Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa
File:                     F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa (raw, json)
Hash identifier:          B1wETUiyOV5KD7akdbJ17Wqhc5iZbsFggSnFBoeQCak=
Subject key identifier:   17:76:74:5F:BC:70:27:1A:B4:02:3A:40:A7:40:52:99:AA:CE:5C:EA
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       DD
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa
Signing time:             Wed 14 Oct 2026 09:11:20 +0000
ROA not before:           Wed 14 Oct 2026 09:11:20 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 14:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 14 09:11:20 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=1776745FBC70271AB4023A40A7405299AACE5CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:d4:c2:05:99:6e:11:e4:d8:63:7b:0b:32:
                    59:4f:a1:85:00:9c:6c:64:8c:45:31:3f:52:52:81:
                    a4:f1:50:3f:e7:a6:26:77:7b:84:94:c8:c9:96:ed:
                    33:8a:a9:59:c2:55:75:ac:01:31:54:13:d6:e5:99:
                    41:e0:18:ce:6b:32:5d:71:e3:9b:20:27:35:2b:3d:
                    61:37:fb:3b:ed:f2:51:11:07:f1:4d:2b:da:fb:07:
                    83:da:f9:b3:d6:f2:7a:cc:43:03:1a:d2:fb:c1:bf:
                    ff:92:b8:e6:01:46:04:3d:09:2e:5b:da:b6:4c:ce:
                    e6:0b:ba:28:57:72:5f:d6:e6:69:64:f0:be:6f:73:
                    2d:7e:05:b0:9e:52:3f:b0:b9:4d:94:03:b4:15:b3:
                    60:56:c8:86:76:ce:fb:09:c8:0f:f5:d8:9f:f2:d5:
                    4b:c2:ff:12:9a:7c:03:9c:8e:fc:fe:06:5a:e8:fb:
                    78:7c:37:a3:29:d5:45:75:ad:fa:81:eb:0c:f3:f8:
                    54:15:5c:1e:a0:b6:17:f9:44:00:0c:03:d5:ed:6c:
                    8e:5e:dd:b5:25:75:29:2f:71:a5:ec:fd:78:4c:b6:
                    56:7c:a2:b0:63:ff:13:d2:61:56:d4:50:d4:69:6e:
                    4c:06:79:e2:c7:14:cf:98:87:d5:74:c8:61:33:76:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:76:74:5F:BC:70:27:1A:B4:02:3A:40:A7:40:52:99:AA:CE:5C:EA
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:38:f2:86:e3:9a:7f:f3:0e:b1:71:7e:41:9e:b7:66:db:6a:
         50:e4:97:08:d9:19:49:1d:ff:d1:45:8c:0f:6b:dc:e1:88:93:
         7c:ff:0b:37:21:00:2e:af:ce:69:f6:10:bb:f3:5c:16:40:e1:
         a8:3b:12:75:97:0b:c7:41:1d:1d:a5:28:1d:90:02:5f:77:41:
         dd:12:f2:b7:ed:65:2e:8c:d9:f1:f9:ef:ba:0a:b4:6d:0d:b8:
         a8:68:d4:b1:21:12:8c:2b:42:74:61:ad:ed:d2:fc:d7:8d:af:
         f4:b1:43:4a:75:37:87:36:0b:c0:52:cf:38:a9:72:66:f5:0c:
         9c:09:de:e6:0d:01:52:2d:34:1b:2d:bf:95:05:15:d2:07:c4:
         09:76:78:a7:42:01:5b:4f:1d:f8:a6:ca:4c:0c:be:d8:4e:e9:
         c4:ce:e2:14:83:4d:d2:c8:a4:9c:50:47:66:48:6f:5a:67:0e:
         1f:7f:02:43:9d:72:0e:71:21:4b:5f:5d:91:9d:9c:54:97:fd:
         ca:c5:f9:d0:82:4e:fb:5e:28:9a:5d:97:d8:98:35:61:40:75:
         af:79:6e:e5:a9:09:6f:d8:8f:31:d0:ea:a5:a9:64:05:72:be:
         af:54:76:b3:49:26:60:03:5d:c7:c0:a5:37:02:94:56:37:c8:
         97:ba:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:06 2026 by rpki-client