Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/MGufDb91SRmCH1-89amkyysQiFU.roa
File:                     MGufDb91SRmCH1-89amkyysQiFU.roa (raw, json)
Hash identifier:          xQI9v32YkorZ+tb2rydyd4mv0mnLdHHtkmoxLDMmxgQ=
Subject key identifier:   30:6B:9F:0D:BF:75:49:19:82:1F:5F:BC:F5:A9:A4:CB:2B:10:88:55
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       B6
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/MGufDb91SRmCH1-89amkyysQiFU.roa
Signing time:             Wed 11 Nov 2026 08:17:28 +0000
ROA not before:           Wed 11 Nov 2026 08:17:28 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     0
IP address blocks:        61.245.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Nov 11 08:17:28 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=306B9F0DBF754919821F5FBCF5A9A4CB2B108855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:4f:a0:8b:2e:09:1a:c4:6c:8b:13:35:18:
                    bc:18:15:5c:ce:22:8a:00:df:17:6d:d1:b3:fc:1f:
                    d2:59:e2:08:90:df:20:91:d2:51:1c:20:14:6b:20:
                    b9:53:59:5e:1c:9d:84:5e:9a:f3:61:e0:21:e9:e6:
                    5c:06:a5:cc:46:b3:f5:f7:90:e4:c0:78:cd:8e:d7:
                    3b:df:d1:ed:c1:a4:58:4f:74:43:10:50:a0:e1:d0:
                    9c:d5:9b:0d:5d:ec:1f:c0:a8:7c:2c:0b:61:23:fc:
                    5b:2a:46:25:0d:be:c9:9f:79:38:ea:af:88:98:56:
                    f0:45:86:11:0b:65:64:d2:cb:0d:8f:06:33:58:c9:
                    8b:9c:53:e5:c2:9f:25:6c:6a:af:a1:b4:d9:c7:cd:
                    1b:ef:e5:62:ad:3d:0d:f3:5d:18:23:84:67:ae:89:
                    90:74:50:12:99:f5:aa:77:19:a4:90:b1:88:39:59:
                    e7:2d:10:d0:d3:02:ef:b5:3d:fc:8c:98:4b:82:5c:
                    65:48:55:ba:50:0b:ef:ee:59:62:50:cc:80:72:97:
                    d4:d2:7e:77:59:1d:b8:bf:63:ea:0b:78:7e:2c:eb:
                    c9:28:21:3f:9b:5b:60:7b:7e:86:d0:76:2e:cc:f5:
                    1a:c3:58:57:b7:f1:44:b2:8c:4a:7f:bf:60:c0:b0:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6B:9F:0D:BF:75:49:19:82:1F:5F:BC:F5:A9:A4:CB:2B:10:88:55
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/MGufDb91SRmCH1-89amkyysQiFU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:25:5c:50:a5:33:46:d6:df:6b:24:ba:d7:07:e0:a1:90:
         d3:df:87:84:18:e1:cd:fa:fc:48:b0:9e:9b:a8:3c:2c:9f:7e:
         7f:2f:09:da:15:f9:f4:9e:d8:2c:86:f6:b5:ad:88:55:05:47:
         19:4b:4e:b3:4f:e6:f6:79:01:b2:db:47:b5:29:2f:c8:3c:6d:
         21:67:0c:3e:1b:e1:02:b1:bb:a6:51:6c:e3:ed:e7:1b:d8:d2:
         56:37:c3:b5:9c:29:8c:d1:e2:3c:bc:37:73:6b:7e:33:7d:c0:
         59:f5:c0:7b:15:99:53:f9:3b:9c:ad:14:13:f0:12:67:dc:31:
         c4:59:a0:07:8c:8d:76:66:44:f2:b9:28:77:18:1b:5d:47:05:
         3b:07:0e:6a:80:99:01:65:0f:bc:e1:d1:90:67:58:44:83:91:
         0b:64:1e:b8:d0:35:fd:bf:0e:6f:77:68:0e:3a:fd:54:9d:33:
         8a:30:36:44:56:fd:61:83:71:aa:cd:4c:6c:d0:4a:67:54:79:
         53:94:69:b5:86:c2:89:ab:c8:c7:a6:78:41:f8:ed:ef:d2:c5:
         06:58:a6:ad:2d:db:68:9b:ab:80:71:53:43:cd:7a:2b:36:92:
         71:7c:a7:2a:56:ff:b8:f6:1c:b0:91:52:4f:c2:67:74:43:48:
         b9:ce:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:18:13 2026 by rpki-client