Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/MRaKDohkfYbfBOCmzXn9KKpqLkc.roa
File:                     MRaKDohkfYbfBOCmzXn9KKpqLkc.roa (raw, json)
Hash identifier:          2M91WHxmCzr/CY8/uz9uoUIUMVN4jfPFuNN+54QvsnE=
Subject key identifier:   31:16:8A:0E:88:64:7D:86:DF:04:E0:A6:CD:79:FD:28:AA:6A:2E:47
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       4E
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/MRaKDohkfYbfBOCmzXn9KKpqLkc.roa
Signing time:             Thu 23 Jul 2026 01:52:25 +0000
ROA not before:           Thu 23 Jul 2026 01:52:25 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        61.124.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Jul 23 01:52:25 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=31168A0E88647D86DF04E0A6CD79FD28AA6A2E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:d8:63:3f:fb:f8:5f:22:11:ca:f3:71:90:
                    b6:b9:c3:cd:c4:da:39:8e:92:5d:0b:b4:0d:85:79:
                    ac:2f:8e:da:56:ed:33:91:1d:ea:3f:2f:ba:31:4a:
                    0a:41:45:6b:9b:b2:2d:50:b5:0b:77:dd:b6:72:a8:
                    4a:29:8c:a8:2e:45:73:e2:73:ac:39:61:84:24:7e:
                    c1:5c:9b:dd:6d:60:0b:52:3a:18:b2:7a:89:de:74:
                    f1:f0:65:26:05:87:81:af:1d:15:b1:7f:e2:f4:05:
                    c5:50:61:2e:6a:31:2f:c3:0d:39:8e:f3:f1:98:79:
                    3b:7a:9e:ba:0e:26:df:10:b6:fa:cf:26:d5:a1:83:
                    c7:84:e8:38:2f:c4:fb:14:18:da:f8:bb:46:ec:c5:
                    4b:6e:82:64:2e:f7:91:58:69:21:74:0f:9d:60:cc:
                    99:e0:a9:52:e0:fc:23:e7:76:99:4c:ab:31:7c:c8:
                    3b:ca:97:01:98:9f:21:4b:67:a3:2a:ea:c0:2b:54:
                    f3:eb:85:58:63:98:ef:87:27:95:e6:41:b9:68:34:
                    39:05:9c:ee:74:2c:b1:43:8e:27:35:54:da:6f:ed:
                    32:74:78:33:99:5f:31:00:7e:34:05:d7:7a:88:02:
                    32:c7:87:a1:65:20:ff:37:d3:da:21:0a:98:53:96:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:16:8A:0E:88:64:7D:86:DF:04:E0:A6:CD:79:FD:28:AA:6A:2E:47
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/MRaKDohkfYbfBOCmzXn9KKpqLkc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:d3:47:1e:ba:bc:bc:a7:70:41:a9:a8:f5:22:4b:72:c3:f4:
         92:71:e0:9d:00:a1:22:16:f4:ee:5e:ba:c8:d5:f0:a6:9a:06:
         05:8b:b3:29:b3:1f:81:b1:a4:0d:b8:e8:a7:6c:66:34:c2:44:
         55:3c:be:62:45:80:ed:01:e2:ce:f0:50:1b:56:8b:71:26:b7:
         a2:29:98:2d:c3:c5:b4:19:c2:17:4a:c2:4c:91:b8:a7:be:0c:
         fe:31:05:76:b3:89:54:d9:5d:f5:a4:64:66:4d:ff:2f:00:a1:
         7d:fd:da:4e:db:e6:59:8d:c3:6f:7e:1d:64:4e:33:d1:59:90:
         b2:48:81:44:e7:c5:70:2b:0c:72:ac:37:e1:e2:02:45:39:ec:
         26:f6:63:27:a6:ae:5e:55:0d:8c:2c:ac:7a:da:55:3c:d9:fa:
         7d:bd:c3:a6:c0:e0:a5:bd:4e:90:a6:12:e1:80:23:51:7e:6d:
         4c:50:60:68:3f:48:4b:d4:c5:a9:67:64:90:e7:03:57:f1:4d:
         72:68:fa:c9:9d:a0:de:04:90:88:fd:8f:6c:21:88:8b:87:65:
         64:ab:5e:2a:a5:42:cc:ac:77:28:91:9d:1f:4f:52:48:7b:5c:
         bd:22:7c:90:96:7e:80:7b:11:d4:f6:28:8b:26:70:fc:d0:b4:
         9e:a8:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:04 2026 by rpki-client