Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/j-v0yIhH8YSRInq0j7a7Wt7xPks.roa
File:                     j-v0yIhH8YSRInq0j7a7Wt7xPks.roa (raw, json)
Hash identifier:          P0wtw/lD38vJvxN/azgYr8rQ8zlfkJM5zM6BWyKgAms=
Subject key identifier:   8F:EB:F4:C8:88:47:F1:84:91:22:7A:B4:8F:B6:BB:5A:DE:F1:3E:4B
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       B6
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/j-v0yIhH8YSRInq0j7a7Wt7xPks.roa
Signing time:             Tue 16 Jun 2026 04:31:30 +0000
ROA not before:           Tue 16 Jun 2026 04:31:30 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9621
IP address blocks:        125.3.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 08:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Jun 16 04:31:30 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=8FEBF4C88847F18491227AB48FB6BB5ADEF13E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:18:a8:29:97:34:eb:cf:28:b0:b8:25:04:
                    07:38:cb:89:03:ed:4f:81:06:08:a4:eb:ce:17:11:
                    77:b3:9d:1e:75:19:b0:0f:98:9b:bb:2d:dd:b0:e9:
                    54:70:b8:e0:7e:d1:f6:b6:7c:f4:a2:93:12:b4:e2:
                    71:6f:a3:d5:24:fd:a8:94:ff:03:67:47:22:cf:96:
                    2b:ed:95:46:67:f7:07:d1:53:65:78:e0:63:ac:cd:
                    c9:e5:9b:b5:1d:b5:de:34:57:88:ca:11:2e:f2:e3:
                    27:6f:24:3a:34:12:02:fd:a9:a3:91:6b:fb:02:4d:
                    59:f1:ca:d0:0c:37:b3:93:09:c2:ee:6b:11:42:a1:
                    53:36:fc:04:a1:01:4d:81:67:04:af:fb:20:0a:7c:
                    1e:76:75:6e:a7:a9:ea:aa:cb:d6:f6:f5:c7:12:f3:
                    ba:60:a1:36:98:fe:c6:9f:cf:d9:eb:e5:c8:3c:d1:
                    bc:cd:10:03:8e:5e:f0:7d:e8:d8:80:f2:bb:86:2c:
                    26:a8:6a:e5:14:38:7e:a2:c8:7f:fc:df:66:8d:2b:
                    32:a4:1a:f9:ed:bf:71:36:0f:da:19:af:26:ba:85:
                    be:fb:bd:82:c6:ca:71:78:07:3a:88:0c:40:d1:f2:
                    3a:99:f7:5b:fc:44:d4:a9:72:e9:0a:f3:c0:56:5b:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:F4:C8:88:47:F1:84:91:22:7A:B4:8F:B6:BB:5A:DE:F1:3E:4B
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/j-v0yIhH8YSRInq0j7a7Wt7xPks.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.3.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:b5:21:2b:69:6b:fb:55:0f:5e:a7:6a:f7:13:e2:6a:ec:52:
         80:43:b9:3c:ae:93:5c:22:ab:f7:37:1a:f0:f7:4b:32:a3:ac:
         c6:15:d4:88:5e:91:10:fd:72:3c:dd:0a:56:e7:fd:52:41:a1:
         24:93:83:51:34:34:a5:0d:f7:47:85:50:6a:be:3f:2c:f8:73:
         c9:bf:e1:60:78:91:5b:b7:ae:a4:5c:15:cf:89:39:72:47:39:
         ee:b2:06:a7:51:11:a3:36:f0:ab:7a:4c:05:95:53:19:3a:52:
         29:8e:bf:af:a0:94:4d:35:40:7d:cb:49:19:a6:aa:5c:27:28:
         84:20:18:0c:7b:c9:25:4d:ef:33:45:62:27:ee:8d:82:15:9a:
         b0:77:f0:8c:31:13:e1:3e:11:15:62:28:8d:8d:ea:2c:b7:09:
         4b:ba:20:e0:d9:43:fe:eb:9c:d7:07:53:05:c9:b7:f4:75:03:
         51:6b:26:6f:19:03:f2:75:b2:b1:49:d1:f3:86:97:83:50:32:
         15:04:da:22:ad:51:03:6d:54:fa:05:27:38:b9:92:d0:89:fb:
         ae:3a:f6:94:d8:d0:36:08:6a:1e:bb:bb:b4:cb:69:56:f3:12:
         26:f7:6c:22:13:29:70:39:9d:d6:51:53:a3:20:c4:d5:7f:8d:
         ab:af:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:59 2026 by rpki-client