Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/dVNc_C-e9LiPeyjFd_AgWIMGjAY.roa
File:                     dVNc_C-e9LiPeyjFd_AgWIMGjAY.roa (raw, json)
Hash identifier:          pumQLEL69uEq/0gbPO7vgcRN2kaJjDaNsscpW7D3WY0=
Subject key identifier:   75:53:5C:FC:2F:9E:F4:B8:8F:7B:28:C5:77:F0:20:58:83:06:8C:06
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       60
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/dVNc_C-e9LiPeyjFd_AgWIMGjAY.roa
Signing time:             Thu 06 Aug 2026 02:31:07 +0000
ROA not before:           Thu 06 Aug 2026 02:31:07 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.124.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:31:07 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=75535CFC2F9EF4B88F7B28C577F0205883068C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:ad:15:91:66:b8:0e:3a:ad:d3:05:b8:35:
                    8f:b6:03:54:eb:6a:48:5f:c0:99:da:ad:c2:58:59:
                    f4:63:07:04:e6:5b:73:dd:37:7a:32:5c:21:ff:a5:
                    86:f5:cb:97:63:c2:43:6a:f7:96:e7:fe:ad:ce:9f:
                    bc:cd:d6:a5:71:19:9b:6d:f3:37:b3:6c:8c:58:06:
                    63:a7:5c:ba:f8:86:af:53:3b:f4:f2:42:88:94:a4:
                    3a:47:c2:0d:8f:8e:f8:df:63:ce:79:f6:cd:02:df:
                    b1:d0:69:41:c4:3e:ae:ae:58:7d:a9:1b:79:bc:c0:
                    27:10:be:1e:c5:65:98:4a:48:ed:ed:94:03:60:69:
                    d8:28:9c:6d:e0:d5:9b:df:3f:6b:db:c1:d2:20:29:
                    5b:71:d3:9e:de:f6:1a:41:50:5b:67:a0:7a:32:30:
                    62:1d:b1:a2:b5:15:7f:76:ba:23:33:ae:36:8f:34:
                    0e:44:eb:e4:41:1b:51:9e:60:8e:07:5d:cd:8b:be:
                    9f:5f:53:36:95:8b:a4:50:5a:db:53:50:bd:0d:19:
                    0f:c7:5d:83:9c:72:1d:f0:9d:39:a9:a2:5c:18:a4:
                    8b:a5:ae:24:38:75:7b:15:5d:ba:cb:e7:21:16:08:
                    0e:8d:1d:1a:53:e0:5c:4e:16:09:c1:e5:d3:24:39:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:53:5C:FC:2F:9E:F4:B8:8F:7B:28:C5:77:F0:20:58:83:06:8C:06
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/dVNc_C-e9LiPeyjFd_AgWIMGjAY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:1f:80:6f:de:21:df:6d:93:cd:d6:41:3f:c4:55:2b:39:03:
         38:d6:d9:27:51:d3:a9:52:bd:02:bc:f8:71:37:fa:ab:1d:3e:
         2c:5f:ad:3f:bb:e3:03:94:14:b4:a9:e8:d2:27:4a:57:1c:ed:
         57:25:54:44:96:06:2e:35:43:79:91:ed:79:fe:0f:10:e7:6e:
         2f:37:ad:b8:b8:42:70:f7:b8:40:02:0f:10:32:aa:7b:9a:59:
         c0:57:96:eb:30:3f:46:11:4c:ca:e0:df:c4:72:69:af:c4:c0:
         03:e2:cc:ee:62:97:a7:f9:9e:28:7d:7d:7b:50:9c:26:80:fb:
         08:08:cf:c1:bb:05:8f:3d:13:1d:ea:f2:7b:35:c7:bb:6e:fe:
         1b:58:fd:c6:cb:12:56:02:ec:ee:bb:dc:ef:5e:0b:3b:dc:09:
         18:e1:48:4d:fd:81:dc:f2:23:d2:e4:d9:57:b4:4c:b1:15:c4:
         58:13:61:d8:00:29:f0:a2:1d:ec:b4:d5:99:76:ad:3c:da:a5:
         38:76:2f:4b:24:45:9b:96:2c:3c:ee:0c:7d:7d:b1:59:2f:14:
         56:d8:1e:86:f6:f0:ba:a3:24:0f:a8:0c:d7:77:2e:ee:81:27:
         31:49:20:75:fe:f5:4f:8a:52:da:da:34:50:3a:c0:13:08:93:
         24:85:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:05 2026 by rpki-client