Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/1AYiIgi46CAjCaEH6FP9-9WIf4U.roa
File:                     1AYiIgi46CAjCaEH6FP9-9WIf4U.roa (raw, json)
Hash identifier:          XDYM6G8yvPfQsxY7FVxQOjU5o/9fLFdv3vllZij6rvg=
Subject key identifier:   D4:06:22:22:08:B8:E8:20:23:09:A1:07:E8:53:FD:FB:D5:88:7F:85
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       CB
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/1AYiIgi46CAjCaEH6FP9-9WIf4U.roa
Signing time:             Fri 25 Sep 2026 05:52:11 +0000
ROA not before:           Fri 25 Sep 2026 05:52:11 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 05:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 25 05:52:11 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=D406222208B8E8202309A107E853FDFBD5887F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:8b:e7:a1:ac:00:42:16:a5:51:21:49:e6:
                    7b:ff:2a:fe:e2:3d:50:96:98:58:84:74:74:a9:1e:
                    95:59:9c:7d:d3:f7:47:4d:67:f0:a7:a9:cd:6c:3e:
                    8b:8f:13:ae:da:88:7c:a7:18:da:37:a3:e1:e0:b7:
                    91:6b:fd:03:0d:b6:fd:85:82:d6:89:a9:0c:40:40:
                    45:fe:f3:c7:0a:7d:f3:6c:2a:f0:20:d9:50:e7:a6:
                    f8:ea:e4:0d:f8:a3:42:03:03:00:56:88:77:f9:fe:
                    ec:0d:19:b1:da:51:ff:16:bc:8a:c7:7c:94:8a:1f:
                    24:4c:d1:fb:fd:f7:d1:29:6a:69:a2:29:c1:60:2f:
                    22:3e:61:69:e1:fa:5b:81:63:69:af:fe:cf:f7:12:
                    f4:a3:56:86:b2:34:c8:e3:72:3a:9c:4d:46:31:15:
                    b3:9d:fb:f2:6f:03:d7:12:80:c5:19:c4:28:0e:3b:
                    66:8a:8f:57:88:b8:9f:f9:48:36:7a:5e:6e:fc:da:
                    17:a1:8b:df:93:4c:61:eb:f3:65:a6:7b:0b:82:90:
                    c5:29:4b:e7:16:4c:99:44:8d:87:9e:03:bb:a0:8f:
                    73:28:b3:70:44:22:1d:07:7b:9d:25:22:f9:29:7b:
                    0d:ad:ce:44:81:7a:23:af:41:7f:4f:dc:07:af:65:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:06:22:22:08:B8:E8:20:23:09:A1:07:E8:53:FD:FB:D5:88:7F:85
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/1AYiIgi46CAjCaEH6FP9-9WIf4U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:f9:89:69:78:9d:6f:d6:2d:3e:d2:41:94:11:35:75:7b:
         75:de:67:b0:9b:5a:c2:e4:57:35:11:be:11:f5:0d:09:7b:44:
         fc:c6:65:15:22:ca:85:d6:28:bb:03:d5:7a:4e:d2:b3:5c:cd:
         b3:84:0c:8f:27:16:66:86:6e:26:68:9d:ce:26:61:1b:bb:bb:
         f9:59:cc:24:c5:62:fc:4d:0a:89:1d:82:72:05:cb:a3:f8:22:
         85:19:b0:31:44:d4:3c:59:3a:a8:d4:5d:da:53:1a:bf:fd:09:
         01:36:ef:ed:36:11:d6:58:4a:42:0a:20:4f:cc:50:c8:d4:5b:
         47:c5:30:58:4b:fa:f4:e8:42:f2:c3:3a:0c:d7:b2:ae:37:c0:
         67:d0:34:b3:a4:99:32:ad:e4:bd:66:4f:4b:2b:dd:7f:5f:50:
         a7:8a:47:b4:75:d4:21:9a:6a:3e:ef:33:cf:0f:be:9e:e6:a7:
         6e:e8:25:76:a2:3f:e9:c2:68:d2:c3:84:39:70:b1:b7:61:7a:
         25:3c:4c:9e:45:aa:cb:0d:e1:4c:73:72:b7:62:95:c4:6a:60:
         ab:00:ff:51:93:f7:25:1f:7e:17:30:ab:8a:b5:b1:96:b1:6b:
         76:52:f1:30:37:24:81:ff:00:c8:bb:17:7f:7f:61:77:b3:87:
         80:87:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:33 2026 by rpki-client