Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-zdOsSSYUWqWA_BfqLMwphEeMgM.roa
File:                     -zdOsSSYUWqWA_BfqLMwphEeMgM.roa (raw, json)
Hash identifier:          r/AQr2NzQxTKTisPCD56lKorCX1QpstCVQsFSk0zDIo=
Subject key identifier:   FB:37:4E:B1:24:98:51:6A:96:03:F0:5F:A8:B3:30:A6:11:1E:32:03
Certificate issuer:       /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial:       62
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-zdOsSSYUWqWA_BfqLMwphEeMgM.roa
Signing time:             Mon 10 Aug 2026 05:40:12 +0000
ROA not before:           Mon 10 Aug 2026 05:40:12 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        133.117.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
        Validity
            Not Before: Aug 10 05:40:12 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=FB374EB12498516A9603F05FA8B330A6111E3203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:de:af:d5:86:44:6e:f6:48:c7:78:45:e9:
                    6d:94:ed:34:59:e4:a0:0d:49:b5:aa:fb:23:1c:06:
                    d6:f2:ea:16:9f:82:49:2c:e7:fc:48:97:48:14:46:
                    a4:2b:77:46:1a:30:20:ca:92:05:d7:7e:a5:d2:09:
                    9d:e6:ad:a1:b4:22:f2:33:a6:23:63:c8:6c:ae:96:
                    86:4c:38:fb:ad:c4:20:e8:ff:1d:b0:d3:ab:7b:9b:
                    2e:99:4a:ee:fa:93:2e:a2:28:2a:4f:ea:4d:a7:60:
                    29:8b:22:b3:f0:f9:24:32:7e:cc:a6:58:f3:ae:34:
                    72:c7:65:5b:ec:2a:72:74:c8:af:cd:d0:af:6a:00:
                    08:9c:aa:94:5b:90:f2:7e:96:01:eb:ff:9a:b7:53:
                    47:d7:a6:59:12:1a:69:9c:10:bc:da:9f:0c:07:56:
                    71:1b:26:fa:0d:a6:aa:43:80:33:36:52:6c:6f:26:
                    8a:2c:f7:4d:27:b2:e4:36:5a:4b:2e:f7:b7:63:36:
                    56:69:d1:77:d9:7f:10:d9:17:06:3b:7b:a9:12:24:
                    a9:7b:2d:b6:b8:aa:7f:2f:da:21:5e:cc:42:e7:ca:
                    19:4b:ee:bb:94:97:eb:64:bc:25:7e:4a:da:d1:8e:
                    86:2c:2c:f6:45:c7:80:82:44:87:8e:10:e6:70:c2:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:37:4E:B1:24:98:51:6A:96:03:F0:5F:A8:B3:30:A6:11:1E:32:03
            X509v3 Authority Key Identifier:
                keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-zdOsSSYUWqWA_BfqLMwphEeMgM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.117.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:b3:06:a1:96:9b:89:01:d8:0e:c1:34:83:9f:6e:ee:86:
         17:48:fa:f7:e8:93:e9:b5:54:d2:3c:63:53:4a:fe:28:1e:75:
         60:be:a0:e7:4a:34:1a:c2:61:82:15:fa:cf:e5:de:7d:33:c3:
         c0:2e:dc:dd:50:1b:f0:2c:4b:26:00:42:87:3d:f7:72:df:08:
         6c:b5:d2:94:8e:d7:08:2e:2f:7b:5d:d9:36:34:a6:c5:32:11:
         d7:50:fe:9d:99:6a:74:67:06:a2:6b:2e:ef:de:8b:f2:4a:27:
         f3:41:b4:02:1e:3d:19:16:a4:0d:ed:7c:b9:1b:73:e1:0c:c9:
         ef:7a:8a:ad:8f:b9:59:2a:62:40:9e:39:a0:88:74:5b:de:88:
         0f:33:a3:7c:43:73:7e:b5:c7:ae:9d:c4:d3:61:41:75:35:55:
         5f:22:d8:ab:e6:9e:bc:5e:a8:ff:e4:1d:5c:18:2a:54:14:9f:
         d9:3c:d2:cd:b8:40:83:88:65:1c:0e:65:8d:eb:ee:aa:ee:1e:
         c7:5c:8c:38:c2:0b:05:89:cd:67:a0:b8:66:f5:b3:17:a1:cd:
         9c:61:05:aa:d1:3e:1d:d0:f8:12:07:e7:3a:d9:b5:ea:6a:8d:
         2d:5d:c8:21:4c:25:76:b6:ec:f9:01:8b:f9:53:9e:32:16:79:
         9c:57:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:17:13 2026 by rpki-client