Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/Kzev823FgJ-dB3XkqByNhjb9Gdc.roa
File:                     Kzev823FgJ-dB3XkqByNhjb9Gdc.roa (raw, json)
Hash identifier:          ys5gVSZ/8Iy9qj+J9DhR4qTDJBa1W/xq5Cb3ubBk9bo=
Subject key identifier:   2B:37:AF:F3:6D:C5:80:9F:9D:07:75:E4:A8:1C:8D:86:36:FD:19:D7
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       65
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Kzev823FgJ-dB3XkqByNhjb9Gdc.roa
Signing time:             Mon 10 Aug 2026 05:15:17 +0000
ROA not before:           Mon 10 Aug 2026 05:15:17 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     0
IP address blocks:        61.124.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 10 05:15:17 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=2B37AFF36DC5809F9D0775E4A81C8D8636FD19D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:41:b7:7b:39:f7:8c:e8:63:c9:7e:27:d9:
                    43:63:35:c4:c7:7c:57:8f:7e:8e:36:07:ef:8c:1f:
                    63:28:34:c3:6f:03:42:48:7e:ea:e5:80:6a:18:28:
                    f5:d3:64:8f:cf:8b:87:47:18:2d:ed:dc:a4:62:79:
                    b5:5c:71:6a:ce:9e:a3:f8:7e:15:41:db:26:f7:a9:
                    c9:2b:5e:3b:bc:f2:42:79:6d:69:de:05:36:34:e5:
                    32:6b:38:34:df:b2:04:e9:6f:a1:fe:2d:fd:16:76:
                    f6:3f:d6:55:e1:f3:50:15:62:fa:1b:00:4f:4e:04:
                    63:31:0d:d8:15:f2:db:fb:06:4a:d0:28:25:1b:15:
                    40:b7:99:73:13:b7:b1:72:18:2f:4b:52:60:e3:9f:
                    aa:dd:e5:3e:72:66:1e:89:a9:57:6d:e6:6b:3a:18:
                    ca:e3:2d:a2:34:2b:71:00:b2:f3:1f:1a:b1:5d:48:
                    f0:36:e0:fd:18:69:d3:4f:3b:15:10:62:0d:90:e0:
                    19:77:7f:8a:2a:3a:5f:7e:18:10:e1:45:91:30:8b:
                    9e:01:6e:13:cf:e6:fc:c0:e7:f5:ac:83:5d:9b:b1:
                    1c:38:46:dc:fe:9d:4e:12:3c:72:05:85:50:4e:20:
                    cc:25:1d:dc:cf:2e:43:30:c5:d4:3a:3f:68:3c:2f:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:37:AF:F3:6D:C5:80:9F:9D:07:75:E4:A8:1C:8D:86:36:FD:19:D7
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Kzev823FgJ-dB3XkqByNhjb9Gdc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:ea:ef:f2:31:90:c7:6a:5a:d6:e7:88:ec:03:42:62:3e:
         6f:5b:94:e8:a4:95:2a:ec:0c:47:ee:d1:94:c8:28:6d:47:9d:
         d0:22:3d:ce:23:10:9d:e8:66:39:e4:6b:1a:f2:26:b4:ef:65:
         ca:b2:7a:52:f8:39:5b:50:70:6c:51:b5:d4:1c:91:3f:be:0c:
         21:a4:15:c6:da:36:d2:cb:24:f4:90:49:df:5d:b0:a0:05:5f:
         0b:00:b9:21:f1:46:e9:af:4f:df:12:a1:a9:e7:d5:3c:75:96:
         8a:43:88:f6:04:e1:08:31:c3:85:8a:91:de:8b:32:46:44:49:
         a2:93:8e:c4:53:2f:5f:fc:28:55:63:cc:da:71:80:a2:59:36:
         85:9f:84:6e:f6:d1:3c:98:1e:8f:45:96:81:ff:31:45:cf:32:
         0b:6f:b2:fc:83:96:49:2e:88:b0:a7:50:33:f5:11:6c:c7:20:
         09:bc:e9:14:a0:a5:9d:30:5e:79:1a:32:d4:64:af:dc:1c:37:
         b9:7a:21:33:89:fd:bd:35:a1:1b:de:2f:c5:2b:d8:a5:56:29:
         24:bc:7c:3f:96:9e:9a:ef:90:3b:c6:08:62:59:5d:58:74:ae:
         33:42:52:4d:be:87:eb:42:ee:6e:f5:aa:64:76:5d:1e:53:fd:
         5e:6a:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:48 2026 by rpki-client