Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/GA9fLBRoVCE9nDqco40DJOSSeWQ.roa
File:                     GA9fLBRoVCE9nDqco40DJOSSeWQ.roa (raw, json)
Hash identifier:          ma36sqmpp9/Vj+4EfF24ZXXJCbiJgg8MwP3CYdwEdTc=
Subject key identifier:   18:0F:5F:2C:14:68:54:21:3D:9C:3A:9C:A3:8D:03:24:E4:92:79:64
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       97
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/GA9fLBRoVCE9nDqco40DJOSSeWQ.roa
Signing time:             Mon 27 Jul 2026 07:50:29 +0000
ROA not before:           Mon 27 Jul 2026 07:50:29 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        124.110.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 27 07:50:29 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=180F5F2C146854213D9C3A9CA38D0324E4927964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:49:a3:00:50:1c:5c:09:11:52:a3:c1:be:
                    1b:bf:59:ee:8b:fb:5d:0a:d6:05:11:10:6a:9f:92:
                    48:22:84:91:b3:c5:a7:cf:91:c2:3d:f7:24:7a:e6:
                    01:0b:72:18:c8:60:83:c1:4f:cb:81:ca:6b:9a:38:
                    42:7b:13:39:3d:54:4a:5c:ad:d3:18:96:e8:3a:ec:
                    85:67:10:8e:1a:8f:48:3c:e2:60:74:24:fe:14:b3:
                    d3:ad:15:39:3b:04:03:d8:b4:33:20:37:dc:e9:4c:
                    c0:2a:62:94:00:b7:ce:cc:23:e8:87:70:0b:e6:be:
                    6c:c8:08:4b:a0:30:4a:9c:e4:64:be:bf:26:11:47:
                    b2:e4:a8:46:58:c0:5f:f5:f3:50:16:c9:50:bd:fa:
                    5c:e4:23:44:a8:ac:5e:88:9a:22:f6:ba:2b:ed:c2:
                    97:7e:13:bd:d3:07:d0:1d:72:8d:f5:fb:6d:5e:d2:
                    d1:de:4e:40:9b:47:33:5b:a3:b8:fc:1e:a4:1c:31:
                    12:83:bb:83:ae:a5:5e:76:48:dd:d3:da:93:b0:27:
                    e2:22:59:af:06:2b:2c:a0:04:6c:90:8f:23:3f:19:
                    29:95:c1:20:25:96:11:02:29:aa:2d:42:73:b9:75:
                    07:3f:20:97:c8:2a:cf:10:3c:68:c1:c4:35:a0:4c:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:5F:2C:14:68:54:21:3D:9C:3A:9C:A3:8D:03:24:E4:92:79:64
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/GA9fLBRoVCE9nDqco40DJOSSeWQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:e0:61:87:26:19:b5:b6:60:5a:9c:d6:ab:1c:15:9d:56:
         d4:b1:af:9d:44:24:90:24:70:9c:a3:24:59:32:a8:fb:79:38:
         64:8a:72:72:2b:e8:04:f6:99:57:13:4d:30:f9:cb:85:46:19:
         99:05:0c:3c:12:3b:3e:77:f3:1c:bc:3a:78:52:88:cf:41:96:
         f1:38:59:a4:2a:15:99:14:9c:8e:d2:a9:0a:58:69:a0:a5:04:
         2e:fc:49:d8:97:3a:6a:6d:90:c5:ee:29:ba:c3:90:ed:3f:be:
         3f:9a:72:d9:e0:51:0f:53:6d:c9:b0:16:b8:c6:4f:72:d7:21:
         71:b3:fe:37:cb:f7:4b:ac:99:03:d0:11:95:5e:8d:19:d1:ee:
         10:22:d9:50:1f:4a:58:78:13:09:7d:ea:53:f9:11:d2:c2:de:
         bf:6f:d7:86:2e:8a:01:1e:87:6d:0b:a5:05:a6:ea:49:51:36:
         48:cb:49:e5:d4:73:14:6e:95:4e:ee:7d:2e:0d:a6:3c:0d:5c:
         cf:58:76:5d:86:5e:f6:d1:85:7e:9a:b8:b4:86:1b:a5:29:d3:
         23:d5:ef:8f:6e:29:99:04:ca:26:59:2e:10:96:2c:a9:d6:f0:
         fb:2a:4c:05:27:ea:dd:6b:52:40:7d:fb:c7:a9:fe:0a:dd:fa:
         0c:ca:97:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:51 2026 by rpki-client