Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/hSgqL_4lmEjsoRvfrRxkSrtOqvg.roa
File:                     hSgqL_4lmEjsoRvfrRxkSrtOqvg.roa (raw, json)
Hash identifier:          DHpGEu4qQVc78XC5HxEBH6RK8BqA3eMXMQPsWBLVgdo=
Subject key identifier:   85:28:2A:2F:FE:25:98:48:EC:A1:1B:DF:AD:1C:64:4A:BB:4E:AA:F8
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       59
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/hSgqL_4lmEjsoRvfrRxkSrtOqvg.roa
Signing time:             Thu 06 Aug 2026 02:31:06 +0000
ROA not before:           Thu 06 Aug 2026 02:31:05 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        61.124.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:31:05 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=85282A2FFE259848ECA11BDFAD1C644ABB4EAAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:54:4e:4b:42:9c:7c:c2:18:23:02:ec:88:
                    7d:d2:27:a0:f9:e8:50:ef:25:08:34:19:7e:4d:05:
                    60:06:95:7e:56:52:4d:92:d1:0e:9d:51:de:fe:c6:
                    30:56:b6:54:8c:d5:0a:41:de:70:f9:e7:75:b5:8b:
                    8c:cf:0e:5d:63:b5:29:86:d6:87:ee:6a:1b:eb:e4:
                    eb:49:7f:d8:21:40:fe:c3:33:d4:97:99:f1:0f:60:
                    49:ac:37:84:c9:4e:2a:aa:7a:14:b0:d5:24:ed:a1:
                    41:4f:ef:aa:96:07:54:22:f3:5e:23:7f:5d:73:0e:
                    21:3b:39:e4:d6:e6:b6:35:5b:50:9e:99:de:08:41:
                    de:ca:91:04:5d:e6:59:9f:fb:7b:e2:9d:a0:c1:40:
                    19:79:17:52:16:17:ff:6c:eb:1f:5f:49:16:a1:36:
                    d9:d6:d9:fd:74:57:5b:3f:2c:e1:41:fb:ac:8c:c5:
                    2b:78:41:83:a6:9a:89:75:3d:5b:ff:a0:a5:d4:68:
                    d4:50:af:44:21:0e:c6:a1:b0:88:6b:16:4a:da:f6:
                    08:3c:ab:c2:21:9d:5c:4c:f2:61:80:04:d9:f9:da:
                    3d:ee:fc:9e:c9:4a:44:53:36:b5:a7:34:a2:07:be:
                    54:bd:d2:65:f6:86:74:da:aa:f5:70:76:1d:a2:6b:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:2A:2F:FE:25:98:48:EC:A1:1B:DF:AD:1C:64:4A:BB:4E:AA:F8
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/hSgqL_4lmEjsoRvfrRxkSrtOqvg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:7f:32:3c:4a:37:be:6b:2b:c6:c9:e7:e9:98:0a:41:01:
         61:b3:8b:f4:7f:3e:13:23:d2:e2:e5:10:c8:08:79:cd:11:76:
         c2:06:ff:52:8b:16:f2:d5:7e:88:69:3c:58:2d:fa:15:31:79:
         51:7c:ab:ec:f8:22:09:e7:9d:bc:9d:dc:62:8e:c7:09:6f:dd:
         e1:d7:df:d8:e4:b1:70:07:fa:3f:76:86:61:0f:17:9a:7f:97:
         26:e4:a5:d8:99:aa:de:48:7c:be:88:a1:f7:6b:36:78:81:2b:
         4f:16:78:89:b0:90:0b:1e:77:d0:9f:09:1c:2c:09:0d:2c:b5:
         7d:6b:b5:7a:ce:88:e3:b8:6a:13:19:e7:2c:98:c6:23:26:43:
         4d:7f:68:3b:fe:09:05:bf:29:7f:cb:be:75:22:54:61:88:81:
         96:94:62:23:1f:47:d6:fe:5a:26:75:7b:e4:f9:a1:04:36:67:
         ee:f4:41:f2:e6:73:12:aa:1d:3c:c9:99:62:6e:43:a6:52:65:
         33:17:7b:27:0e:60:74:88:82:47:9b:41:29:8d:e7:23:07:64:
         4f:df:b6:19:65:c2:5f:fc:3a:19:0a:2e:66:01:10:6a:8e:a1:
         bd:ac:6a:86:e5:ad:c5:79:f2:d7:3a:9d:35:96:4f:64:2b:1a:
         43:c8:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:44:12 2026 by rpki-client