Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1080/nE15rtDPXT_uqWseLoGuCiFPO1I.roa
File:                     nE15rtDPXT_uqWseLoGuCiFPO1I.roa (raw, json)
Hash identifier:          0mZ53XEH7+v7KR+nT9jvZZR97MTTGhezsP45kwO+jNg=
Subject key identifier:   9C:4D:79:AE:D0:CF:5D:3F:EE:A9:6B:1E:2E:81:AE:0A:21:4F:3B:52
Certificate issuer:       /CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
Certificate serial:       0D
Authority key identifier: 0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/nE15rtDPXT_uqWseLoGuCiFPO1I.roa
Signing time:             Mon 17 Aug 2026 05:18:42 +0000
ROA not before:           Mon 17 Aug 2026 05:18:42 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     18148
IP address blocks:        133.100.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
        Validity
            Not Before: Aug 17 05:18:42 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=9C4D79AED0CF5D3FEEA96B1E2E81AE0A214F3B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:b5:1d:d8:97:89:a0:77:00:6f:6e:8f:99:
                    f1:80:78:7c:4b:23:90:0d:bd:31:9e:0b:1f:0d:a3:
                    73:f7:a7:94:61:41:de:8b:dc:a4:fb:a4:90:7d:10:
                    eb:76:51:6d:2a:cb:b9:28:61:c6:42:33:57:dd:c2:
                    0e:7a:e1:78:b5:57:dd:cf:8c:44:81:2f:7f:29:5b:
                    7c:2e:f7:0f:f3:63:8a:a3:6c:b1:55:db:af:ff:a0:
                    a1:1b:64:96:c1:0d:d9:2b:5f:ff:f6:1c:af:df:f3:
                    32:7c:c7:87:b0:ad:96:2b:ec:ca:91:24:06:86:33:
                    8c:b5:d9:2f:f0:c7:89:51:a0:90:04:70:d3:b4:a2:
                    2a:eb:e9:7e:c3:62:52:13:0e:51:10:a1:2c:07:d1:
                    3d:85:a2:13:f1:90:42:18:fe:e5:4a:08:80:55:ed:
                    db:43:89:c5:db:d8:a3:1a:e3:8d:0d:6d:5d:95:fc:
                    c0:12:61:18:78:dc:2d:24:c2:51:ab:b1:2a:1f:db:
                    e4:a2:1e:50:71:73:f0:e6:f9:6a:54:66:a6:9a:fa:
                    ab:b9:ab:6e:9d:b2:a3:db:fb:fb:6d:23:db:48:a0:
                    36:3a:da:a8:27:99:4a:3f:91:3f:ec:3d:bb:c9:3b:
                    0f:dc:72:75:60:e5:05:1c:66:1a:eb:3f:e0:4f:74:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4D:79:AE:D0:CF:5D:3F:EE:A9:6B:1E:2E:81:AE:0A:21:4F:3B:52
            X509v3 Authority Key Identifier:
                keyid:0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/nE15rtDPXT_uqWseLoGuCiFPO1I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.100.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a1:ac:31:19:cb:6f:b0:44:68:64:07:14:d4:1a:13:1f:1c:c4:
         d4:0f:a5:49:c2:dc:3d:28:67:0e:5b:9d:5f:50:ef:67:f9:0f:
         c2:c9:94:10:b9:82:66:d6:b6:53:fc:1f:0a:ce:97:4e:dc:0b:
         5f:67:cd:f1:7d:5e:e3:76:a5:72:47:39:0f:6b:53:3b:a9:5c:
         02:4a:0d:f0:f2:60:76:18:64:95:3f:f0:38:9e:53:64:e7:33:
         56:f2:62:6b:14:f4:24:03:11:27:1e:ce:55:b8:90:53:a4:92:
         39:db:2f:4d:74:70:0f:6b:c8:bd:be:90:b5:fd:e3:c7:34:0c:
         f0:b6:92:7c:89:eb:75:cd:1e:de:a1:a8:f5:d6:bd:a0:38:fa:
         52:3c:11:15:a8:e5:e7:02:08:e9:ad:9d:1b:17:c2:b7:d7:3c:
         ef:df:b3:9b:c9:ca:a1:f2:ec:1b:b2:d2:0b:25:bd:fc:f4:ed:
         af:f4:19:e1:73:30:86:71:46:fd:50:f7:2f:9e:95:d6:72:8e:
         18:c8:5d:60:e5:64:30:8e:15:a6:cf:fc:fc:8f:c4:99:16:ad:
         27:13:89:f9:b4:ab:0f:c6:96:27:da:2a:2f:9e:99:3f:23:0c:
         ab:ce:64:b8:7d:1b:95:ee:70:41:8e:17:84:5b:57:41:f9:6a:
         d8:21:83:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:32:00 2026 by rpki-client