Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/kjctCRM3fLqmYLVigKUDXW8wP4g.roa
File:                     kjctCRM3fLqmYLVigKUDXW8wP4g.roa (raw, json)
Hash identifier:          783rWQilDskkWBe4iNS9JscUfl0J73xFabSh3HNbfAE=
Subject key identifier:   92:37:2D:09:13:37:7C:BA:A6:60:B5:62:80:A5:03:5D:6F:30:3F:88
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       F8
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kjctCRM3fLqmYLVigKUDXW8wP4g.roa
Signing time:             Mon 02 Nov 2026 02:15:28 +0000
ROA not before:           Mon 02 Nov 2026 02:15:28 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     0
IP address blocks:        133.241.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Nov  2 02:15:28 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=92372D0913377CBAA660B56280A5035D6F303F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:6e:04:73:0a:e0:df:72:63:8b:33:b7:72:
                    27:d8:ca:64:f0:a5:f9:47:ba:4f:cf:5e:bd:17:19:
                    36:18:a3:57:5d:8c:ad:24:57:19:35:89:bb:1e:76:
                    79:88:ae:cc:ab:24:7d:74:d7:23:a5:0c:26:fa:9d:
                    3d:cd:c9:1d:6a:b1:b2:bb:f1:78:64:8f:6d:a8:e0:
                    e5:94:3c:c9:6e:6c:49:76:09:8b:86:38:6a:48:6b:
                    09:bf:c6:93:0e:fc:05:eb:b1:0d:d9:93:a2:74:f3:
                    51:8a:8d:18:24:a7:12:5c:d7:37:26:60:78:01:27:
                    8a:bd:d9:2c:d0:cc:43:11:3f:ba:60:f9:96:ee:17:
                    8e:f2:18:5f:50:96:39:8a:e4:2e:b3:9a:ee:c6:29:
                    2a:9d:a9:50:d4:9a:75:25:43:87:e3:ca:61:c6:72:
                    0c:34:7f:e3:db:1e:a8:95:17:c2:73:15:06:27:30:
                    9c:19:5d:0e:7a:e9:65:01:3a:7a:31:16:1f:49:55:
                    2c:24:54:05:f4:7e:c8:d2:3f:94:62:17:75:b7:71:
                    5d:cb:0b:97:7f:48:7b:31:05:b9:3b:09:0e:03:d3:
                    01:1a:be:fd:6c:de:40:c0:2f:83:b2:c0:2d:eb:72:
                    2b:df:17:ad:3e:62:f5:c7:39:27:9b:1b:21:fd:54:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:37:2D:09:13:37:7C:BA:A6:60:B5:62:80:A5:03:5D:6F:30:3F:88
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kjctCRM3fLqmYLVigKUDXW8wP4g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.241.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:99:5b:f0:15:4e:51:96:a2:84:c8:bc:65:2b:53:b3:de:
         41:9b:88:93:0c:26:60:aa:80:13:df:0c:49:b7:e0:fc:f9:45:
         a7:45:fb:a5:46:98:84:c0:a6:20:db:0b:b8:a3:56:2a:52:b7:
         7a:3f:07:47:34:88:2f:17:df:8a:a7:f6:d5:e9:dc:70:26:e1:
         b7:13:05:fa:f1:f2:cf:84:d0:fc:d5:4a:da:58:c2:ab:0f:5a:
         ca:56:c0:d9:ce:7a:36:5f:c1:5c:48:3a:eb:11:08:99:61:c8:
         b1:8a:dd:d7:66:82:8c:b1:7a:ac:2e:80:b4:20:da:d8:3b:43:
         ca:df:46:ac:05:05:09:7d:b8:0a:30:62:5d:fc:b9:5e:ba:81:
         81:72:e4:2b:8a:45:e8:ac:14:60:3d:29:b8:d9:3b:06:ed:5b:
         8c:2b:bf:88:bd:b6:32:41:d7:ed:34:e5:0b:44:cf:03:b0:f3:
         21:bc:59:e7:62:7c:51:7e:46:36:31:05:65:be:4f:55:5b:3c:
         40:55:42:1b:62:ea:2d:2e:4f:67:e3:48:78:c2:4d:ed:e0:ac:
         ea:00:57:ef:f4:93:e4:fe:6f:d0:4a:42:b1:49:9a:ca:7e:4d:
         0d:07:88:95:eb:de:62:5f:bf:8f:fe:ff:75:81:74:42:15:ee:
         94:86:f5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:45 2026 by rpki-client