Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/GEJUxzZSatBuPMdB2pEx5ULCug4.roa
File:                     GEJUxzZSatBuPMdB2pEx5ULCug4.roa (raw, json)
Hash identifier:          ofHCvkygtp6aRPcw21Zxb82kd+vzDIp+yBzhuI76T58=
Subject key identifier:   18:42:54:C7:36:52:6A:D0:6E:3C:C7:41:DA:91:31:E5:42:C2:BA:0E
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       6A
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/GEJUxzZSatBuPMdB2pEx5ULCug4.roa
Signing time:             Mon 10 Aug 2026 05:19:16 +0000
ROA not before:           Mon 10 Aug 2026 05:19:16 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     0
IP address blocks:        211.133.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 10 05:19:16 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=184254C736526AD06E3CC741DA9131E542C2BA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:b9:db:43:e1:af:d5:b6:d0:13:c9:84:1a:
                    16:67:c1:2e:d1:74:49:6e:9a:e3:76:f9:00:45:f4:
                    0f:e5:e6:30:c1:e2:8a:0a:8a:ba:7b:f4:47:22:62:
                    95:75:a9:71:64:d0:ec:f9:11:71:b3:33:60:67:f0:
                    4c:c6:6a:30:a3:39:2a:03:00:b2:7b:17:43:70:de:
                    86:89:b6:5e:76:c6:a0:08:19:16:11:e7:db:77:2e:
                    f0:88:87:e3:3d:bc:2f:e5:d1:0f:92:8c:18:7a:06:
                    ca:e2:75:37:0a:b5:d0:28:8e:a0:82:33:e0:bf:5a:
                    78:40:74:f6:a7:88:c1:46:a2:1f:fe:7a:fb:6d:b1:
                    9f:4e:ee:29:e4:12:4e:da:b4:a0:ee:90:ff:bb:91:
                    d1:87:05:a2:69:d9:27:3d:19:ff:72:4e:18:0e:fb:
                    4b:bb:70:d8:62:01:05:5b:ff:ea:5b:f3:08:e2:68:
                    7f:7f:91:e4:bb:8d:eb:2f:81:c6:b8:da:49:af:cb:
                    a9:e7:52:e5:d3:81:01:87:fd:05:55:a4:6f:4a:75:
                    2d:37:b9:85:a9:f3:01:af:35:11:c8:ca:07:a0:19:
                    48:ad:98:d8:c8:93:3b:0d:94:40:b6:9f:cc:fe:0f:
                    8d:3e:fe:81:f8:24:1c:c5:8b:b3:05:14:0c:b4:56:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:42:54:C7:36:52:6A:D0:6E:3C:C7:41:DA:91:31:E5:42:C2:BA:0E
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/GEJUxzZSatBuPMdB2pEx5ULCug4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:57:9f:c3:47:e7:f0:d7:f5:f8:1f:4b:bc:d0:2e:e9:ed:
         c5:3d:e7:7b:6d:59:b4:5d:35:2b:22:3c:4b:e5:bd:05:68:42:
         81:11:0f:d9:f9:a4:5b:56:9f:93:f8:25:54:98:9f:c7:2b:20:
         ff:c0:e3:58:06:89:b0:a9:b8:63:42:79:58:15:cf:35:d3:c8:
         b2:1b:53:c5:ff:83:42:89:63:8b:8d:b5:2d:21:a0:74:d1:d3:
         06:4b:da:60:7c:c1:70:8b:ed:b9:02:ea:02:80:28:b2:4a:63:
         2e:39:f3:ed:13:af:eb:1d:68:4e:a0:87:ba:6f:19:35:e9:8f:
         aa:47:ea:e5:c3:21:19:fa:e0:ff:26:53:db:0f:09:40:7d:4e:
         f7:a4:1f:51:e2:fd:f4:64:d1:a1:70:1a:ad:47:66:d3:c6:8e:
         7c:ab:a9:9d:0b:b2:76:78:d2:bb:e0:79:57:85:ea:03:b3:39:
         e0:08:3e:ab:14:6f:cb:3d:7d:1f:c1:b2:a4:1d:76:84:92:1c:
         45:a4:58:25:7a:5b:d7:ee:72:a2:9b:8e:a7:cc:d8:65:75:27:
         84:6d:3f:7f:8a:5b:e3:ab:19:d8:25:31:75:fe:fa:68:c5:b6:
         95:9d:33:6d:4b:87:9c:ef:84:98:15:8a:5e:58:e5:87:47:c0:
         27:2b:6f:d9
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDgxMDA1
MTkxNloXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMTg0MjU0QzczNjUyNkFE
MDZFM0NDNzQxREE5MTMxRTU0MkMyQkEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3qudtD4a/VttATyYQaFmfBLtF0SW6a43b5AEX0D+XmMMHiigqK
unv0RyJilXWpcWTQ7PkRcbMzYGfwTMZqMKM5KgMAsnsXQ3Dehom2XnbGoAgZFhHn
23cu8IiH4z28L+XRD5KMGHoGyuJ1Nwq10CiOoIIz4L9aeEB09qeIwUaiH/56+22x
n07uKeQSTtq0oO6Q/7uR0YcFomnZJz0Z/3JOGA77S7tw2GIBBVv/6lvzCOJof3+R
5LuN6y+BxrjaSa/LqedS5dOBAYf9BVWkb0p1LTe5hanzAa81EcjKB6AZSK2Y2MiT
Ow2UQLafzP4PjT7+gfgkHMWLswUUDLRWiUMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQYQlTHNlJq0G48x0HakTHlQsK6DjAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xOTEvR0VKVXh6WlNhdEJ1UE1kQjJwRXg1VUxDdWc0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtOFQDANBgkqhkiG9w0BAQsFAAOCAQEA
iE5Xn8NH5/DX9fgfS7zQLuntxT3ne21ZtF01KyI8S+W9BWhCgREP2fmkW1afk/gl
VJifxysg/8DjWAaJsKm4Y0J5WBXPNdPIshtTxf+DQolji421LSGgdNHTBkvaYHzB
cIvtuQLqAoAoskpjLjnz7ROv6x1oTqCHum8ZNemPqkfq5cMhGfrg/yZT2w8JQH1O
96QfUeL99GTRoXAarUdm08aOfKupnQuydnjSu+B5V4XqA7M54Ag+qxRvyz19H8Gy
pB12hJIcRaRYJXpb1+5yopuOp8zYZXUnhG0/f4pb46sZ2CUxdf76aMW2lZ0zbUuH
nO+EmBWKXljlh0fAJytv2Q==
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:56 2026 by rpki-client