Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/dbp7BOQRRx6Q313NK7XzhsJghj8.roa
File:                     dbp7BOQRRx6Q313NK7XzhsJghj8.roa (raw, json)
Hash identifier:          EhozXfD5FxYnPi3ry4C4W/KzhLDOJq1AdHyhjUqWcfw=
Subject key identifier:   75:BA:7B:04:E4:11:47:1E:90:DF:5D:CD:2B:B5:F3:86:C2:60:86:3F
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       39
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/dbp7BOQRRx6Q313NK7XzhsJghj8.roa
Signing time:             Wed 13 May 2026 01:52:20 +0000
ROA not before:           Wed 13 May 2026 01:52:20 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        61.124.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 14:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: May 13 01:52:20 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=75BA7B04E411471E90DF5DCD2BB5F386C260863F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:97:06:a1:85:52:35:e8:ea:8e:14:04:e8:0c:
                    ee:d1:f8:cf:6c:df:11:ad:41:31:be:06:a6:ec:2c:
                    7b:ee:ba:86:19:37:5a:b7:e0:36:5f:29:09:36:5d:
                    a2:84:ca:aa:e8:60:4a:d8:70:41:68:dc:ae:19:c9:
                    3f:76:f2:22:c4:91:70:8a:d4:93:94:d6:56:0b:c7:
                    e0:72:4c:e1:b8:b1:96:a7:c4:64:ae:16:5a:47:96:
                    08:b7:86:e7:73:7c:59:3b:cb:37:48:a3:5f:ed:87:
                    fd:f4:90:3c:66:d7:0f:b5:65:2e:d4:41:fb:db:74:
                    34:19:8f:11:07:9f:51:e5:21:24:73:48:40:8e:a7:
                    fd:40:fb:9d:6e:69:33:65:22:dd:03:ab:fe:15:c8:
                    fc:88:8d:6f:5b:91:0c:95:55:a0:9e:7a:cb:57:8e:
                    18:ad:57:2c:ac:91:24:0f:6c:14:2a:a4:a7:59:5c:
                    53:9a:8c:72:05:b7:75:67:26:ec:44:11:b2:17:7d:
                    a0:14:27:ec:f0:59:b4:fe:b7:be:36:a1:8f:88:a3:
                    0a:32:67:e7:b6:ba:9c:af:29:02:4c:01:b0:27:3e:
                    44:75:e9:75:31:7d:88:32:30:c4:db:94:01:75:04:
                    11:5d:1f:58:bf:7e:24:7e:42:c4:a6:34:6b:45:8a:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:7B:04:E4:11:47:1E:90:DF:5D:CD:2B:B5:F3:86:C2:60:86:3F
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/dbp7BOQRRx6Q313NK7XzhsJghj8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:42:b9:1d:d2:53:6d:28:9d:c8:8d:55:5e:c5:95:39:2b:fa:
         15:d9:64:ca:1a:65:a4:e8:93:10:15:3d:51:6e:47:e7:53:c6:
         c5:5a:e0:ed:b7:1a:58:2c:0d:41:4d:42:ec:a3:71:67:99:4f:
         c4:26:bd:c0:96:7c:9b:be:d2:14:d6:ea:06:c3:f3:ae:97:7c:
         da:9d:1d:3e:ea:6d:e3:53:47:5c:a9:2d:2e:73:da:6f:4b:95:
         9e:09:10:f3:65:eb:e8:66:26:e9:63:25:5c:42:d5:51:e8:3d:
         41:3c:18:5f:b5:52:fa:2a:fe:b8:da:a4:fb:2d:fa:5e:37:ce:
         d2:6d:a5:a8:19:23:7d:cd:3e:a8:da:c1:bd:9d:a3:53:14:28:
         6f:5a:d7:f1:a7:0e:bd:4a:88:ee:22:61:3b:00:ef:b1:3d:94:
         0e:c8:ce:7c:d3:71:a1:fc:e7:2e:a7:d4:e5:a0:f1:67:dc:bc:
         be:87:dc:df:da:22:09:1d:ae:74:dd:ba:49:37:78:74:55:c2:
         37:e6:3b:64:61:54:1c:2f:b9:89:a0:9f:e3:48:7e:fe:5e:18:
         d8:4e:82:c7:cf:1b:5e:2d:dd:e4:19:5d:2a:36:22:31:f5:54:
         c2:7c:57:6c:06:9e:6c:c9:f9:94:bd:40:44:b9:aa:a7:f6:34:
         98:c8:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:36:28 2026 by rpki-client