Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/gZrZYNEM2n2HaG_phznYnxnXpQs.roa
File:                     gZrZYNEM2n2HaG_phznYnxnXpQs.roa (raw, json)
Hash identifier:          QW5gWe3sg7mXSuTkwryuxa+P7FBnBQ21Ge3yUfv7zis=
Subject key identifier:   81:9A:D9:60:D1:0C:DA:7D:87:68:6F:E9:87:39:D8:9F:19:D7:A5:0B
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       41
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/gZrZYNEM2n2HaG_phznYnxnXpQs.roa
Signing time:             Wed 13 May 2026 01:52:24 +0000
ROA not before:           Wed 13 May 2026 01:52:24 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        61.124.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 14:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: May 13 01:52:24 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=819AD960D10CDA7D87686FE98739D89F19D7A50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:31:d4:e9:97:a3:99:6f:e8:09:a3:3a:51:
                    02:d5:d7:37:d8:78:fc:2f:7b:3a:1a:e1:f6:75:9c:
                    8b:81:81:83:0a:34:9b:dc:5d:bb:f2:b7:f8:ac:7e:
                    98:af:e7:dc:77:95:ee:f9:25:a7:12:97:53:68:23:
                    6b:44:5b:60:79:f1:3a:c2:63:78:3a:e1:38:bd:e9:
                    e9:43:a5:4f:7a:c8:df:b6:ae:20:e8:7c:a1:14:af:
                    dc:4d:e4:6e:4d:af:72:8a:30:f7:44:76:52:d1:f1:
                    0d:ff:e7:76:cc:41:d9:e8:1b:6e:3e:07:10:28:1c:
                    4f:47:40:bf:ff:3a:ef:22:95:e5:27:17:43:a9:bb:
                    78:e5:df:44:34:34:41:ed:9f:f6:ac:82:f0:36:81:
                    34:4e:a7:34:d6:24:2e:32:f2:7f:0c:a9:9a:e9:ef:
                    97:44:5b:e3:5c:6f:9e:f2:29:4c:0c:60:90:b4:40:
                    40:b8:30:f1:1e:58:44:18:2e:b0:74:e9:f1:82:84:
                    da:9c:ad:eb:9f:54:f4:56:83:76:70:e8:2c:22:fd:
                    a3:fb:80:1f:72:4a:39:64:81:9b:93:a7:b3:e0:88:
                    61:b2:a0:8d:4a:5a:58:04:20:f4:43:c6:ec:88:0a:
                    70:ab:b9:65:de:b4:ee:63:fe:9a:bb:57:eb:6c:02:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9A:D9:60:D1:0C:DA:7D:87:68:6F:E9:87:39:D8:9F:19:D7:A5:0B
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/gZrZYNEM2n2HaG_phznYnxnXpQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:2e:8f:61:62:2a:85:4a:cb:75:a6:80:40:59:b7:14:0c:
         b5:24:a0:a6:4b:95:12:ee:9e:8d:cf:2b:bd:63:55:5e:dd:83:
         43:7b:e6:51:98:78:59:19:a3:1a:20:32:ee:1e:b8:d8:5f:87:
         61:51:45:1d:d4:2f:08:84:15:4c:f5:41:83:03:3b:0f:b8:e3:
         9c:6e:7c:2a:b8:42:49:f4:1f:3b:a7:73:b3:00:61:05:48:71:
         0b:06:51:b6:43:5f:79:ba:49:83:6d:c9:9a:e1:69:87:39:39:
         1f:70:79:dd:f5:7f:69:53:21:fe:06:4b:a2:83:8f:e3:be:db:
         b5:44:ef:44:a0:30:8a:19:68:94:c5:8d:fe:f0:ea:c3:d9:74:
         94:eb:c7:8a:67:b5:b4:4f:43:8d:dd:a9:37:a4:8b:7b:07:21:
         ac:ae:37:7a:8a:5b:4d:6a:79:61:7e:53:96:a7:8c:bb:21:cf:
         7a:d3:a4:16:94:41:98:8c:ae:2e:d1:ad:81:be:6c:9b:3e:61:
         21:a6:6f:6c:52:bf:89:8b:59:96:84:d2:c1:95:a5:04:4f:01:
         ef:43:49:0d:79:fb:0e:ae:e1:38:f4:9b:f1:37:dd:6a:d0:90:
         1e:67:78:6d:a4:f1:ea:f0:12:8c:13:2d:e5:ba:c6:e0:aa:da:
         d0:32:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:36:30 2026 by rpki-client