Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/iN_Oos6iua2Xbt0Zq0AaZ1FQibA.roa
File:                     iN_Oos6iua2Xbt0Zq0AaZ1FQibA.roa (raw, json)
Hash identifier:          ruvfHszYwZGQgLE8t2A1Z0T5NzxFWtUoGTDfcfoL7bw=
Subject key identifier:   88:DF:CE:A2:CE:A2:B9:AD:97:6E:DD:19:AB:40:1A:67:51:50:89:B0
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       5A
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/iN_Oos6iua2Xbt0Zq0AaZ1FQibA.roa
Signing time:             Thu 06 Aug 2026 02:31:06 +0000
ROA not before:           Thu 06 Aug 2026 02:31:06 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.124.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:31:06 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=88DFCEA2CEA2B9AD976EDD19AB401A67515089B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:62:a0:e8:e3:08:1f:c9:11:10:0a:87:d0:
                    83:a9:66:98:85:6e:e6:02:7b:72:23:7e:e0:13:a9:
                    1a:0d:9b:78:41:b2:c8:ee:1c:ae:54:e4:1b:a5:b2:
                    1e:3b:74:68:aa:df:6e:15:d5:43:1e:c3:96:df:02:
                    cc:9f:ba:9e:29:28:41:3d:56:33:b9:8b:1d:3a:6c:
                    4d:89:10:ec:b1:4f:9d:4f:86:2c:75:f6:0c:40:47:
                    44:29:8f:dc:d5:ed:ac:3e:58:6f:b7:c7:0a:96:9a:
                    57:43:05:38:95:8d:c0:78:c9:c9:62:0c:41:ad:8e:
                    d2:14:18:c4:12:25:42:a3:db:13:bf:b6:c1:94:08:
                    26:b7:a2:d5:0f:a8:84:13:a5:13:b9:f8:a2:fd:00:
                    88:80:85:f2:9c:f4:bb:79:54:3b:27:0e:08:a0:9d:
                    06:9c:87:ee:2c:42:c1:37:55:7b:b6:5f:c4:50:16:
                    17:8b:7f:5b:fe:9d:76:36:48:2c:59:f9:1d:b5:2a:
                    60:d9:d1:43:81:bc:ff:5a:ee:7f:3a:99:0d:92:69:
                    1f:75:aa:a6:33:c5:73:6b:59:9e:72:9f:b3:98:02:
                    57:2c:c8:f0:11:76:bb:2e:76:4b:ed:5a:8b:ec:8b:
                    0f:2e:c1:ab:4e:e6:c1:de:a7:9a:7f:7a:b4:6c:fe:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DF:CE:A2:CE:A2:B9:AD:97:6E:DD:19:AB:40:1A:67:51:50:89:B0
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/iN_Oos6iua2Xbt0Zq0AaZ1FQibA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:b5:93:8e:29:d1:dc:4b:5e:89:cd:44:d2:67:7a:12:fa:bb:
         c8:c1:07:28:e9:42:3f:86:38:6d:f6:ee:10:7f:e5:b0:1e:7e:
         0a:4e:73:5f:c3:66:e5:ac:5c:7b:da:e7:c0:20:bb:42:cc:69:
         52:20:48:3f:1d:30:92:d0:b3:62:25:9d:d3:cd:d3:2e:4b:25:
         7d:bc:46:6d:ea:da:4c:62:92:09:71:05:5b:71:8f:83:c9:29:
         55:f1:cd:26:ec:51:eb:d8:b4:58:b9:56:41:c3:5d:e8:a3:11:
         d4:c6:30:de:94:e3:38:0e:75:3d:37:2b:0e:10:7e:f6:23:dd:
         b3:40:68:64:72:7c:c3:b3:ab:14:58:e2:fb:6a:6a:5d:7b:f0:
         56:08:53:11:d1:c2:9b:ac:6c:a7:f3:6e:89:d2:04:98:b0:1b:
         6b:79:d0:24:17:e8:79:b6:8d:92:8b:1a:aa:b6:bf:39:6a:38:
         5a:93:22:5a:8c:15:d1:8c:7b:3c:14:3d:3f:2b:3f:0d:e7:db:
         06:c5:db:dd:b0:13:61:a8:f3:e5:71:bd:41:58:fb:60:1e:97:
         5c:8d:9e:45:a4:56:c4:ef:35:71:97:04:44:12:d2:aa:61:2c:
         d8:14:33:cf:c3:d6:02:57:bf:b0:e6:28:41:9c:9b:b4:9f:83:
         5b:71:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:01:56 2026 by rpki-client