Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/R3AzrXTuKW3zP6PSCCRVzIMvPBI.roa
File:                     R3AzrXTuKW3zP6PSCCRVzIMvPBI.roa (raw, json)
Hash identifier:          H12ppYMTTdNp1hEZsDm74BAQo/elRSros1PszGxE6D0=
Subject key identifier:   47:70:33:AD:74:EE:29:6D:F3:3F:A3:D2:08:24:55:CC:83:2F:3C:12
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       6B
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/R3AzrXTuKW3zP6PSCCRVzIMvPBI.roa
Signing time:             Mon 10 Aug 2026 05:19:17 +0000
ROA not before:           Mon 10 Aug 2026 05:19:17 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     0
IP address blocks:        222.158.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 10 05:19:17 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=477033AD74EE296DF33FA3D2082455CC832F3C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:ff:79:90:44:83:d1:e7:bb:04:bc:41:dc:
                    b9:f3:99:02:31:35:ca:fc:ed:da:22:bc:8c:23:d8:
                    22:05:5c:6d:a4:19:58:3e:73:fe:70:0b:8a:69:91:
                    63:70:8f:8c:94:50:bd:63:5c:00:20:60:12:5f:86:
                    fc:04:98:1c:8e:56:3f:87:85:85:32:1a:73:9b:0f:
                    97:29:67:2d:a3:d5:d0:8e:07:84:4d:9c:ca:a5:f0:
                    fd:b5:81:85:e4:67:31:e1:06:99:ab:a2:93:d3:12:
                    7f:b5:f8:c1:6f:7d:72:e3:fc:83:12:36:fc:24:47:
                    73:05:78:39:1b:39:cf:27:fd:49:d6:80:72:3e:d2:
                    75:3b:4c:0e:fe:ba:bc:47:1d:91:d0:a7:91:67:ba:
                    09:07:0a:6a:14:2c:11:2f:15:33:2e:54:24:d5:d4:
                    1d:c6:c0:a6:63:37:05:03:cd:b6:ed:6e:3e:ef:0b:
                    ab:79:71:b3:1f:66:bb:1f:31:fa:97:49:5a:b7:3e:
                    48:e5:74:e0:5d:72:e4:2a:61:3a:a5:fa:4e:05:6d:
                    c4:53:e4:47:46:37:47:d4:b3:4f:df:d2:20:0d:16:
                    93:ff:4e:34:a9:f0:f1:a2:1b:fb:a3:0f:75:3b:5c:
                    d6:e1:e8:28:d6:ee:c4:fe:6e:79:f1:87:51:2d:bb:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:70:33:AD:74:EE:29:6D:F3:3F:A3:D2:08:24:55:CC:83:2F:3C:12
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/R3AzrXTuKW3zP6PSCCRVzIMvPBI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.158.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b4:49:a8:6e:93:e1:ac:00:9c:1a:72:55:9e:0c:a1:e3:f2:ab:
         cb:ee:08:f3:0e:03:59:82:4f:f8:b4:c4:b0:d5:07:49:33:9b:
         6a:6a:80:cb:02:89:e0:11:2f:ba:a2:8d:d6:84:b8:d6:97:1d:
         ac:f6:5d:44:95:3e:56:1f:e0:6c:52:b2:0a:b0:58:54:03:87:
         d9:33:4e:fa:fd:08:d7:a8:7c:b8:23:de:47:8b:9e:b8:f5:95:
         7c:25:f1:5b:5e:99:60:61:cf:a2:7b:28:63:d3:7f:78:88:61:
         9a:27:5f:aa:cc:3e:05:f8:3d:90:d6:f2:f4:7d:ab:49:53:7b:
         17:02:27:90:b7:fe:69:27:0e:0f:c7:35:59:3a:13:e0:d6:5a:
         11:59:3c:b2:33:f9:84:59:0e:7a:0e:22:70:94:9d:fa:26:c6:
         0f:64:43:d6:3d:77:b9:35:6b:d9:85:50:2f:e3:ac:83:b0:fa:
         d9:df:83:db:db:cb:d9:19:36:05:1e:7c:87:56:66:bf:11:0a:
         ff:d1:0f:d7:65:92:24:df:dd:73:bc:04:5a:ab:13:1d:59:27:
         ae:d8:77:56:3f:39:a9:58:2b:3f:48:71:99:92:75:74:9a:f6:
         22:1e:f1:1c:e4:7b:26:5c:f7:49:e6:19:e3:df:3e:85:9f:fe:
         78:75:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:54 2026 by rpki-client