Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/VlQp1xdZB7S9mWXCdh8ecFAU_Y0.roa
File:                     VlQp1xdZB7S9mWXCdh8ecFAU_Y0.roa (raw, json)
Hash identifier:          ggbaxXN2Myn9g93bd1mIQy4bHJTltYWOTKPfjGJYkDM=
Subject key identifier:   56:54:29:D7:17:59:07:B4:BD:99:65:C2:76:1F:1E:70:50:14:FD:8D
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       5E
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/VlQp1xdZB7S9mWXCdh8ecFAU_Y0.roa
Signing time:             Thu 06 Aug 2026 02:31:07 +0000
ROA not before:           Thu 06 Aug 2026 02:31:07 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.124.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:31:07 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=565429D7175907B4BD9965C2761F1E705014FD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:d0:2c:d7:a8:bf:9f:34:e5:6d:a3:65:c0:
                    8c:ae:eb:82:e9:16:cd:57:fb:ac:01:51:6f:aa:5e:
                    50:df:f6:28:44:f7:f4:5b:a4:f4:88:bf:41:87:5a:
                    59:2d:77:6c:07:fb:29:d2:e6:19:99:31:c6:b0:75:
                    ff:ee:d2:ce:be:f0:a4:cb:95:ed:05:b2:d6:31:7b:
                    a5:a6:3f:6e:39:0e:f9:3f:57:71:94:69:f8:af:e5:
                    0f:f1:fd:50:a8:49:2d:ce:c1:39:49:c1:30:85:a7:
                    7b:3f:83:59:5a:75:44:28:29:ae:6a:bb:cd:aa:14:
                    ab:67:79:27:9d:08:fb:63:9e:0e:13:79:7e:7e:db:
                    3f:c5:e9:12:23:bf:bd:9e:73:7b:3b:f8:17:5c:97:
                    13:67:35:72:65:d3:9c:23:58:fb:cb:a6:c2:d3:f3:
                    de:45:ea:ae:6d:16:e3:6e:d2:1e:73:23:36:9e:2f:
                    48:48:2d:32:16:f9:76:d1:cc:60:c9:24:2c:fc:ea:
                    d5:7d:19:c7:03:64:1d:b7:3d:d3:82:0c:66:56:f9:
                    86:9a:db:e0:e5:eb:36:a5:19:6d:8e:9b:b6:1d:b6:
                    af:05:a8:89:c0:b6:84:94:3c:78:f0:a4:2f:ae:e3:
                    bc:94:cd:ab:fa:88:33:1a:41:78:9e:39:dc:29:46:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:54:29:D7:17:59:07:B4:BD:99:65:C2:76:1F:1E:70:50:14:FD:8D
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/VlQp1xdZB7S9mWXCdh8ecFAU_Y0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:1e:4e:04:0c:91:34:d4:f0:8a:ea:a5:3c:36:07:2a:e7:18:
         e4:9d:77:25:49:1f:b9:a2:35:30:9d:58:20:8b:02:17:40:b1:
         b3:17:e9:8b:73:8c:63:35:99:35:31:24:63:87:f4:38:59:86:
         94:bc:22:1d:97:8e:a2:ad:29:cb:10:fc:50:0c:ac:0a:4d:d9:
         78:1c:fa:ba:52:e5:81:bd:c4:ed:22:28:90:e6:c7:0a:07:c2:
         c3:50:a7:13:b4:7d:f3:7c:88:61:ff:10:4f:e0:3e:38:a7:46:
         0a:51:21:3b:eb:1e:88:fc:9e:56:01:41:cc:f0:13:c5:fc:80:
         c1:43:09:60:45:74:cd:75:9e:4c:b6:63:77:08:7f:7d:9a:2c:
         c8:1c:c3:da:8a:72:9d:ab:f2:28:93:ca:51:1f:7d:35:78:6c:
         88:1c:f9:ab:78:a7:41:69:24:69:6b:d0:51:b0:bf:f4:35:ec:
         06:91:d1:10:68:0b:75:f9:8c:a1:a8:e6:20:13:45:cf:4e:1e:
         c6:af:be:cf:ef:9c:7d:c1:12:31:4e:fb:54:f8:5d:2b:ae:de:
         88:63:dd:1a:32:73:70:d8:c5:f9:79:a4:a7:9f:38:0c:fa:6f:
         bc:0d:12:ca:22:1b:fa:c8:0e:eb:45:78:7d:4d:7b:1f:5c:82:
         22:20:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:01:59 2026 by rpki-client