Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/8xJnbPOYuF_vuYDPaPaiGO-Lf6c.roa
File:                     8xJnbPOYuF_vuYDPaPaiGO-Lf6c.roa (raw, json)
Hash identifier:          jFeFgsVVF03doNqEwuvQgQhtWLzt7GeoCS03OH5zajM=
Subject key identifier:   F3:12:67:6C:F3:98:B8:5F:EF:B9:80:CF:68:F6:A2:18:EF:8B:7F:A7
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       D3
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/8xJnbPOYuF_vuYDPaPaiGO-Lf6c.roa
Signing time:             Fri 25 Sep 2026 07:24:30 +0000
ROA not before:           Fri 25 Sep 2026 07:24:30 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 25 07:24:30 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=F312676CF398B85FEFB980CF68F6A218EF8B7FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:93:ad:cf:9d:67:3f:01:a0:03:bf:af:0a:
                    05:05:61:29:76:51:bb:b3:f8:e7:87:65:01:67:d9:
                    31:57:68:a4:65:38:10:15:97:65:f7:9d:dd:a8:21:
                    ef:ef:cf:78:7e:ee:9b:fc:6d:a0:7a:0e:b8:4b:1b:
                    e4:70:8c:ee:89:43:89:2c:3c:b7:ae:89:cf:bc:c3:
                    5f:0c:75:d2:da:68:c4:1b:67:c3:40:9a:5d:3b:ab:
                    53:85:7b:b2:92:81:02:59:a4:49:b6:03:9a:96:62:
                    7c:96:3b:13:53:ee:fb:15:92:b9:30:57:ee:23:15:
                    b9:05:36:06:fb:e2:73:1f:fa:1f:99:75:cc:f7:57:
                    e2:1e:c2:5f:7b:21:08:d0:02:7e:ce:94:0a:5e:04:
                    e5:79:9a:bc:e3:3f:76:98:61:86:c2:5d:b8:cb:4a:
                    9f:3d:84:06:fa:c2:45:f5:c1:29:5b:fe:4b:54:f2:
                    42:50:e3:81:c8:3e:94:da:12:53:70:54:cc:9e:49:
                    35:ba:f8:27:d9:4d:a9:57:d4:25:26:ac:f9:be:e1:
                    2f:bc:87:a5:c6:06:89:82:e0:2c:06:73:f8:71:d1:
                    88:55:78:fb:03:65:7d:dd:6b:d3:2d:9f:7b:fd:9f:
                    c1:6b:ac:a3:67:44:83:09:b4:63:47:fe:c0:71:36:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:12:67:6C:F3:98:B8:5F:EF:B9:80:CF:68:F6:A2:18:EF:8B:7F:A7
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/8xJnbPOYuF_vuYDPaPaiGO-Lf6c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:05:41:f7:5b:07:06:7d:90:b0:cc:9e:54:fd:18:a6:d8:4e:
         33:e6:14:5d:aa:0c:b7:04:17:c9:36:7f:46:d0:80:63:f8:59:
         b8:81:ae:6f:0a:be:d0:c4:c9:b8:58:59:c4:de:8c:70:63:4b:
         b4:84:3a:6d:e3:bb:a1:96:aa:47:e5:f9:fa:03:b8:e9:c2:4f:
         d5:10:95:26:ba:07:46:12:6a:19:e5:d4:2e:19:26:15:c4:9c:
         8e:6a:b5:9d:0c:9b:45:f9:85:2c:af:95:82:e4:56:7a:ae:1d:
         4f:cb:a9:6d:03:0b:9e:e8:bf:59:33:56:6b:28:a9:62:ff:49:
         d9:b5:66:2a:6a:7f:b2:fb:9b:80:2a:f9:3c:9f:d8:cc:c6:99:
         8e:47:28:62:a4:ae:f9:d6:0d:41:5c:34:f6:4c:5d:ec:fa:14:
         9c:b0:c7:ee:a7:c4:4b:45:08:f1:35:50:e5:63:26:3d:65:a9:
         4c:c9:dd:7d:36:f1:4e:ce:e1:d2:ff:52:7b:03:49:22:7f:a6:
         29:4e:4c:aa:b4:95:b8:c7:91:0f:7d:b7:7d:52:04:00:12:7c:
         e1:5c:b4:02:c5:15:ee:cb:80:a7:c9:d8:c3:d9:5d:7d:48:a8:
         cd:d2:27:af:ae:29:a2:c3:59:a7:ad:54:5e:ab:ce:c3:5d:df:
         be:4b:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:32 2026 by rpki-client