Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/VTCPJ5zN9yonvqKDYnvFXv5eX9o.roa
File:                     VTCPJ5zN9yonvqKDYnvFXv5eX9o.roa (raw, json)
Hash identifier:          6ZJsHgWCIHg2SW7a2Pla+2V19zxTDRJQH86fwnRZHLk=
Subject key identifier:   55:30:8F:27:9C:CD:F7:2A:27:BE:A2:83:62:7B:C5:5E:FE:5E:5F:DA
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       50
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/VTCPJ5zN9yonvqKDYnvFXv5eX9o.roa
Signing time:             Thu 06 Aug 2026 02:27:09 +0000
ROA not before:           Thu 06 Aug 2026 02:27:09 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.124.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:27:09 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=55308F279CCDF72A27BEA283627BC55EFE5E5FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:71:1c:91:57:8d:8e:85:85:69:12:fd:12:ce:
                    fe:60:a2:98:8d:05:c6:63:08:f9:fe:a1:2e:e9:62:
                    d7:b0:9c:93:58:08:0b:13:42:b5:62:81:b7:31:14:
                    30:96:94:56:b2:3b:f6:f5:d4:7f:f3:dd:e0:72:16:
                    0e:57:19:e5:6c:53:d4:36:f1:e9:d6:bd:8e:4e:d6:
                    cf:80:2b:58:bc:cd:b4:41:7f:81:79:66:a2:e6:35:
                    de:77:20:7a:91:f7:b8:79:50:94:cc:fc:4e:be:db:
                    e6:d7:8e:9d:8d:4c:32:b4:2c:58:82:65:bf:db:97:
                    99:c3:3a:75:aa:a0:ab:4b:54:1f:9d:f7:df:1d:77:
                    24:15:06:55:87:bf:10:8d:0a:68:78:4f:5e:24:4b:
                    fa:0f:2f:d6:d7:bc:6f:8d:14:30:10:62:4c:02:10:
                    c9:cd:e3:c7:8c:86:e7:a7:69:17:9f:a7:82:db:97:
                    d6:68:33:3b:f9:1d:04:9d:68:72:7b:64:ab:59:d3:
                    9a:42:c1:d4:6f:57:fe:ea:73:0a:1b:ea:89:f2:3d:
                    3a:de:5e:02:99:94:bf:8c:3a:5c:2a:bf:18:ee:c4:
                    b7:9e:ee:d8:3a:7f:ff:03:30:0f:1f:d5:18:2a:ea:
                    09:00:a2:fb:e7:56:59:de:64:58:e9:d3:03:ad:a3:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:8F:27:9C:CD:F7:2A:27:BE:A2:83:62:7B:C5:5E:FE:5E:5F:DA
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/VTCPJ5zN9yonvqKDYnvFXv5eX9o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:53:97:86:c2:96:0e:9b:b0:31:a4:5b:cb:2a:a4:58:65:8a:
         ca:8a:a6:c5:e4:e4:2b:e1:c8:cb:ea:69:eb:c4:14:da:8f:16:
         3a:dd:8a:24:f3:31:7a:70:e8:67:52:cd:76:57:ff:77:6c:f9:
         b9:b9:25:7a:da:b3:ae:33:e6:8d:65:31:ea:ee:de:14:0e:09:
         42:6d:45:59:ed:64:ac:77:57:c1:b6:80:e3:ef:8e:e8:79:86:
         da:4c:ac:4e:21:32:7c:75:62:37:b3:af:bf:18:cd:29:84:9e:
         62:59:27:b3:58:be:2d:08:02:5b:0b:d5:96:53:2b:29:3c:6f:
         9a:a6:d7:d6:6e:b5:18:61:2a:81:3c:96:0c:8d:ca:0d:1f:a6:
         5e:f7:0d:24:1d:82:1e:34:9d:e5:28:7a:e8:3a:de:3a:2e:d3:
         0a:7d:12:91:90:db:47:c9:a8:9f:f8:7d:97:4c:3e:c1:10:28:
         d5:4a:77:34:30:03:ce:2b:b3:67:fe:5d:99:8b:b4:17:de:f9:
         8b:4a:55:0b:2b:11:a6:67:9a:4b:ef:06:51:cc:05:d5:cc:df:
         58:a7:be:78:a7:06:f0:74:c4:40:95:53:5e:8e:61:d1:17:28:
         80:93:5f:fc:27:83:7a:3d:8b:ea:75:a9:60:35:09:ea:7e:1c:
         d7:65:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:03 2026 by rpki-client