Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/AqPaJW2XtU8g1jDudKX5FvmkHtI.roa
File:                     AqPaJW2XtU8g1jDudKX5FvmkHtI.roa (raw, json)
Hash identifier:          CSNtEmwDr4fAOhd4mSSalQtJiscj3sCOU9t9fvwh66U=
Subject key identifier:   02:A3:DA:25:6D:97:B5:4F:20:D6:30:EE:74:A5:F9:16:F9:A4:1E:D2
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       CC
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AqPaJW2XtU8g1jDudKX5FvmkHtI.roa
Signing time:             Fri 25 Sep 2026 05:52:12 +0000
ROA not before:           Fri 25 Sep 2026 05:52:12 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        133.157.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 12:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 25 05:52:12 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=02A3DA256D97B54F20D630EE74A5F916F9A41ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:98:15:2e:22:21:bd:15:b5:2f:db:7e:6b:2c:
                    92:9e:69:85:c1:20:36:f9:5f:b2:3a:a1:3f:7a:1b:
                    00:25:85:ae:fa:99:77:57:5f:b3:04:f9:b1:23:ee:
                    e4:40:b9:fa:f2:1b:eb:a6:12:b3:68:a7:5b:1f:f9:
                    d5:5e:05:65:1e:cb:c8:22:b0:6c:32:7b:10:14:ad:
                    82:0e:0c:c2:a7:ca:27:8f:78:37:66:56:e2:45:ea:
                    5c:53:a7:02:48:22:73:78:f3:89:20:92:96:b8:18:
                    2e:a8:12:00:0e:fe:74:9e:82:58:b8:b0:ff:39:36:
                    b8:1f:7c:64:1f:42:30:dd:9c:04:97:d5:21:c6:8f:
                    c5:b2:9b:0c:c6:94:f2:22:69:90:02:46:be:09:f8:
                    23:03:67:55:b4:83:c9:24:d4:6c:1b:33:79:40:59:
                    67:72:32:c9:6b:e8:c9:0e:5a:a6:75:26:36:c8:ce:
                    30:37:65:27:28:fa:35:0d:a7:1f:a7:ff:3e:01:b0:
                    7d:85:d6:a8:10:eb:03:da:7a:25:e6:82:ec:6b:bb:
                    b0:65:f4:0b:66:c5:fb:ea:b5:ad:9a:17:41:55:68:
                    5d:99:98:b4:90:42:a1:12:34:7e:e5:0b:a9:64:ed:
                    79:b3:7e:f2:ba:c4:0c:d6:b0:cc:07:c3:78:6e:0d:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A3:DA:25:6D:97:B5:4F:20:D6:30:EE:74:A5:F9:16:F9:A4:1E:D2
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AqPaJW2XtU8g1jDudKX5FvmkHtI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:23:53:21:c7:8f:57:85:2a:62:f5:61:5c:bb:5c:2d:d4:07:
         0c:d8:9f:a8:95:5b:bf:da:53:4d:b0:a0:c2:c0:b7:cd:4b:c0:
         8e:6f:89:8d:f4:f9:c5:fe:85:23:7c:41:d4:f0:d9:19:ec:c6:
         8d:df:5c:d1:9d:95:00:f1:0b:b8:b2:88:68:d2:74:03:a3:9a:
         64:26:e4:53:d2:35:5d:a1:f4:be:e0:7a:e8:ab:0f:f2:16:c4:
         f3:5c:20:7a:1e:5d:bf:5c:23:8d:f6:32:77:1b:94:8e:48:25:
         14:be:ba:5d:69:87:e0:18:35:a2:24:e4:9a:53:89:d3:53:d9:
         ad:cd:40:fd:17:e5:21:80:b7:ac:b6:7d:e1:fd:67:1a:91:cb:
         6f:e8:9c:37:a8:50:97:88:d2:d5:2b:a6:ea:fb:db:94:15:d5:
         52:e1:4d:94:dd:a8:36:ce:0b:47:54:5b:d0:e1:cc:d4:95:49:
         9b:95:43:2a:fb:c5:38:d7:81:00:b5:fc:34:ab:95:a0:19:f5:
         ea:b5:1e:75:36:53:26:3e:03:2b:8b:25:1f:20:b7:b1:fc:da:
         c1:75:07:02:07:94:7a:87:bd:e9:f6:66:ef:bc:d8:85:55:5f:
         bd:c2:87:0d:b0:ff:1e:4c:a0:c5:ef:d2:62:5a:d5:02:e3:35:
         0d:49:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:48 2026 by rpki-client