Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/26EW8QWEiSpGZlQoy9c2BZhksmM.roa
File:                     26EW8QWEiSpGZlQoy9c2BZhksmM.roa (raw, json)
Hash identifier:          uEaZHzGcd7N6Oj9LgHbnfib9115JYaeUfLTHRoP4uyo=
Subject key identifier:   DB:A1:16:F1:05:84:89:2A:46:66:54:28:CB:D7:36:05:98:64:B2:63
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       9E
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/26EW8QWEiSpGZlQoy9c2BZhksmM.roa
Signing time:             Fri 14 Aug 2026 09:31:02 +0000
ROA not before:           Fri 14 Aug 2026 09:31:02 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:31:02 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=DBA116F10584892A46665428CBD736059864B263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:8f:0f:b5:b8:de:99:c5:81:9a:89:65:78:
                    3a:81:2c:0e:7a:cd:bd:ca:f7:d3:ee:2b:89:57:61:
                    9e:0c:4b:08:90:9c:3f:f6:1d:0a:6d:7a:e8:23:43:
                    00:a6:b8:76:f6:e8:a8:4f:e8:a5:1e:02:d2:13:29:
                    4a:0a:10:d7:bf:2c:4a:78:8c:76:92:11:1a:99:b4:
                    dd:49:f7:d0:1a:c0:f3:a5:01:c4:ab:cf:d4:f5:2d:
                    d5:1c:c8:43:a8:b1:89:f4:cd:18:e6:1f:e8:8b:ea:
                    26:50:8b:98:46:90:5c:86:c1:24:70:3d:90:e5:b9:
                    ba:64:6b:20:66:08:5d:a0:54:fa:8b:d7:4a:0d:d9:
                    ec:8f:d6:45:3c:28:54:1c:f8:56:0b:35:e6:ad:b0:
                    57:b3:78:1d:49:c1:97:4c:77:5e:41:05:bc:dc:1a:
                    42:4a:cf:26:6e:ea:1d:12:8a:29:92:7e:1c:7c:17:
                    ff:2c:80:29:d9:28:fb:ea:e5:a4:09:2b:61:e2:c6:
                    e5:78:53:51:99:36:af:a0:47:39:ef:90:b9:cc:09:
                    e7:ef:06:b8:10:fa:09:21:3d:48:47:67:b2:92:04:
                    dd:70:c5:5c:3f:24:e3:83:bf:ab:7a:0f:b6:5f:a9:
                    64:48:6d:e8:d2:0d:09:5e:83:bb:56:33:d7:06:ee:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A1:16:F1:05:84:89:2A:46:66:54:28:CB:D7:36:05:98:64:B2:63
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/26EW8QWEiSpGZlQoy9c2BZhksmM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:c9:3e:3b:29:cb:59:8a:9c:b5:b3:b2:c7:b2:37:f0:10:
         c3:55:71:1a:0c:8b:64:b5:e9:05:ab:24:f0:e2:f9:3a:0f:22:
         06:99:7f:42:c6:5c:9d:84:2c:9e:ca:4a:34:22:11:12:8b:83:
         8b:38:12:35:50:33:b6:65:02:04:82:fa:b2:66:64:9d:87:7a:
         6f:ba:e5:f9:6a:8d:27:60:be:e5:9c:33:2c:18:b3:91:ef:53:
         b0:86:e5:ee:75:44:ab:f2:b4:d9:a4:ce:e3:3b:2f:d6:d3:af:
         2d:2c:7e:da:df:c0:48:0f:28:d8:07:8b:42:7a:07:ff:c5:f3:
         66:f3:0c:16:4a:11:ad:f0:08:aa:63:5a:3c:7f:98:5b:94:1e:
         2c:b3:fd:e3:ce:ad:c0:34:ca:4d:97:72:c0:e0:c4:54:9a:90:
         b7:b9:d6:a4:7c:30:1f:7b:8d:67:b5:59:ef:94:27:94:d6:f6:
         a0:08:3d:53:50:8d:2d:68:3b:35:f6:bf:c4:73:38:15:71:61:
         fe:74:26:03:8f:c0:52:f8:29:6f:89:61:38:d5:8e:2c:6d:32:
         71:14:a9:15:33:08:77:20:c2:98:7b:47:f4:1b:89:e1:fa:86:
         be:85:77:8c:72:b8:38:59:af:28:2b:f4:80:b1:47:bc:74:b6:
         86:da:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:44:04 2026 by rpki-client