Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/X8t9cj3r82d2pIk7j6TSPDC9a3o.roa
File:                     X8t9cj3r82d2pIk7j6TSPDC9a3o.roa (raw, json)
Hash identifier:          wsja0gSJ6D7UrM1tER6sWAOd57a/Qm6NDcIbEw0kd+c=
Subject key identifier:   5F:CB:7D:72:3D:EB:F3:67:76:A4:89:3B:8F:A4:D2:3C:30:BD:6B:7A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       52
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/X8t9cj3r82d2pIk7j6TSPDC9a3o.roa
Signing time:             Thu 06 Aug 2026 02:27:10 +0000
ROA not before:           Thu 06 Aug 2026 02:27:10 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.124.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:27:10 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=5FCB7D723DEBF36776A4893B8FA4D23C30BD6B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:11:33:da:91:fe:c1:2f:5b:bd:81:23:07:
                    26:71:53:8e:3e:79:79:23:5b:15:66:90:14:1f:a4:
                    45:0f:a2:53:63:17:4d:a9:ac:32:38:cf:f9:f3:2e:
                    c0:a4:88:a1:d9:e1:9e:d7:16:c2:c5:bf:9c:9f:8e:
                    1b:7e:ba:88:19:05:af:68:e6:87:7a:a8:34:04:a4:
                    71:c8:f9:8c:78:4d:50:f7:51:00:58:58:7e:b4:ea:
                    70:6a:8e:05:62:f4:fe:db:5a:4e:4a:e3:ac:49:49:
                    a2:15:11:fa:79:82:e3:44:17:3c:91:9c:ab:ad:eb:
                    f8:e3:53:fc:17:e5:25:8d:6d:cd:81:37:e0:97:4f:
                    df:f4:2b:b6:2c:5c:9a:e6:62:22:ac:31:55:50:ae:
                    4e:ab:c8:6a:9f:95:e0:72:d0:5c:c6:00:55:95:0a:
                    e3:ab:08:62:5e:f3:7e:56:48:71:8a:22:ae:c3:fc:
                    43:1a:a5:43:b3:07:e3:28:0a:67:29:c9:38:f7:d2:
                    2e:27:56:d0:0b:b2:68:c9:10:26:94:1d:df:18:e2:
                    f7:77:6c:e4:e0:09:1d:0e:65:1f:0d:7a:68:f1:9c:
                    db:ce:d5:a5:73:02:4c:f1:e1:9d:dc:68:9d:3a:71:
                    1f:63:b1:80:8a:fa:fa:e6:33:8e:e6:36:98:00:2e:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CB:7D:72:3D:EB:F3:67:76:A4:89:3B:8F:A4:D2:3C:30:BD:6B:7A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/X8t9cj3r82d2pIk7j6TSPDC9a3o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:71:67:09:c3:d1:20:11:39:ec:e7:7b:2d:67:6e:fd:b1:dd:
         a2:7b:32:e3:16:19:ad:f3:af:00:2a:6d:61:3b:4f:c8:81:9f:
         f9:67:55:33:3c:09:50:ec:4b:f4:52:74:90:6b:5d:95:04:cd:
         1f:1f:66:d3:e6:13:f4:42:5f:06:0a:ed:30:e6:19:35:c8:22:
         ae:4a:33:f4:59:ee:2f:6e:f1:6c:d1:ac:65:3b:09:b3:88:02:
         4d:fe:14:e3:8d:8f:70:74:31:e8:26:5b:8c:4d:66:26:66:c7:
         c7:26:41:b3:05:a9:18:f2:cb:72:18:82:dd:73:db:44:dc:ff:
         c2:09:46:e5:99:19:3e:a5:ac:36:32:0a:e4:46:25:30:75:4f:
         e5:21:ca:56:8d:94:a6:d7:5a:7f:20:4c:34:02:7a:2f:e5:76:
         4b:54:54:ed:93:3a:ec:86:d1:b1:6e:97:5f:3c:f2:fb:32:d0:
         38:4c:07:94:19:d6:a2:96:45:87:56:29:22:4a:66:8a:92:27:
         29:20:ce:85:60:92:c9:e1:d4:c7:14:46:64:0e:27:33:7a:70:
         af:4b:f5:21:4c:93:37:64:5f:ab:f2:fc:6c:79:5a:9b:ae:66:
         1d:88:28:db:da:cb:6d:8b:a2:6c:73:94:ae:f2:38:c7:7f:b0:
         88:94:6e:c9
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDgwNjAy
MjcxMFoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNUZDQjdENzIzREVCRjM2
Nzc2QTQ4OTNCOEZBNEQyM0MzMEJENkI3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMghETPakf7BL1u9gSMHJnFTjj55eSNbFWaQFB+kRQ+iU2MXTams
MjjP+fMuwKSIodnhntcWwsW/nJ+OG366iBkFr2jmh3qoNASkccj5jHhNUPdRAFhY
frTqcGqOBWL0/ttaTkrjrElJohUR+nmC40QXPJGcq63r+ONT/BflJY1tzYE34JdP
3/QrtixcmuZiIqwxVVCuTqvIap+V4HLQXMYAVZUK46sIYl7zflZIcYoirsP8Qxql
Q7MH4ygKZynJOPfSLidW0AuyaMkQJpQd3xji93ds5OAJHQ5lHw16aPGc287VpXMC
TPHhndxonTpxH2OxgIr6+uYzjuY2mAAuXgcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRfy31yPevzZ3akiTuPpNI8ML1rejAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xOTEvWDh0OWNqM3I4MmQycElrN2o2VFNQREM5YTNvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD18ITANBgkqhkiG9w0BAQsFAAOCAQEA
J3FnCcPRIBE57Od7LWdu/bHdonsy4xYZrfOvACptYTtPyIGf+WdVMzwJUOxL9FJ0
kGtdlQTNHx9m0+YT9EJfBgrtMOYZNcgirkoz9FnuL27xbNGsZTsJs4gCTf4U442P
cHQx6CZbjE1mJmbHxyZBswWpGPLLchiC3XPbRNz/wglG5ZkZPqWsNjIK5EYlMHVP
5SHKVo2UptdafyBMNAJ6L+V2S1RU7ZM67IbRsW6XXzzy+zLQOEwHlBnWopZFh1Yp
IkpmipInKSDOhWCSyeHUxxRGZA4nM3pwr0v1IUyTN2Rfq/L8bHlam65mHYgo29rL
bYuibHOUrvI4x3+wiJRuyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:01 2026 by rpki-client