Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/zOKzVCmsvh7gmvkVzGO8kewIVfQ.roa
File:                     zOKzVCmsvh7gmvkVzGO8kewIVfQ.roa (raw, json)
Hash identifier:          G2r9LD6Z59dPYwMB6sYFcdpWZ1lBHxPbbrghOYarUPo=
Subject key identifier:   CC:E2:B3:54:29:AC:BE:1E:E0:9A:F9:15:CC:63:BC:91:EC:08:55:F4
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       3C
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/zOKzVCmsvh7gmvkVzGO8kewIVfQ.roa
Signing time:             Wed 13 May 2026 01:52:23 +0000
ROA not before:           Wed 13 May 2026 01:52:23 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        61.124.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 14:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: May 13 01:52:23 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=CCE2B35429ACBE1EE09AF915CC63BC91EC0855F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:1a:43:50:38:f8:e9:e5:db:93:37:cf:92:
                    6d:bb:ee:7a:e0:28:67:fc:35:b3:87:e4:1f:9d:bc:
                    ab:74:81:42:54:56:22:ec:7e:96:f1:a1:30:e4:f8:
                    8b:1b:76:d8:53:40:72:37:d7:22:27:08:32:ce:7e:
                    8f:27:3b:5b:e8:25:56:10:71:01:48:1f:a6:f0:83:
                    cb:15:e5:35:ee:42:88:2c:33:4e:65:3c:a0:d1:b8:
                    ed:1c:b6:f9:90:0e:49:72:e2:0f:c0:f4:e3:fd:3d:
                    97:ed:7f:ef:c2:7b:9b:af:73:5a:06:1a:3d:d8:3c:
                    61:02:02:11:57:ae:7b:f1:1e:66:27:b6:49:a4:5d:
                    74:c9:2d:35:31:53:6d:67:e0:d1:39:5d:4c:98:e9:
                    c4:23:14:19:b3:15:47:15:52:6e:8a:b9:7c:fc:66:
                    63:4b:58:86:5b:e2:aa:6b:6d:b8:20:25:48:f7:2f:
                    d3:25:3e:dd:51:1d:37:5c:6e:0f:5b:d4:5e:d0:f6:
                    c6:f5:78:7a:d6:cf:60:eb:54:55:1c:7b:6d:29:c0:
                    73:86:fc:65:98:8a:4a:1c:56:73:9d:60:5a:31:4b:
                    ea:54:79:b0:ff:59:a1:e9:f2:4a:59:97:06:a6:0e:
                    12:67:86:a6:2c:8d:f5:ef:ac:bd:56:d7:a1:eb:b6:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E2:B3:54:29:AC:BE:1E:E0:9A:F9:15:CC:63:BC:91:EC:08:55:F4
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/zOKzVCmsvh7gmvkVzGO8kewIVfQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:38:46:e0:57:84:eb:7f:29:38:9b:b7:f8:25:52:16:c9:
         da:8b:ad:88:26:ee:58:c1:67:8c:b1:62:78:e3:5d:ad:4f:b5:
         ae:12:75:ce:b3:4a:83:f9:0b:be:e5:e5:aa:24:41:1b:6c:1c:
         13:d8:d6:ba:d4:fa:9e:9c:a5:b9:36:d8:33:0f:6f:8f:f1:3c:
         78:f7:88:b3:26:59:15:31:08:8e:74:90:ef:5d:1b:9f:2d:a9:
         aa:0f:ac:cd:e8:17:eb:2c:d1:e4:04:a9:e8:5c:af:c9:14:23:
         7c:17:f4:c5:3c:c4:5f:83:ae:97:a1:2e:ca:01:12:ec:74:44:
         52:23:6b:39:ac:06:49:1b:97:cb:c7:e5:0e:41:d1:40:5f:62:
         f2:36:86:0b:d5:bc:38:da:ac:e0:ae:07:21:08:89:37:9e:9a:
         30:11:85:6e:25:c1:79:25:b7:d9:19:8f:41:5a:dd:52:0a:e7:
         bc:d7:6a:07:72:bd:61:71:5d:df:d2:10:fc:77:47:37:ad:bd:
         cb:fa:51:6f:9a:40:c8:9e:75:d1:8d:61:1e:80:51:84:dc:0d:
         f1:84:e5:08:b3:d7:18:04:17:c6:dd:ea:26:56:92:1b:7f:61:
         b6:14:fd:5a:f9:8d:e6:f5:e6:53:90:da:00:d5:52:b6:73:9e:
         6e:25:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:36:29 2026 by rpki-client