Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/9c3Rxos7iupYI7oun2ybAKBaGZA.roa
File:                     9c3Rxos7iupYI7oun2ybAKBaGZA.roa (raw, json)
Hash identifier:          iFlNid4fDQ0/j6ZZvfeqceu4H0nn02E32kBbq9Uiguk=
Subject key identifier:   F5:CD:D1:C6:8B:3B:8A:EA:58:23:BA:2E:9F:6C:9B:00:A0:5A:19:90
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       7B
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/9c3Rxos7iupYI7oun2ybAKBaGZA.roa
Signing time:             Fri 14 Aug 2026 09:09:00 +0000
ROA not before:           Fri 14 Aug 2026 09:09:00 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:09:00 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=F5CDD1C68B3B8AEA5823BA2E9F6C9B00A05A1990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b3:39:9c:70:e5:47:49:8e:f7:37:bc:83:da:
                    11:41:07:39:cb:83:58:20:1f:96:23:1e:45:3b:6c:
                    7c:4b:ee:a1:94:45:8b:d7:fe:05:f9:de:63:34:ca:
                    d6:f7:c1:67:5c:a0:52:e2:b0:50:91:47:f9:ea:25:
                    de:9e:d9:ea:0c:b2:ef:74:04:39:d5:0e:2b:45:21:
                    ec:b4:71:92:04:c3:24:3d:ef:82:ce:48:58:7a:25:
                    26:7d:96:07:22:8b:92:35:f3:21:5d:26:5f:40:3c:
                    ac:99:b3:12:d3:39:94:3b:bf:10:53:45:8a:63:bb:
                    92:65:cb:5c:5c:12:d6:c4:fd:db:5c:e8:79:df:66:
                    d2:6e:ad:80:8c:ea:b0:27:43:80:09:64:65:53:83:
                    55:72:e2:80:1a:8d:ff:23:92:19:70:08:d3:05:32:
                    bd:16:9b:14:10:71:50:6b:9c:25:35:f7:92:16:db:
                    3f:cd:aa:2c:77:aa:0a:25:2d:f3:c7:a3:7c:4b:83:
                    e3:21:46:0b:4c:45:98:63:05:02:22:76:75:0f:3c:
                    92:bf:0a:f8:d5:90:00:37:77:2f:53:0a:8b:9f:8d:
                    c3:55:df:e8:29:57:f1:a0:5b:3d:5a:47:04:60:47:
                    ef:72:cb:12:47:4c:d0:8f:0b:d3:9b:93:d4:31:ac:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:D1:C6:8B:3B:8A:EA:58:23:BA:2E:9F:6C:9B:00:A0:5A:19:90
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/9c3Rxos7iupYI7oun2ybAKBaGZA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:00:c1:3c:5d:ed:c0:0d:7d:28:b3:bd:cf:3e:b6:3b:4f:ee:
         63:8d:8e:2d:70:d8:5d:ae:c9:41:6f:9c:41:47:46:dc:ec:f2:
         16:ea:7d:22:28:d3:85:47:5a:47:e1:d7:0f:4f:73:ef:f6:f4:
         e9:80:8a:58:25:10:99:1c:a3:86:f0:24:32:f6:4c:0a:a4:98:
         f6:44:b1:ad:43:78:5b:de:36:25:e2:29:58:fb:a0:39:9d:4b:
         03:a8:7b:b5:bc:b3:d5:6f:19:98:9e:a1:28:b4:cf:73:b6:c0:
         90:eb:0e:5e:be:a5:55:75:dd:90:9c:d9:31:61:91:a3:f2:df:
         79:83:78:0a:2e:ba:6f:cd:67:51:a6:b1:53:48:b1:b3:86:63:
         37:f9:d2:85:9b:1b:ae:a4:76:ad:a6:34:72:21:85:bc:a7:48:
         4e:57:d8:8e:b0:8c:2e:63:a9:f5:ff:07:5f:d8:11:8e:3c:81:
         9b:bd:5c:27:c2:5a:2c:37:46:34:b1:26:14:cf:06:2b:22:c6:
         f7:08:d8:b2:a3:5e:69:7a:d2:16:a0:bc:8a:d4:f5:d0:28:15:
         a7:46:91:86:23:f6:39:93:91:35:52:5d:05:67:48:79:90:76:
         b2:2b:fa:28:2e:7e:d5:15:1b:fc:48:16:32:80:fb:ec:99:14:
         90:0e:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:54 2026 by rpki-client