Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1080/7CpouxvwX0iiIW6Da7fb1dWKW44.roa
File:                     7CpouxvwX0iiIW6Da7fb1dWKW44.roa (raw, json)
Hash identifier:          F/SdNgq71zvdOALQM+eCiTtFvssk7K7nJFEj4KIGh1E=
Subject key identifier:   EC:2A:68:BB:1B:F0:5F:48:A2:21:6E:83:6B:B7:DB:D5:D5:8A:5B:8E
Certificate issuer:       /CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
Certificate serial:       08
Authority key identifier: 0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/7CpouxvwX0iiIW6Da7fb1dWKW44.roa
Signing time:             Mon 17 Aug 2026 05:12:37 +0000
ROA not before:           Mon 17 Aug 2026 05:12:37 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     18148
IP address blocks:        133.100.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
        Validity
            Not Before: Aug 17 05:12:37 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=EC2A68BB1BF05F48A2216E836BB7DBD5D58A5B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:7d:23:59:0b:3b:73:f4:15:7f:fc:4d:d4:
                    04:b7:50:5f:c8:4b:8a:a0:d7:cb:66:a4:1e:a4:6f:
                    0a:39:7a:98:3e:cf:9c:e6:f7:2e:ca:63:12:11:11:
                    f7:f3:2b:ec:d9:d3:a9:3c:d7:b4:11:cf:e2:0d:9e:
                    ae:98:26:bf:d2:78:4a:aa:6d:75:36:30:ee:cf:19:
                    45:ca:90:49:9f:d9:7f:9f:7a:e1:92:f6:0a:f7:fe:
                    6e:dd:29:39:24:2e:e3:d0:b8:70:0b:f4:ac:90:fc:
                    88:ab:96:86:e1:5d:9a:d6:29:39:6c:62:0e:aa:69:
                    e8:2f:40:b0:35:21:e8:e0:73:e6:ec:22:85:1c:1b:
                    aa:4d:a9:df:23:e8:b6:f3:4b:60:9e:4e:93:95:cd:
                    c8:96:07:c4:80:85:7e:50:11:3c:ff:de:0c:6e:a7:
                    69:9e:04:a4:a0:c7:77:70:78:a0:b8:c9:67:bb:2e:
                    10:2e:ab:1f:7a:06:34:1d:a7:a4:0d:8c:4b:f7:b4:
                    20:e1:8d:5f:70:92:d1:bd:7d:69:a2:63:ce:03:3e:
                    da:8d:c9:c9:f7:c5:f5:24:00:79:1f:2d:bc:8f:37:
                    d9:9e:14:48:b5:e3:c4:67:d8:6b:d0:d0:ba:9b:07:
                    6f:af:38:02:98:af:bb:e3:58:f6:f3:ba:b4:fd:39:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2A:68:BB:1B:F0:5F:48:A2:21:6E:83:6B:B7:DB:D5:D5:8A:5B:8E
            X509v3 Authority Key Identifier:
                keyid:0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/7CpouxvwX0iiIW6Da7fb1dWKW44.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.100.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:22:a6:c8:61:c1:32:14:a6:85:69:82:ff:73:7e:a3:9a:cf:
         21:dd:f2:0d:d3:40:49:ef:a2:80:21:f3:f7:35:cf:ba:14:a9:
         5a:1a:d0:93:eb:ea:8d:93:14:e9:5e:7c:e2:dc:c3:ae:c8:b0:
         d7:30:17:4a:19:e7:f0:34:1c:b4:b0:56:62:da:a8:54:83:49:
         85:61:4c:2d:7f:49:de:c6:7a:fb:32:14:01:b6:84:0f:9f:f0:
         d5:77:2f:77:d5:96:d2:1c:2e:21:38:ef:f1:f4:be:c9:ea:29:
         92:4d:86:24:13:24:e8:bb:a6:c8:46:38:9f:71:1f:3e:2c:fa:
         4a:a4:1b:ee:48:aa:4d:31:41:de:d5:1f:76:af:47:2a:31:15:
         2b:c9:e5:5d:ac:dc:80:2f:6f:af:77:8d:80:cb:38:ee:27:85:
         65:55:b7:e6:86:75:b6:39:a2:d5:8a:91:46:b7:32:ca:d3:2d:
         9d:70:68:36:6e:1f:2c:cc:88:90:ae:ec:67:fa:6c:78:71:31:
         2b:c2:99:4a:23:f4:e2:df:ab:1a:ac:85:42:9b:c9:e6:20:7b:
         cf:ba:49:55:18:8d:f3:ec:5c:e7:db:24:34:42:d7:35:de:90:
         d2:6e:17:02:a7:18:b2:84:f6:83:86:a0:f9:8e:ba:b6:c9:6b:
         b5:7a:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:24:20 2026 by rpki-client