Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cY9qpC0nuEkTS1Zp0MPNYE9xJaY.roa
File:                     cY9qpC0nuEkTS1Zp0MPNYE9xJaY.roa (raw, json)
Hash identifier:          i1uZqKh6wUfyjzaWGn1GNaJWC3Tnb5FbMg/qviqUBdY=
Subject key identifier:   71:8F:6A:A4:2D:27:B8:49:13:4B:56:69:D0:C3:CD:60:4F:71:25:A6
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       54
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cY9qpC0nuEkTS1Zp0MPNYE9xJaY.roa
Signing time:             Thu 25 Jun 2026 13:06:54 +0000
ROA not before:           Thu 25 Jun 2026 13:06:54 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        157.8.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jun 25 13:06:54 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=718F6AA42D27B849134B5669D0C3CD604F7125A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:c5:51:fb:76:d3:b9:03:51:75:0b:b0:d6:
                    aa:30:b3:05:69:06:1c:42:7f:23:54:d2:d0:14:ad:
                    cd:d6:c7:ea:12:d8:55:28:ef:53:b3:2f:f4:d9:e4:
                    d6:b0:8f:bc:b4:d2:01:b2:34:87:1f:3f:d3:a3:d7:
                    28:99:81:30:63:38:cc:17:0b:bf:08:92:9a:3d:df:
                    1b:d0:8b:09:7d:6e:52:fb:9d:92:cb:0f:b6:82:4f:
                    80:f1:60:0a:ab:a7:62:f8:87:ba:7a:07:61:22:63:
                    1b:4e:71:46:56:21:80:d9:67:71:42:f5:34:ae:a1:
                    f0:e1:92:16:36:f6:05:19:1e:18:52:71:b5:dd:f0:
                    d7:ab:42:4f:87:72:1f:5f:33:50:8b:2f:b0:64:0f:
                    b6:a7:50:08:c3:6c:07:e9:66:f0:1e:fd:f5:45:31:
                    03:af:77:6e:b4:7b:a2:9c:95:b9:1f:2c:37:90:08:
                    9c:9a:fa:a8:30:b9:94:dc:43:bf:35:bb:65:3f:d2:
                    9b:9a:82:29:f0:38:31:6e:f8:f3:61:46:93:4d:e4:
                    41:40:be:82:ea:30:4c:f0:0b:35:39:b9:f1:b4:22:
                    3e:42:eb:96:d2:63:38:d4:69:a2:04:3d:2c:f9:91:
                    27:7b:40:ea:e7:f5:ed:c5:81:ca:f5:42:46:58:d2:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8F:6A:A4:2D:27:B8:49:13:4B:56:69:D0:C3:CD:60:4F:71:25:A6
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cY9qpC0nuEkTS1Zp0MPNYE9xJaY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:ef:a9:2a:f2:6c:07:51:89:5e:41:16:db:7d:72:22:9b:
         6b:22:f0:93:e7:c9:65:fc:36:e1:37:9e:78:04:28:18:52:b7:
         c4:4f:91:79:17:1a:35:1b:ee:03:95:2c:92:d4:96:b3:d4:3f:
         72:b7:e0:81:12:e1:61:25:0e:cf:c3:39:9e:04:c0:03:7e:12:
         a7:49:16:3c:f9:2e:b8:7c:74:6b:3e:47:17:93:23:e9:a9:1d:
         13:0c:bf:19:4a:96:77:e2:06:ab:42:6c:57:0e:d0:9e:34:22:
         98:57:2e:5d:4e:ad:b8:0d:e8:6b:4d:ac:0a:24:7f:43:20:22:
         1f:1c:e3:bc:96:de:45:7a:d4:b6:a0:35:1c:2f:26:66:ea:b0:
         96:4b:41:43:64:f4:2d:d9:2c:5a:c1:4d:a9:21:f9:23:3e:f9:
         02:49:30:18:d9:92:75:83:64:d6:3f:54:9b:27:85:59:6b:60:
         46:bb:70:24:29:71:ee:56:94:86:27:ad:a7:29:e5:d9:77:bb:
         e5:ce:46:1b:dd:13:12:23:47:85:e2:c2:f0:71:76:0b:42:12:
         69:03:f1:05:0e:8d:3c:b4:8c:0f:c3:cc:1b:0d:bf:d2:ba:2b:
         13:2b:34:67:a2:dc:13:05:86:80:fb:15:d3:9e:b9:71:e0:31:
         75:1e:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:37:40 2026 by rpki-client