Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/9YP000QSW_RR1BheXGc5JV4LL7I.roa
File:                     9YP000QSW_RR1BheXGc5JV4LL7I.roa (raw, json)
Hash identifier:          8sFGkq+G2iJYEdUWdP4MYu3ejf3VrKip1WlU98TF0tE=
Subject key identifier:   F5:83:F4:D3:44:12:5B:F4:51:D4:18:5E:5C:67:39:25:5E:0B:2F:B2
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       BB
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/9YP000QSW_RR1BheXGc5JV4LL7I.roa
Signing time:             Thu 24 Sep 2026 00:37:32 +0000
ROA not before:           Thu 24 Sep 2026 00:37:32 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 24 00:37:32 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=F583F4D344125BF451D4185E5C6739255E0B2FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:6e:f7:c5:14:30:a0:a5:bc:ec:2b:e2:1e:
                    66:33:5c:b0:f9:40:2c:04:52:e9:c6:c4:fb:64:fc:
                    14:b9:03:93:43:66:af:0c:94:62:51:e0:38:bc:0a:
                    d9:94:f8:be:e6:e0:e3:09:c7:55:d2:03:05:9a:50:
                    2c:79:81:7a:49:d6:ed:56:45:74:29:c6:15:d6:5a:
                    68:d9:7b:fb:2c:ed:e7:9b:20:3d:c9:8f:3f:f5:89:
                    52:4d:c9:47:58:b0:f4:d9:47:c3:b3:05:ee:b9:c4:
                    c8:4f:e5:a4:8d:15:cf:6f:71:73:96:35:70:f2:ee:
                    d9:5e:10:42:69:3a:d3:5f:e0:fd:f4:66:85:6f:51:
                    64:99:a3:45:78:71:27:90:57:40:04:8a:5a:5b:98:
                    a7:1c:30:39:0f:b4:26:ba:f4:4d:f5:46:08:71:7e:
                    6a:95:f5:30:96:f7:24:5a:01:a2:f9:b0:49:d2:8f:
                    09:7c:4b:2b:b8:ae:aa:a6:b1:b5:60:ac:e7:28:c8:
                    e7:3b:b5:44:fe:9d:a2:b6:43:1b:d1:58:38:8a:87:
                    41:52:0f:c8:02:62:0a:f4:16:56:99:a1:8c:90:8f:
                    8a:01:74:6c:eb:f4:47:52:8f:21:a7:e6:c4:0b:aa:
                    05:ec:eb:f7:a6:91:d1:81:bc:22:42:55:24:9c:23:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:83:F4:D3:44:12:5B:F4:51:D4:18:5E:5C:67:39:25:5E:0B:2F:B2
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/9YP000QSW_RR1BheXGc5JV4LL7I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:32:7c:4b:b9:24:15:29:e2:f1:f7:a4:8b:d4:d0:c9:73:dc:
         19:58:42:1d:1b:f2:1c:4d:20:de:6c:a7:b0:42:d5:bd:d7:f1:
         52:d3:c9:04:39:07:0d:70:06:45:c2:b0:a9:eb:9d:17:84:5d:
         af:98:78:46:cb:82:e6:44:63:dd:19:94:33:71:f2:25:39:ce:
         b0:a3:bf:5d:00:f6:85:67:91:1a:06:af:73:77:6e:62:82:84:
         b1:3e:8d:cc:85:3b:66:5f:07:67:ad:95:71:67:df:bb:65:8d:
         a6:47:73:97:d6:8e:a9:a5:d7:da:91:52:7f:ed:6c:90:97:5d:
         77:6d:39:d6:d6:a3:14:4d:e9:79:4b:08:1c:6a:32:2e:46:68:
         ef:ce:93:57:6d:f3:f8:40:94:4c:e4:2a:69:2f:cb:fa:0b:2b:
         de:25:b1:1a:8c:35:a3:e3:8f:c3:ab:51:8d:ea:a4:80:3d:31:
         ec:2e:7f:9f:ad:c0:41:a6:6a:af:61:46:f0:65:72:de:39:6f:
         3b:83:76:7e:a9:a8:48:37:55:40:40:94:79:6f:8a:5d:eb:ff:
         2b:c9:73:5d:79:95:21:10:48:6c:a5:1b:b9:aa:aa:15:9e:6a:
         3b:44:a0:58:9d:aa:1a:88:ac:48:b4:d1:b7:9b:d0:0f:95:9b:
         b5:30:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:28 2026 by rpki-client