D7:5A:85:F4:1E:72:BF:5F:39:94:C5:20
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       53
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/C_i-HykSTWXXWoX0HnK_XzmUxSA.roa
Signing time:             Thu 06 Aug 2026 02:27:10 +0000
ROA not before:           Thu 06 Aug 2026 02:27:10 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        61.124.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:27:10 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=0BF8BE1F29124D65D75A85F41E72BF5F3994C520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:6c:b4:cb:47:bf:82:38:5b:99:20:b6:c3:
                    37:65:fb:c3:04:c8:63:d0:c7:c4:98:dd:16:ce:fa:
                    1a:e8:dd:db:00:aa:bf:4b:c4:0c:6c:c3:5e:bc:62:
                    a7:5b:ca:21:04:9a:75:cb:5a:5d:ef:39:36:61:71:
                    e6:a4:1d:6d:d6:84:8c:dc:3f:97:bb:2c:bf:3c:fd:
                    79:fa:0a:92:ea:35:5a:5e:0b:16:b2:76:34:52:63:
                    7c:99:83:00:e1:94:5b:38:fa:ad:a8:ad:5d:c3:c5:
                    7c:1f:9d:19:41:c6:2b:e8:b1:67:e4:0a:0a:a7:7e:
                    a5:08:58:60:49:ce:b4:fc:b7:ec:f8:67:e7:15:3f:
                    1d:eb:76:f8:7b:90:b2:7a:e4:76:7a:1c:58:33:df:
                    0e:be:8b:31:a3:97:2f:18:a0:37:b8:81:a6:01:9f:
                    60:cd:dd:69:ad:d0:7d:9b:9b:bf:3d:22:55:7b:6e:
                    e4:de:18:7e:df:8e:f9:e5:8c:f4:3f:f7:e8:a3:85:
                    47:ee:48:09:ec:93:49:c8:46:66:84:a1:f3:a4:99:
                    19:b7:70:6c:fd:fd:68:c0:2a:98:87:c8:4b:11:cb:
                    24:18:72:be:d8:86:da:e0:f7:44:01:26:53:ba:eb:
                    00:54:7e:7d:88:92:8b:36:b4:a1:e8:5c:fd:60:49:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F8:BE:1F:29:12:4D:65:D7:5A:85:F4:1E:72:BF:5F:39:94:C5:20
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/C_i-HykSTWXXWoX0HnK_XzmUxSA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:83:2a:c5:b6:8d:e2:2a:28:61:d9:e0:db:d9:a7:3a:18:12:
         45:a2:71:b9:60:bb:57:51:29:b9:79:5c:52:9f:5a:0b:6d:e3:
         81:6f:0c:6e:14:f6:13:49:75:16:16:66:2b:98:e9:19:88:f7:
         c8:e9:e7:fe:9d:9d:32:cd:4c:a9:b3:5b:50:65:e3:a2:bf:ee:
         90:fc:65:b1:e5:f4:df:46:a3:ba:72:70:b3:c0:41:ec:79:b5:
         8a:39:c4:5e:1f:3e:c8:53:38:52:1f:8f:c4:69:c9:6d:57:1d:
         39:b6:42:a3:2a:e7:5c:0e:4e:2f:53:ff:5d:b9:e2:0c:dc:15:
         ae:d0:74:18:8b:4f:f8:dd:32:16:ab:3c:b4:40:22:c5:fb:c4:
         07:26:3a:53:51:e5:d5:35:b3:55:bd:dd:83:a3:b7:6f:19:dc:
         cf:5c:06:45:53:83:69:c6:5b:a6:27:a6:33:42:e7:8b:78:8c:
         c6:cd:5d:11:ec:4c:f8:b0:22:66:0b:0e:f6:e7:3a:5d:96:3e:
         64:a3:92:c2:86:4d:db:cc:bb:f7:95:ef:27:a2:c9:6d:34:37:
         ee:80:81:9e:e8:4e:e2:64:a3:ae:2c:09:4b:19:df:46:d7:9d:
         af:7a:e2:1e:ec:51:91:42:25:98:e3:a9:fe:4b:a1:fc:99:0e:
         2d:d3:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:44:08 2026 by rpki-client