Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20065/-O7cx3tFfT7FajvvQ9TtZ1jIIQ4.roa
File:                     -O7cx3tFfT7FajvvQ9TtZ1jIIQ4.roa (raw, json)
Hash identifier:          n4A2XdrZYlENMMu7d+1Ism9PKnqGp06IQIUhIIr93sk=
Subject key identifier:   F8:EE:DC:C7:7B:45:7D:3E:C5:6A:3B:EF:43:D4:ED:67:58:C8:21:0E
Certificate issuer:       /CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
Certificate serial:       07
Authority key identifier: 67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/-O7cx3tFfT7FajvvQ9TtZ1jIIQ4.roa
Signing time:             Thu 17 Sep 2026 08:47:05 +0000
ROA not before:           Thu 17 Sep 2026 08:47:05 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     131944
IP address blocks:        103.115.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 17:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671B1E7D7C9D2925FFECAE1507C53F5041A50BF2
        Validity
            Not Before: Sep 17 08:47:05 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=F8EEDCC77B457D3EC56A3BEF43D4ED6758C8210E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:d1:ac:c8:3b:2d:50:a4:5d:53:3e:f7:c3:
                    15:e9:e7:87:96:90:61:cb:c3:ef:1a:11:a3:63:16:
                    47:c0:fe:72:e5:ab:62:9f:95:0d:88:52:87:10:d6:
                    a7:91:7d:c1:b2:2f:82:ca:a9:f0:2e:e1:65:01:4b:
                    86:89:c8:67:0a:a9:94:09:c8:91:4d:7f:52:75:2f:
                    67:e2:bd:4c:0e:18:4f:33:bd:8a:f3:4d:55:90:68:
                    79:9e:a9:d6:c2:a0:bc:97:64:03:86:a6:72:09:7e:
                    aa:78:ff:1d:1e:c0:ca:bf:f9:c8:6e:53:98:9a:65:
                    37:ca:16:71:61:72:ff:de:d2:ba:6f:52:5a:57:bf:
                    39:ba:65:f2:ef:1e:8e:ba:cc:f0:7f:7d:48:9f:fd:
                    ab:37:a6:45:15:83:06:ad:65:e1:62:9d:9b:82:0e:
                    b6:45:a0:9e:7b:66:6f:f0:e3:05:01:4b:e1:21:25:
                    9a:f4:02:b0:ac:96:f9:fd:55:7d:e9:01:82:7f:a9:
                    5e:28:ee:8c:f3:9f:58:c6:aa:52:23:b7:cc:0f:ed:
                    6d:07:6c:5c:68:29:7c:e0:e7:16:61:e9:51:07:d4:
                    46:27:c4:c2:cb:5b:49:e9:cc:8e:dd:57:83:da:10:
                    92:d7:23:20:3c:d8:87:72:25:0c:a7:85:0c:09:79:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EE:DC:C7:7B:45:7D:3E:C5:6A:3B:EF:43:D4:ED:67:58:C8:21:0E
            X509v3 Authority Key Identifier:
                keyid:67:1B:1E:7D:7C:9D:29:25:FF:EC:AE:15:07:C5:3F:50:41:A5:0B:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/ZxsefXydKSX_7K4VB8U_UEGlC_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxsefXydKSX_7K4VB8U_UEGlC_I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20065/-O7cx3tFfT7FajvvQ9TtZ1jIIQ4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:64:34:64:cf:a0:c8:86:41:a3:68:7b:f8:af:b6:40:2d:18:
         7f:8e:ee:04:c6:7d:38:a2:1f:70:48:94:b4:21:f7:ab:65:47:
         7e:d0:42:dd:a9:02:24:3a:4f:6c:95:11:a5:3a:ad:94:09:6d:
         33:ac:66:7d:48:62:c5:a7:a5:c4:c3:61:fc:66:06:48:8e:cc:
         70:b5:42:b6:db:7b:b3:6e:46:e6:bc:4f:63:4b:cb:7e:a7:12:
         a2:6e:c7:f2:cb:a9:9d:84:3f:13:34:a3:65:e3:a9:96:94:d6:
         d5:b8:b6:97:8e:c8:cd:24:6e:05:a8:88:28:6a:fb:7c:50:7b:
         fe:4b:33:44:89:1a:19:f1:af:6e:b1:44:61:b2:1b:3e:91:7f:
         5a:07:0d:d9:f7:c1:83:e7:13:bb:fe:d4:56:55:0f:0c:39:cc:
         f9:08:9e:c2:f9:2b:20:b2:7c:5c:a4:87:6a:1f:46:d5:8b:3a:
         a9:c4:eb:3d:a5:39:0c:50:01:a2:9f:90:73:44:30:f5:da:3c:
         27:09:83:2d:ca:98:9a:81:57:50:45:b9:0b:25:bc:bb:b3:14:
         08:51:6a:a0:53:d5:96:5c:6d:e9:1a:86:d0:a3:60:25:40:7b:
         c3:a5:20:0f:e5:a1:e1:e3:18:90:02:7a:82:52:4b:15:21:b2:
         5b:ab:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:49 2026 by rpki-client