Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/2yDUkhdYwRARChhiKdgSpgJ2hxw.roa
File:                     2yDUkhdYwRARChhiKdgSpgJ2hxw.roa (raw, json)
Hash identifier:          MrjuZ3zsr1ZOe38Mxe+Y51JkkIaiylnSjvwpok9KNMU=
Subject key identifier:   DB:20:D4:92:17:58:C1:10:11:0A:18:62:29:D8:12:A6:02:76:87:1C
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       68
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/2yDUkhdYwRARChhiKdgSpgJ2hxw.roa
Signing time:             Mon 10 Aug 2026 05:15:18 +0000
ROA not before:           Mon 10 Aug 2026 05:15:18 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     0
IP address blocks:        133.241.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 10 05:15:18 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=DB20D4921758C110110A186229D812A60276871C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:7e:d9:24:4d:98:64:fe:01:3f:a5:c9:56:
                    1f:84:c6:f6:62:5c:12:54:be:9d:a4:ec:73:84:d1:
                    c3:cc:c3:cb:b3:f0:f1:15:33:e6:9f:16:0a:61:4c:
                    e3:80:bf:62:e9:c3:fc:9a:11:f3:34:05:f1:89:a1:
                    6c:a9:a8:e8:5d:e0:48:b6:f7:4b:9a:88:20:1f:c2:
                    90:ea:f5:b1:56:f7:f3:d0:b7:af:72:7e:15:bf:84:
                    d9:20:b0:24:70:28:14:10:0e:c4:a1:e5:65:80:cf:
                    32:9f:df:3a:4a:a7:a7:aa:a2:52:0d:46:4f:a0:a8:
                    3e:e5:2e:aa:54:e9:56:8c:48:0b:87:bd:62:c4:0c:
                    a2:48:da:fc:b8:df:72:d5:77:c8:d9:f9:23:0c:b7:
                    93:ce:0f:74:14:35:3f:5d:cb:cb:bb:d9:77:95:df:
                    c7:38:b8:45:63:58:1f:df:b7:5d:29:59:4d:32:16:
                    86:3a:60:80:32:23:6a:66:dd:3b:4d:39:a3:62:8e:
                    af:6c:01:d3:cb:9b:0d:2a:7c:9b:ce:3a:62:42:71:
                    44:fe:2c:fe:11:f6:82:d7:e0:49:1d:88:b9:be:0f:
                    6a:d6:8e:70:f7:d6:50:d5:28:72:7f:8d:48:3b:0b:
                    a0:eb:88:b4:08:31:c6:a0:d8:8d:e7:04:26:5f:a4:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:D4:92:17:58:C1:10:11:0A:18:62:29:D8:12:A6:02:76:87:1C
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/2yDUkhdYwRARChhiKdgSpgJ2hxw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:63:18:08:50:4e:66:ca:fd:eb:c4:d9:69:a3:72:77:ab:d4:
         5f:dd:0e:f8:67:fc:9a:50:e7:b0:82:63:4d:5a:bb:dd:be:0a:
         6f:a1:60:a2:ac:54:91:f6:58:e4:3b:6f:22:b8:03:7e:5c:91:
         b2:4c:32:6a:af:c3:be:2d:a0:f2:15:55:1e:ab:f9:62:9f:99:
         ea:f4:e5:f2:94:41:18:75:03:21:a6:ff:ab:f5:90:93:89:88:
         50:4e:9d:88:df:ad:1c:fc:8b:54:1a:0c:b6:90:c1:de:29:90:
         e7:e7:33:78:b0:a3:7d:a9:93:c4:19:90:dc:f1:68:d5:42:29:
         15:6c:48:11:d8:08:f9:6d:5b:84:cf:90:bd:34:52:3c:b5:4e:
         cc:8f:9a:79:7b:c7:f9:48:e4:76:7a:63:25:fd:07:d3:ab:d3:
         bd:1e:f0:92:2d:dd:2c:3b:c0:56:4f:ce:ae:c4:f6:57:ab:6f:
         19:2f:13:48:30:55:a6:34:f1:b1:5d:ea:22:ed:13:89:80:be:
         df:78:60:7a:46:54:be:98:6e:6e:b7:e1:f5:43:28:c1:c8:ea:
         50:83:d0:a9:b8:4f:1f:fd:fe:23:71:05:df:46:a6:c1:e0:a5:
         e6:ae:fd:8b:3d:ef:ac:f8:7d:71:f7:e0:71:c3:6a:e9:5a:90:
         81:60:81:f9
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDgxMDA1
MTUxOFoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoREIyMEQ0OTIxNzU4QzEx
MDExMEExODYyMjlEODEyQTYwMjc2ODcxQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcUftkkTZhk/gE/pclWH4TG9mJcElS+naTsc4TRw8zDy7Pw8RUz
5p8WCmFM44C/YunD/JoR8zQF8YmhbKmo6F3gSLb3S5qIIB/CkOr1sVb389C3r3J+
Fb+E2SCwJHAoFBAOxKHlZYDPMp/fOkqnp6qiUg1GT6CoPuUuqlTpVoxIC4e9YsQM
okja/LjfctV3yNn5Iwy3k84PdBQ1P13Ly7vZd5Xfxzi4RWNYH9+3XSlZTTIWhjpg
gDIjambdO005o2KOr2wB08ubDSp8m846YkJxRP4s/hH2gtfgSR2Iub4PataOcPfW
UNUocn+NSDsLoOuItAgxxqDYjecEJl+kRTECAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBTbINSSF1jBEBEKGGIp2BKmAnaHHDAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xOTEvMnlEVWtoZFl3UkFSQ2hoaUtkZ1NwZ0oyaHh3LnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIXxMA0GCSqGSIb3DQEBCwUAA4IBAQA0
YxgIUE5myv3rxNlpo3J3q9Rf3Q74Z/yaUOewgmNNWrvdvgpvoWCirFSR9ljkO28i
uAN+XJGyTDJqr8O+LaDyFVUeq/lin5nq9OXylEEYdQMhpv+r9ZCTiYhQTp2I360c
/ItUGgy2kMHeKZDn5zN4sKN9qZPEGZDc8WjVQikVbEgR2Aj5bVuEz5C9NFI8tU7M
j5p5e8f5SOR2emMl/QfTq9O9HvCSLd0sO8BWT86uxPZXq28ZLxNIMFWmNPGxXeoi
7ROJgL7feGB6RlS+mG5ut+H1QyjByOpQg9CpuE8f/f4jcQXfRqbB4KXmrv2LPe+s
+H1x9+Bxw2rpWpCBYIH5
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:49 2026 by rpki-client