Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/m7yJtUrmIKB9x59dPZFrN__S7oE.roa
File:                     m7yJtUrmIKB9x59dPZFrN__S7oE.roa (raw, json)
Hash identifier:          BQliGqClgd5fDpFmb8xqn8NwL8HA9xYhWWsj5BIx7u8=
Subject key identifier:   9B:BC:89:B5:4A:E6:20:A0:7D:C7:9F:5D:3D:91:6B:37:FF:D2:EE:81
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       4E
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/m7yJtUrmIKB9x59dPZFrN__S7oE.roa
Signing time:             Thu 25 Jun 2026 13:02:37 +0000
ROA not before:           Thu 25 Jun 2026 13:02:37 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        157.8.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 14:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jun 25 13:02:37 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=9BBC89B54AE620A07DC79F5D3D916B37FFD2EE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:d5:12:19:5c:f5:0c:24:c9:93:d8:ab:4b:
                    23:37:a4:56:84:32:0d:e6:a1:1b:fd:7f:c1:69:d0:
                    72:d6:3c:27:40:68:da:3d:ed:bf:f3:d8:cb:ab:c3:
                    c6:02:67:a1:ab:66:2d:88:0d:71:f2:83:66:fd:5d:
                    b7:81:5d:65:71:ce:07:ac:a1:be:23:4f:95:c0:dd:
                    a8:a6:39:e2:60:10:e6:f5:92:f8:1b:65:d5:07:3e:
                    6f:23:4c:77:5a:20:ff:a2:28:d2:88:e8:11:05:bf:
                    85:67:0d:bd:38:53:b9:45:d7:95:50:f3:a6:cd:28:
                    8e:03:18:cb:08:01:0c:8f:09:95:7e:a6:5c:c1:4c:
                    28:dc:8e:47:52:fd:72:69:ae:d9:77:ec:33:0a:80:
                    8a:3c:b1:81:be:b4:60:b3:dc:2e:8d:c2:88:f9:4a:
                    d1:5d:3b:79:c6:29:26:a3:4d:b3:bb:3a:8d:db:92:
                    0c:3c:46:75:55:0e:23:00:a1:99:4f:68:87:ec:57:
                    63:d6:96:41:df:92:09:9b:45:73:f7:16:f3:ee:a4:
                    40:02:b9:45:dc:ab:84:ac:62:96:67:3e:5f:e5:3d:
                    df:f5:23:64:e3:15:e9:59:73:c7:dc:93:94:40:0a:
                    1f:84:92:17:ca:db:4d:0f:dc:05:be:20:22:3e:e8:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:89:B5:4A:E6:20:A0:7D:C7:9F:5D:3D:91:6B:37:FF:D2:EE:81
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/m7yJtUrmIKB9x59dPZFrN__S7oE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:26:c6:ab:ee:e3:e6:44:1b:7c:92:a6:2c:c1:7c:91:d6:04:
         d4:16:5f:2b:96:a8:a9:e5:d0:d4:30:e0:70:ce:ed:88:51:45:
         26:a4:92:08:71:d1:6f:cd:1e:ca:c6:24:5e:93:a7:6c:4f:ea:
         3d:bd:b6:7c:7b:56:7e:fc:9b:41:44:9d:03:a8:33:ff:96:eb:
         e2:93:d6:dc:4e:3e:5a:36:78:ac:0e:c8:2b:d9:f6:e6:49:9f:
         e8:9f:2f:76:64:ab:91:7c:a5:dd:9c:2a:83:64:49:be:2a:fe:
         cb:1a:4e:2d:78:ea:e0:41:36:68:4e:da:34:fa:d3:d7:32:07:
         2c:59:0d:0e:fd:81:b1:48:44:7c:b9:c1:72:d5:85:24:26:a7:
         f6:7c:91:10:e8:6c:67:68:1a:48:65:9b:30:d5:a4:90:d0:84:
         d3:39:1c:17:17:64:f3:5e:93:d0:30:6f:4c:62:eb:77:b8:24:
         c7:cc:9e:5c:bf:36:a2:9b:1f:2b:71:e4:ef:55:a8:fb:74:26:
         4e:70:f3:c3:5e:9e:90:e5:60:35:7b:22:00:b4:7a:02:1d:be:
         89:2a:e7:66:ce:95:5d:61:7e:97:0f:5f:6f:83:10:82:17:26:
         c2:e8:de:ef:b6:fd:44:63:de:de:f5:d9:83:0b:44:53:1d:11:
         c0:0e:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:37:31 2026 by rpki-client