Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/YrVC_O_YcQNqnyYQ62Krv1iaRmo.roa
File:                     YrVC_O_YcQNqnyYQ62Krv1iaRmo.roa (raw, json)
Hash identifier:          NbJhuXAF4j+wLANvRYGuFOoNXs1h5GTegssSVNetxwo=
Subject key identifier:   62:B5:42:FC:EF:D8:71:03:6A:9F:26:10:EB:62:AB:BF:58:9A:46:6A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       61
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/YrVC_O_YcQNqnyYQ62Krv1iaRmo.roa
Signing time:             Thu 06 Aug 2026 02:31:08 +0000
ROA not before:           Thu 06 Aug 2026 02:31:08 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        61.124.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:31:08 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=62B542FCEFD871036A9F2610EB62ABBF589A466A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:8b:b8:9d:c5:1a:61:0c:38:ae:bb:15:8d:
                    07:f7:a3:33:db:0d:a4:2c:26:85:2d:da:69:3c:3d:
                    65:6d:f1:35:de:9a:bb:db:8a:6b:b7:8f:83:60:07:
                    67:7c:b4:39:d5:06:c5:81:33:36:7e:f0:2c:6a:b2:
                    37:c8:44:1a:ae:67:27:bd:9b:c3:00:d2:31:0c:2d:
                    02:1c:65:c4:b9:59:e5:77:07:1e:13:0f:ec:cb:c5:
                    4f:58:51:14:72:e8:0a:d4:d7:71:2c:43:58:4e:55:
                    cb:94:58:32:e3:e9:67:b3:39:1e:e0:3d:6d:a1:e8:
                    77:18:a9:fa:23:a7:c7:31:1c:5c:e3:9c:ae:6d:74:
                    ef:34:34:e6:ef:b0:a8:68:9a:f3:df:76:83:5a:cf:
                    41:33:4a:ae:7d:34:f2:7a:8d:18:1f:e4:00:af:e1:
                    01:cc:a2:27:bb:7f:51:87:af:e4:e5:57:fa:0e:ac:
                    06:94:11:dd:fd:93:e7:e9:60:ee:49:d7:d1:63:fc:
                    6e:c0:bf:48:8c:fa:e0:7e:34:5a:d7:a9:a9:61:aa:
                    5f:29:5c:fb:88:a0:3b:d7:02:6d:f0:77:f5:b1:24:
                    86:e1:8b:bd:83:80:2a:84:6a:98:da:48:93:7d:99:
                    ff:61:01:74:90:c4:ac:93:2b:ec:9b:59:f0:20:b8:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B5:42:FC:EF:D8:71:03:6A:9F:26:10:EB:62:AB:BF:58:9A:46:6A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/YrVC_O_YcQNqnyYQ62Krv1iaRmo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:dc:a5:94:f6:c3:1b:38:ff:bb:0e:3e:d7:c1:01:f9:22:
         44:a3:9f:05:ce:d6:cd:cd:54:6a:e5:a2:b3:fa:c6:94:a3:ae:
         96:21:6a:37:7c:a9:9e:ee:77:8f:59:7c:af:8d:cc:75:fe:85:
         8f:9f:0d:d8:45:99:b4:9f:f6:6f:14:a6:df:dc:f9:39:c5:06:
         7f:c7:cc:79:61:31:7e:58:85:ca:9b:45:d3:24:1f:2a:16:9e:
         a9:94:aa:32:d1:5a:02:8e:48:c7:a9:ab:0f:8e:33:f6:68:b5:
         cc:3f:3a:1a:23:c6:29:15:f2:12:6c:96:6a:ec:d5:64:de:67:
         f1:8a:22:a5:42:99:6f:2a:73:af:89:b3:14:6e:cd:8a:10:e1:
         f9:18:38:db:1d:15:32:62:c1:bb:c6:84:e0:9f:84:0d:17:67:
         fb:47:d1:04:3f:13:88:ed:d9:be:d9:c1:2f:68:56:71:73:2e:
         88:7f:c2:28:2a:fa:f1:cf:14:ce:89:54:b3:45:3c:f0:ae:fd:
         3d:77:b0:82:40:65:be:e0:a2:3f:4b:62:fd:8a:3d:6b:f8:ea:
         86:0b:6a:1b:32:6b:b2:4b:b6:af:c1:c0:49:06:a1:4b:61:ed:
         2d:ff:6c:c9:74:34:43:ed:14:28:7f:e5:47:51:f4:54:dc:d3:
         46:2a:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:25 2026 by rpki-client