Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/qf5Ylnxcn2il9kmKn32Z5grjMS4.roa
File:                     qf5Ylnxcn2il9kmKn32Z5grjMS4.roa (raw, json)
Hash identifier:          psWBR4H/vQPFcWlFGMNAC/pzK5oqgDf1nPWQ0/u6Qtc=
Subject key identifier:   A9:FE:58:96:7C:5C:9F:68:A5:F6:49:8A:9F:7D:99:E6:0A:E3:31:2E
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       56
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/qf5Ylnxcn2il9kmKn32Z5grjMS4.roa
Signing time:             Thu 06 Aug 2026 02:31:04 +0000
ROA not before:           Thu 06 Aug 2026 02:31:04 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        61.124.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug  6 02:31:04 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=A9FE58967C5C9F68A5F6498A9F7D99E60AE3312E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:74:b7:23:f8:54:77:1d:79:dc:24:92:4f:
                    33:ae:4e:7e:e1:da:1d:3d:e0:aa:a4:f3:d5:82:ab:
                    13:7f:91:b0:c5:d9:c3:db:59:c4:7f:24:ad:b1:e5:
                    34:cc:0c:50:c6:e0:2d:5b:6c:f3:b5:8e:7f:59:ca:
                    e6:3b:ed:6c:2c:c7:62:81:5b:91:3f:d9:08:a4:cc:
                    b5:a7:32:f1:e7:a5:bb:f4:80:08:8b:ec:c5:97:23:
                    a3:2d:0b:32:a8:c3:da:7b:79:06:7a:2f:af:e4:a6:
                    d1:06:48:33:75:1a:ed:97:07:60:a3:a4:53:e2:85:
                    bc:76:0a:bc:5d:50:69:43:43:09:9d:e5:07:77:17:
                    5d:3c:41:a0:3d:24:9d:ff:fa:5a:c6:ea:c2:21:15:
                    72:4e:92:6f:99:e9:46:01:88:32:92:b7:84:16:62:
                    41:9d:f3:0b:fc:56:00:e0:e9:64:0b:d4:be:91:2e:
                    9e:ec:53:be:d8:7c:2a:00:00:51:63:7e:61:17:0c:
                    39:47:54:ae:4f:17:aa:d6:90:1c:65:59:e1:36:fd:
                    9a:6b:77:cb:12:fe:76:b6:54:30:0e:2c:d4:82:0d:
                    27:31:6b:72:55:41:c7:75:30:c7:f8:a1:b7:57:78:
                    0a:5a:fd:b1:e8:37:f2:01:b1:5f:2a:24:7e:d1:ba:
                    5e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:58:96:7C:5C:9F:68:A5:F6:49:8A:9F:7D:99:E6:0A:E3:31:2E
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/qf5Ylnxcn2il9kmKn32Z5grjMS4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:cd:71:45:85:d4:e6:57:32:be:12:f4:a2:2b:18:f8:44:
         ff:03:a3:cc:6d:98:be:d6:58:e4:7f:ec:6f:b4:30:8b:9a:cb:
         b5:4e:2d:a9:a6:4e:ad:f6:18:87:0f:6d:56:3b:ae:5e:d6:84:
         ca:ce:4d:e9:2a:b7:7e:d6:a4:36:25:d3:ad:b5:b0:a7:55:82:
         bb:82:b5:5b:89:82:a5:70:ee:64:8d:5f:4b:5a:37:86:fb:f0:
         39:fd:98:80:74:97:e5:a0:77:c3:56:76:59:63:96:ba:ce:b2:
         c2:6d:77:ca:a6:66:db:75:a3:04:20:f2:ff:f2:f3:b4:59:9a:
         8d:3d:b2:5c:92:98:d6:dd:d8:cc:1a:c3:51:a9:3f:9d:4a:f0:
         cd:4b:24:00:aa:0d:32:b7:61:3f:12:10:15:65:be:9f:8d:6f:
         68:b5:4e:55:5c:60:9c:26:8f:c6:66:b8:d2:42:d4:b5:a2:b3:
         2c:30:42:94:2e:61:3a:01:0b:67:39:a6:0a:d4:e7:cc:3c:e3:
         ef:9d:e7:5d:57:01:e8:8a:37:76:9f:2d:ea:68:08:ab:49:ba:
         47:e8:ac:da:43:35:ad:a9:e5:a0:42:ae:f5:5c:fc:fa:eb:64:
         d8:2a:9d:6e:bb:42:e4:a7:0b:2a:c9:e5:55:7a:20:5b:d5:a4:
         ba:4d:23:19
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDgwNjAy
MzEwNFoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoQTlGRTU4OTY3QzVDOUY2
OEE1RjY0OThBOUY3RDk5RTYwQUUzMzEyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJrQdLcj+FR3HXncJJJPM65OfuHaHT3gqqTz1YKrE3+RsMXZw9tZ
xH8krbHlNMwMUMbgLVts87WOf1nK5jvtbCzHYoFbkT/ZCKTMtacy8eelu/SACIvs
xZcjoy0LMqjD2nt5Bnovr+Sm0QZIM3Ua7ZcHYKOkU+KFvHYKvF1QaUNDCZ3lB3cX
XTxBoD0knf/6WsbqwiEVck6Sb5npRgGIMpK3hBZiQZ3zC/xWAODpZAvUvpEunuxT
vth8KgAAUWN+YRcMOUdUrk8XqtaQHGVZ4Tb9mmt3yxL+drZUMA4s1IINJzFrclVB
x3Uwx/iht1d4Clr9seg38gGxXyokftG6Xk8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSp/liWfFyfaKX2SYqffZnmCuMxLjAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xOTEvcWY1WWxueGNuMmlsOWttS24zMlo1Z3JqTVM0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD18IzANBgkqhkiG9w0BAQsFAAOCAQEA
UaPNcUWF1OZXMr4S9KIrGPhE/wOjzG2YvtZY5H/sb7Qwi5rLtU4tqaZOrfYYhw9t
VjuuXtaEys5N6Sq3ftakNiXTrbWwp1WCu4K1W4mCpXDuZI1fS1o3hvvwOf2YgHSX
5aB3w1Z2WWOWus6ywm13yqZm23WjBCDy//LztFmajT2yXJKY1t3YzBrDUak/nUrw
zUskAKoNMrdhPxIQFWW+n41vaLVOVVxgnCaPxma40kLUtaKzLDBClC5hOgELZzmm
CtTnzDzj753nXVcB6Io3dp8t6mgIq0m6R+is2kM1ranloEKu9Vz8+utk2CqdbrtC
5KcLKsnlVXogW9Wkuk0jGQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:02 2026 by rpki-client