Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/e5Uay7UCO9m09XlhRrBK0OnYADM.roa
File:                     e5Uay7UCO9m09XlhRrBK0OnYADM.roa (raw, json)
Hash identifier:          /ifLE7avOBb+tpjuNOaZFuHVWo+mwhZqycyTD9W5wLc=
Subject key identifier:   7B:95:1A:CB:B5:02:3B:D9:B4:F5:79:61:46:B0:4A:D0:E9:D8:00:33
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       51
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/e5Uay7UCO9m09XlhRrBK0OnYADM.roa
Signing time:             Thu 25 Jun 2026 13:02:45 +0000
ROA not before:           Thu 25 Jun 2026 13:02:45 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        157.8.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 14:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jun 25 13:02:45 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=7B951ACBB5023BD9B4F5796146B04AD0E9D80033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:21:62:7e:18:6c:36:a4:03:e4:11:32:7b:e0:
                    be:49:6b:5f:d4:b8:92:99:4d:7d:fb:47:56:40:c3:
                    c8:0f:d7:1a:4d:f9:07:1e:41:54:bc:0d:e6:d9:62:
                    22:7f:9a:0e:f0:4f:db:53:e4:26:ca:17:57:38:61:
                    5c:0f:9d:05:87:50:5d:c1:4f:8c:ba:de:64:2a:4e:
                    6f:9e:3e:dd:3a:c7:b1:13:78:21:aa:c8:5f:fa:60:
                    c1:4f:f6:42:10:e0:e5:ac:d4:0b:03:1b:0d:06:e4:
                    60:4e:4e:6b:67:3c:b0:0d:06:99:bf:67:a8:d1:7d:
                    40:4d:29:eb:e4:16:10:10:43:7e:5f:58:dd:b3:ac:
                    ca:3a:71:e1:44:a2:eb:ca:12:ad:59:56:65:91:bd:
                    e7:05:27:51:3f:88:e6:4d:81:e1:ed:a9:93:95:37:
                    88:74:46:f8:be:6e:65:8b:2b:45:2c:43:7b:95:21:
                    ff:c8:13:e0:aa:62:5f:b8:19:cf:33:53:56:1f:90:
                    5d:8b:0d:cf:69:48:1d:8a:c3:8e:ed:c9:d1:79:c9:
                    3f:5c:20:1d:45:35:9b:68:9c:b4:8e:3b:e1:a9:6b:
                    4e:26:d8:e4:e9:02:31:8b:d2:5c:bc:d0:c6:0d:52:
                    63:f5:08:c6:81:11:9e:21:43:fb:fc:d2:f1:c7:2e:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:95:1A:CB:B5:02:3B:D9:B4:F5:79:61:46:B0:4A:D0:E9:D8:00:33
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/e5Uay7UCO9m09XlhRrBK0OnYADM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:93:65:1e:10:b0:81:50:ab:95:a9:64:e7:22:f0:7d:c0:
         08:b7:76:bc:a8:89:54:e8:37:5e:73:eb:ac:cf:8d:82:d6:a6:
         65:44:9b:9e:74:16:44:45:ba:26:b3:d8:e4:ca:d7:34:66:13:
         35:03:c8:f3:e9:f3:66:2e:85:14:78:17:de:d1:ad:80:c5:6c:
         1b:45:0e:42:0f:10:4c:ac:71:bf:77:ea:1e:b8:d6:39:65:f0:
         5a:e7:20:39:97:b4:76:69:d4:55:07:9a:eb:b2:3b:f0:17:29:
         fd:05:92:62:c0:b3:7a:c0:02:5e:fa:93:6c:6e:1e:3b:71:41:
         92:bd:9a:f4:0b:9f:a0:c8:11:3d:65:78:b3:62:2f:84:0e:87:
         60:8c:d8:85:e1:f9:ff:d3:95:e0:04:fb:68:94:d5:dd:7a:db:
         db:d9:b7:61:14:93:03:75:4b:ad:4f:64:4d:54:4e:26:40:f0:
         a8:fc:f0:e2:23:de:64:7d:43:dd:e2:ef:06:1c:e7:5c:ee:eb:
         f9:59:3a:dc:0e:db:8f:bb:45:ac:5c:3f:f4:1a:6f:8d:a3:ff:
         fa:d7:c4:78:4a:fd:ad:2b:0c:04:34:79:92:be:72:7f:61:60:
         30:01:f4:43:d7:50:6f:ac:90:2f:8f:b4:12:d5:5b:49:0a:9a:
         5d:a8:c3:f0
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTkx
Q0I5RjRDNDIyRDNCM0Q2NzUzNzFCMThBOERBRERBRTg3OThEMB4XDTI2MDYyNTEz
MDI0NVoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoN0I5NTFBQ0JCNTAyM0JE
OUI0RjU3OTYxNDZCMDRBRDBFOUQ4MDAzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPEhYn4YbDakA+QRMnvgvklrX9S4kplNfftHVkDDyA/XGk35Bx5B
VLwN5tliIn+aDvBP21PkJsoXVzhhXA+dBYdQXcFPjLreZCpOb54+3TrHsRN4IarI
X/pgwU/2QhDg5azUCwMbDQbkYE5Oa2c8sA0Gmb9nqNF9QE0p6+QWEBBDfl9Y3bOs
yjpx4USi68oSrVlWZZG95wUnUT+I5k2B4e2pk5U3iHRG+L5uZYsrRSxDe5Uh/8gT
4KpiX7gZzzNTVh+QXYsNz2lIHYrDju3J0XnJP1wgHUU1m2ictI474alrTibY5OkC
MYvSXLzQxg1SY/UIxoERniFD+/zS8ccuy2UCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBR7lRrLtQI72bT1eWFGsErQ6dgAMzAfBgNVHSMEGDAWgBRxkcufTEItOz1nU3Gx
io2t2uh5jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy9jWkhMbjB4Q0xUczlaMU54c1lxTnJkcm9lWTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jWkhMbjB4Q0xUczlaMU54c1lxTnJk
cm9lWTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy9lNVVheTdVQ085bTA5WGxoUnJCSzBPbllBRE0ucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnQjAMA0GCSqGSIb3DQEBCwUAA4IB
AQA89pNlHhCwgVCrlalk5yLwfcAIt3a8qIlU6Ddec+usz42C1qZlRJuedBZERbom
s9jkytc0ZhM1A8jz6fNmLoUUeBfe0a2AxWwbRQ5CDxBMrHG/d+oeuNY5ZfBa5yA5
l7R2adRVB5rrsjvwFyn9BZJiwLN6wAJe+pNsbh47cUGSvZr0C5+gyBE9ZXizYi+E
DodgjNiF4fn/05XgBPtolNXdetvb2bdhFJMDdUutT2RNVE4mQPCo/PDiI95kfUPd
4u8GHOdc7uv5WTrcDtuPu0WsXD/0Gm+No//618R4Sv2tKwwENHmSvnJ/YWAwAfRD
11BvrJAvj7QS1VtJCppdqMPw
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:37:41 2026 by rpki-client