Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ONdoSXlG4Wp-M5L3lrdpyIkel0o.roa
File:                     ONdoSXlG4Wp-M5L3lrdpyIkel0o.roa (raw, json)
Hash identifier:          eNsj8erSGljiZvP+C4gSHFjeBmhNyvZKx9kiWyI6rDI=
Subject key identifier:   38:D7:68:49:79:46:E1:6A:7E:33:92:F7:96:B7:69:C8:89:1E:97:4A
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       50
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ONdoSXlG4Wp-M5L3lrdpyIkel0o.roa
Signing time:             Thu 25 Jun 2026 13:02:42 +0000
ROA not before:           Thu 25 Jun 2026 13:02:42 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        157.8.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 14:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jun 25 13:02:42 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=38D768497946E16A7E3392F796B769C8891E974A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:5c:48:84:b2:1c:c0:94:dc:22:1b:ff:df:
                    a1:55:88:fc:ec:e6:c4:b5:94:4f:54:7f:f1:55:8f:
                    77:e1:50:0a:4d:04:45:27:02:0d:66:e3:95:d8:21:
                    ca:6f:57:5d:da:53:bc:e3:d7:9e:a6:4b:0c:67:11:
                    28:f2:e9:84:49:6e:a0:52:22:c1:0e:b0:d0:81:bc:
                    68:42:9f:4c:a1:4a:24:0e:50:b4:d9:b3:a4:bd:a0:
                    c9:b3:66:3a:ad:a0:2a:40:27:75:06:79:f7:c8:56:
                    bd:6d:7d:a2:97:c0:94:3c:db:ee:19:86:b5:60:f8:
                    28:7b:02:6e:e4:39:f7:8a:fb:be:99:39:f4:e8:75:
                    91:6c:13:f8:be:0f:b1:7e:94:0f:b9:50:a4:26:e8:
                    0c:d4:43:fc:9a:0f:49:61:9b:f3:16:04:0f:02:ea:
                    ea:f3:e9:54:e1:6f:5c:e2:63:2d:85:2c:a0:34:35:
                    89:1e:73:b4:9b:79:0e:99:6d:74:3d:cc:ca:b8:8b:
                    3f:d4:e7:f4:09:1c:fa:5c:9f:6b:f3:dc:ad:6c:f3:
                    19:9b:b7:83:98:56:cb:18:ce:a2:77:c9:91:72:81:
                    91:76:ab:bc:a7:a4:91:04:59:a7:96:e8:ce:9b:c7:
                    49:8b:a8:36:37:73:36:ac:95:70:8f:25:59:f9:3c:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:68:49:79:46:E1:6A:7E:33:92:F7:96:B7:69:C8:89:1E:97:4A
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ONdoSXlG4Wp-M5L3lrdpyIkel0o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:6d:94:02:ce:96:0e:72:79:3e:c3:36:cb:ee:33:a4:a7:e1:
         b8:e7:0a:3c:01:cb:74:8a:7a:d5:67:4b:1e:3f:5a:b2:b8:57:
         5d:31:23:d0:9a:51:5c:29:6c:d0:cb:f0:1d:07:ae:02:e6:52:
         96:a7:46:03:de:2a:53:bf:1a:07:82:b1:5a:49:ae:58:d3:c4:
         81:8e:1e:16:90:94:b3:3f:51:8b:3b:10:1e:92:a0:b0:61:67:
         81:c8:c1:a5:4e:02:c1:a9:f9:09:e5:dc:b6:dc:da:d0:65:fb:
         67:1c:44:f9:d4:12:31:be:8b:35:f7:4b:5a:96:c0:ca:70:b6:
         d4:ed:4f:c9:e9:1d:f5:53:79:18:7f:91:3b:4e:c3:c3:3b:58:
         79:2b:60:32:3f:81:b5:0e:5f:be:15:b1:71:93:5d:55:67:9b:
         1a:0b:07:83:04:31:52:58:d8:af:b1:bc:e7:3a:f7:55:cd:72:
         c0:bd:67:5b:ff:df:72:6a:8b:f3:ae:a3:d1:25:fc:38:43:0c:
         08:f5:e9:26:94:ce:0a:ed:57:5f:d3:8f:5b:50:22:48:29:7e:
         b0:fa:b3:f3:cc:01:76:5e:3b:a8:93:8a:39:80:70:c9:b9:f2:
         fa:8c:fd:88:d5:62:fe:09:14:d8:3d:d6:d9:96:59:79:b8:7d:
         38:5d:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:37:33 2026 by rpki-client