Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20175/WsayNQcZA7gSMaSn_VA9SGIdK4E.roa
File:                     WsayNQcZA7gSMaSn_VA9SGIdK4E.roa (raw, json)
Hash identifier:          NsGfAN6RnEMOcRH4+VpzcdmtKN63PM+AiMVTd7DmA6g=
Subject key identifier:   5A:C6:B2:35:07:19:03:B8:12:31:A4:A7:FD:50:3D:48:62:1D:2B:81
Certificate issuer:       /CN=9B09AA163F1F84A59D7BEE3ED8F38493265B26CF
Certificate serial:       02
Authority key identifier: 9B:09:AA:16:3F:1F:84:A5:9D:7B:EE:3E:D8:F3:84:93:26:5B:26:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mwmqFj8fhKWde-4-2POEkyZbJs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/WsayNQcZA7gSMaSn_VA9SGIdK4E.roa
Signing time:             Thu 23 Jul 2026 04:07:35 +0000
ROA not before:           Thu 23 Jul 2026 04:07:35 +0000
ROA not after:            Thu 22 Jul 2027 07:20:29 +0000
asID:                     9354
IP address blocks:        61.87.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/mwmqFj8fhKWde-4-2POEkyZbJs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/mwmqFj8fhKWde-4-2POEkyZbJs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mwmqFj8fhKWde-4-2POEkyZbJs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09AA163F1F84A59D7BEE3ED8F38493265B26CF
        Validity
            Not Before: Jul 23 04:07:35 2026 GMT
            Not After : Jul 22 07:20:29 2027 GMT
        Subject: CN=5AC6B235071903B81231A4A7FD503D48621D2B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:ab:a4:44:b7:f0:6a:a0:ef:0b:8e:8d:0b:
                    7d:23:1f:00:e1:bf:dd:51:01:96:8b:58:df:05:5b:
                    e9:88:b2:31:be:25:89:78:03:9a:99:de:98:9a:30:
                    a5:e9:7e:74:9f:d4:b7:21:c3:67:53:53:08:4e:0c:
                    03:67:1d:03:0f:b6:21:a8:1c:5e:8c:0c:0e:32:0d:
                    a7:0b:1d:e4:1d:df:6f:19:eb:d5:c7:e9:00:cd:66:
                    dd:4b:a7:2e:42:ef:d0:d9:e5:9f:35:bf:f4:9a:63:
                    ce:fe:28:6e:7b:0c:90:3b:aa:d8:02:97:28:ff:76:
                    b0:57:81:90:75:33:8e:e5:10:6e:46:6a:e5:2b:5c:
                    52:d4:c1:02:42:48:f7:9a:0d:5f:fe:34:36:58:13:
                    34:1f:2b:c2:b4:c6:5a:40:fd:99:94:55:60:8b:5b:
                    f9:42:98:13:ce:b3:a4:65:9a:5b:6a:b1:44:c8:4b:
                    a1:a1:e3:29:7e:fa:ef:e2:26:94:7f:bb:4b:3a:69:
                    8c:13:95:b6:96:7d:46:ae:78:f4:c0:ac:a7:15:79:
                    6a:34:d3:4e:ce:78:d0:89:94:96:82:1a:e1:eb:1e:
                    52:12:a7:14:35:06:22:7d:a8:68:57:ae:4c:31:76:
                    43:d8:ac:0f:cb:aa:c4:23:51:56:e0:c9:1c:5d:81:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C6:B2:35:07:19:03:B8:12:31:A4:A7:FD:50:3D:48:62:1D:2B:81
            X509v3 Authority Key Identifier:
                keyid:9B:09:AA:16:3F:1F:84:A5:9D:7B:EE:3E:D8:F3:84:93:26:5B:26:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/mwmqFj8fhKWde-4-2POEkyZbJs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mwmqFj8fhKWde-4-2POEkyZbJs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20175/WsayNQcZA7gSMaSn_VA9SGIdK4E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:f8:f1:13:92:db:6e:c1:2a:64:e0:7f:76:4a:9e:b3:9e:
         be:34:d2:bb:98:31:c2:41:8d:55:a4:ed:01:57:d4:a9:9d:65:
         bc:01:33:a7:24:08:4e:24:c2:79:ff:aa:94:8b:27:10:90:3f:
         8b:ca:d2:c4:2f:50:95:7b:57:ed:fd:c4:71:36:26:5e:b3:93:
         82:d1:60:f8:fc:c1:3e:0b:74:d8:ea:2a:db:64:af:59:01:5c:
         f8:98:7b:91:c3:32:f5:22:28:10:e6:8b:f7:f1:c3:0b:f7:66:
         3c:13:49:13:48:b2:cf:82:32:da:73:a0:10:a6:5e:00:2e:a5:
         ec:a4:5b:ce:2b:2d:2b:a8:5d:fc:aa:03:c9:00:13:9a:83:4a:
         37:0e:9a:15:34:cd:68:5f:8f:84:f7:7b:c2:7f:a3:49:4d:e9:
         5e:9d:a6:ac:52:47:a8:e6:86:05:b6:6d:c4:5e:88:4e:43:88:
         44:36:89:2d:59:47:3e:50:8b:91:cf:f9:b5:4d:56:a9:64:00:
         a5:34:31:83:bd:b0:91:97:71:bd:4a:62:3a:a3:e8:f9:b6:bf:
         0f:52:e3:77:c6:6d:76:d8:49:a7:e1:1d:66:d0:99:5a:ad:ea:
         51:83:9b:d5:f7:76:9b:76:e7:c5:d5:ae:66:20:f0:f1:48:21:
         62:51:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:11 2026 by rpki-client