Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/Dh256ST7X-d3lLsOhY8PDFQo9io.roa
File:                     Dh256ST7X-d3lLsOhY8PDFQo9io.roa (raw, json)
Hash identifier:          ZbJp03WKBWvAJfxID/m46glFkvxbtvvbIwEWdmQ68wo=
Subject key identifier:   0E:1D:B9:E9:24:FB:5F:E7:77:94:BB:0E:85:8F:0F:0C:54:28:F6:2A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       D9
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Dh256ST7X-d3lLsOhY8PDFQo9io.roa
Signing time:             Wed 14 Oct 2026 09:11:17 +0000
ROA not before:           Wed 14 Oct 2026 09:11:17 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 15:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 14 09:11:17 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=0E1DB9E924FB5FE77794BB0E858F0F0C5428F62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:45:ab:40:d3:2d:45:cd:01:be:99:34:12:0a:
                    d2:a6:a0:2e:ca:7c:65:9b:50:7f:ba:7f:7a:22:36:
                    2f:84:84:36:e3:cc:17:3d:3e:72:38:71:4d:73:0b:
                    35:5b:39:6f:d3:a5:ef:8b:63:27:b8:4b:56:fd:14:
                    d5:ac:0e:64:3e:e9:69:58:ce:37:24:43:5f:5f:4e:
                    05:30:f2:ae:18:f3:42:e5:5d:66:f1:da:36:40:af:
                    36:78:57:56:7a:06:9f:9f:7f:ea:66:d0:bc:18:40:
                    2d:ef:42:41:69:57:08:96:12:29:e8:94:45:aa:72:
                    33:2c:d5:04:c9:3f:b7:70:59:7c:91:e0:19:2a:b4:
                    c0:6a:81:83:a2:4f:f3:49:dc:e8:c1:7b:12:c6:61:
                    7d:c7:2b:cd:43:26:cc:a3:9f:0d:e8:e0:dd:3b:c3:
                    d2:96:a0:87:58:c9:51:d7:15:56:eb:1f:5d:ff:57:
                    63:d5:88:43:e1:70:fd:73:af:fb:2d:ee:ab:e9:39:
                    e6:f7:d7:c8:b1:8b:40:da:8a:0b:08:1d:f8:62:42:
                    3f:1b:b4:22:7e:f6:18:9e:a4:ca:62:46:03:d4:40:
                    3e:ab:39:2c:9f:37:ad:54:72:c7:0f:f9:ce:14:cc:
                    ee:77:db:30:af:82:a2:0e:f1:82:12:8a:22:6f:59:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1D:B9:E9:24:FB:5F:E7:77:94:BB:0E:85:8F:0F:0C:54:28:F6:2A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Dh256ST7X-d3lLsOhY8PDFQo9io.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:32:74:0c:1e:81:d9:ec:55:cf:a6:48:6a:8e:4e:9f:b5:f1:
         f8:a7:45:81:30:a1:78:f4:7e:31:7b:49:42:a8:74:95:ac:b1:
         1b:17:d5:68:2e:ae:a0:82:5b:de:6c:3c:ef:65:f4:5f:a9:b5:
         15:d3:f2:c2:97:a9:f0:94:91:5a:1f:e7:f4:b5:5d:00:a9:aa:
         70:f2:48:05:dc:9f:7f:55:24:59:f9:fe:5c:f1:62:8b:1c:55:
         ed:f0:d1:87:2a:54:a7:7e:5b:c9:85:b6:62:1e:2a:fb:92:fc:
         b3:0e:16:72:99:7b:20:87:53:1a:c4:4c:b5:b0:5e:6c:82:9f:
         ad:22:8b:2e:14:64:48:e8:d8:42:a9:35:ca:0a:1f:b7:8f:a6:
         e8:da:a6:d3:6d:de:60:87:6d:c3:d4:53:cf:14:cc:15:c0:da:
         6d:64:5a:58:03:16:57:e3:b8:04:e6:73:29:cb:f2:b1:61:e1:
         69:7b:02:ef:50:49:8b:d8:07:03:bc:b7:27:53:73:ff:83:19:
         e4:a3:d1:3b:a6:d5:6b:e1:eb:0c:03:f2:c2:f0:4a:71:ab:a3:
         39:84:b9:e3:9e:52:73:f1:24:d0:ac:62:d6:2e:85:c0:be:e1:
         ad:03:e5:47:82:f6:4b:59:ec:67:83:a3:cc:68:43:de:e5:89:
         af:10:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:05:28 2026 by rpki-client