Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20175/7pRz2DrRkqxShc5fMcHKO-oopPY.roa
File:                     7pRz2DrRkqxShc5fMcHKO-oopPY.roa (raw, json)
Hash identifier:          s8K025Wkwt09Dz7uEbrqNsg3m+7noHtgw9Skxx7mxl4=
Subject key identifier:   EE:94:73:D8:3A:D1:92:AC:52:85:CE:5F:31:C1:CA:3B:EA:28:A4:F6
Certificate issuer:       /CN=9B09AA163F1F84A59D7BEE3ED8F38493265B26CF
Certificate serial:       04
Authority key identifier: 9B:09:AA:16:3F:1F:84:A5:9D:7B:EE:3E:D8:F3:84:93:26:5B:26:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mwmqFj8fhKWde-4-2POEkyZbJs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/7pRz2DrRkqxShc5fMcHKO-oopPY.roa
Signing time:             Thu 23 Jul 2026 04:13:29 +0000
ROA not before:           Thu 23 Jul 2026 04:13:29 +0000
ROA not after:            Thu 22 Jul 2027 07:20:29 +0000
asID:                     9354
IP address blocks:        61.87.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/mwmqFj8fhKWde-4-2POEkyZbJs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/mwmqFj8fhKWde-4-2POEkyZbJs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mwmqFj8fhKWde-4-2POEkyZbJs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09AA163F1F84A59D7BEE3ED8F38493265B26CF
        Validity
            Not Before: Jul 23 04:13:29 2026 GMT
            Not After : Jul 22 07:20:29 2027 GMT
        Subject: CN=EE9473D83AD192AC5285CE5F31C1CA3BEA28A4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:33:da:09:08:0c:bc:2d:5b:c3:d1:fc:f1:
                    dc:2b:a7:f7:c3:e0:59:52:e1:72:ba:ef:90:eb:8c:
                    97:26:40:b6:9e:c3:f5:30:04:8c:94:90:f2:28:71:
                    33:88:2c:ae:99:b4:af:9f:1b:33:cf:e1:29:de:7f:
                    3a:6c:b1:d0:5f:9b:70:16:bf:84:aa:4d:10:f8:a2:
                    c6:f4:d5:43:a2:1f:7a:a4:65:79:63:76:47:73:e9:
                    15:ff:72:36:83:2d:5d:86:07:db:c9:db:11:84:77:
                    67:12:8a:b9:9e:44:fc:25:9c:33:69:e0:1f:a8:3e:
                    9e:4f:f5:9b:af:7f:27:d5:98:4e:42:9d:09:37:cf:
                    67:d0:d7:b9:24:e9:50:be:84:b7:03:8a:f8:81:c0:
                    b0:ad:7b:c9:d7:8a:6c:d4:df:2f:70:81:00:50:b7:
                    f3:6e:74:43:6b:86:68:8a:17:f2:c9:1e:4b:be:c7:
                    ac:44:9f:2e:53:80:70:25:26:8d:d9:ff:e7:ee:1b:
                    33:9f:82:b7:19:bc:a3:75:a1:81:38:bb:75:73:3a:
                    9a:f4:72:7c:6f:10:49:6c:7f:f8:7e:5e:fa:a0:c3:
                    d9:55:12:7c:18:77:e9:44:fe:c9:04:84:ba:53:c3:
                    9d:02:8a:a6:3e:5a:5e:32:7d:e0:e3:e7:e6:d2:a3:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:94:73:D8:3A:D1:92:AC:52:85:CE:5F:31:C1:CA:3B:EA:28:A4:F6
            X509v3 Authority Key Identifier:
                keyid:9B:09:AA:16:3F:1F:84:A5:9D:7B:EE:3E:D8:F3:84:93:26:5B:26:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/mwmqFj8fhKWde-4-2POEkyZbJs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mwmqFj8fhKWde-4-2POEkyZbJs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/7pRz2DrRkqxShc5fMcHKO-oopPY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:8d:61:7a:8e:b4:ed:4b:5d:40:32:6f:29:a4:48:44:39:
         6e:23:34:ca:02:75:1e:f3:82:05:8e:86:c3:a5:61:f1:c9:62:
         95:46:bf:80:65:c8:68:b2:fe:89:e8:73:5e:a2:29:3a:dc:58:
         c1:d5:b2:ab:42:08:5b:9b:3f:9c:df:ee:1a:47:02:76:56:45:
         90:d9:bd:4f:3f:b5:5d:2e:be:01:01:1b:a7:ed:9a:0a:b1:b5:
         11:23:84:a3:2c:18:ad:dd:fa:99:ba:1a:97:f2:99:23:f2:1d:
         38:85:77:5d:8e:61:2b:fb:19:ea:52:04:8b:bc:81:96:de:fb:
         ca:c6:c6:88:6c:08:6d:76:5b:0d:09:6a:c7:fa:57:2f:0b:65:
         ff:c3:5e:4e:52:a6:36:26:f3:0c:c8:4b:b8:5c:36:f7:c1:85:
         23:5f:73:92:a2:0f:46:5e:04:c1:2f:d9:5a:64:7b:16:a0:aa:
         94:5d:c1:62:25:ff:ba:68:42:0c:19:a4:67:0f:1f:90:88:f2:
         68:a1:57:eb:c9:23:77:16:a5:57:b8:87:50:70:a1:f8:37:be:
         73:14:a2:4d:f1:5d:6c:a4:fa:86:5a:ab:46:fb:ce:e6:47:c1:
         40:10:2c:e8:db:91:53:ad:fd:01:c7:fd:96:3a:d7:94:af:1d:
         b1:ee:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:27 2026 by rpki-client