Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/Bs0ZJpflWqT8GEpWycqTBYdGwAU.roa
File:                     Bs0ZJpflWqT8GEpWycqTBYdGwAU.roa (raw, json)
Hash identifier:          b+w083ha8RicQl4unXL8M+RXCsGNQKcsaNT28jdJKSo=
Subject key identifier:   06:CD:19:26:97:E5:5A:A4:FC:18:4A:56:C9:CA:93:05:87:46:C0:05
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       A1
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Bs0ZJpflWqT8GEpWycqTBYdGwAU.roa
Signing time:             Fri 14 Aug 2026 09:31:03 +0000
ROA not before:           Fri 14 Aug 2026 09:31:03 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:31:03 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=06CD192697E55AA4FC184A56C9CA93058746C005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:72:ae:12:54:da:4c:72:31:7d:56:98:57:
                    3e:f8:a1:40:03:a2:80:72:7c:8c:a4:00:a0:60:d9:
                    d9:c8:14:43:7d:47:43:9a:3f:15:3d:42:95:0b:e7:
                    2a:d8:0d:7d:1d:a0:9b:00:45:3e:d3:af:51:ba:39:
                    22:3c:b5:94:95:24:9b:99:3f:bd:9c:ae:4b:9b:5c:
                    8a:58:be:e0:4b:65:97:0c:71:66:2d:88:cb:1e:19:
                    01:21:ea:e3:41:b3:60:d6:11:80:e0:a1:77:15:ad:
                    29:86:49:d3:ee:26:f0:98:92:6f:ff:97:31:e4:15:
                    34:60:9c:b7:76:8d:6f:61:19:b0:08:23:08:72:80:
                    82:03:a8:e6:ec:8b:ab:b1:35:03:25:b6:e3:b0:67:
                    6a:1f:29:cb:6f:87:4d:43:14:37:bd:58:b2:c9:82:
                    15:ad:0c:cb:c1:d6:2d:23:27:eb:d2:88:6d:6a:93:
                    e4:fa:6f:90:d3:73:02:97:6c:64:a8:75:94:fc:08:
                    67:cf:f5:b0:07:12:b9:27:5d:e6:e4:ea:ca:b6:ec:
                    9f:c2:e0:39:21:f1:a3:9a:a1:b6:c8:92:e2:03:c0:
                    f8:28:87:2b:7b:73:77:7c:e8:4b:cc:bd:2f:c3:d5:
                    4d:0a:e2:b3:4e:92:ae:96:ac:32:66:5f:e3:1c:c6:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:19:26:97:E5:5A:A4:FC:18:4A:56:C9:CA:93:05:87:46:C0:05
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Bs0ZJpflWqT8GEpWycqTBYdGwAU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:69:66:98:c5:b4:a3:aa:64:22:e0:68:05:85:6f:db:89:
         e9:00:ed:51:f5:5e:54:69:55:0b:39:e7:a1:e6:c4:44:a5:45:
         95:aa:6f:b1:bf:a6:76:85:e9:91:7b:7e:6a:00:a1:3e:4e:bf:
         e2:21:e7:a6:68:45:2f:62:22:42:bf:4a:3c:80:a2:ed:89:2d:
         df:02:c7:f7:37:2a:e8:25:7f:8e:2b:1a:65:38:b1:55:cb:db:
         80:40:82:e2:67:27:dc:e7:a4:a5:27:72:cc:22:51:6b:74:a9:
         14:ee:20:3b:4a:a7:56:42:50:53:c0:fe:f4:79:18:07:cf:31:
         a2:1e:74:bc:d5:f0:cb:d4:f6:15:66:c4:49:38:fd:c7:ce:df:
         9e:9d:7f:a3:70:21:ca:43:e1:c1:c4:21:b9:d3:ef:bc:53:c3:
         58:16:01:17:1e:08:f4:95:47:78:84:ad:35:71:b2:e9:4d:8b:
         be:4e:9a:36:1e:06:49:00:15:d7:c4:ce:1a:60:9c:ac:42:54:
         c8:f4:fc:39:2d:15:4a:a1:05:15:e5:34:cf:bb:f3:1c:e4:50:
         7c:be:e6:d7:63:64:87:a8:83:8d:37:03:f0:7f:89:3d:a7:bb:
         27:4c:c2:f0:a1:85:03:24:2a:ff:fc:f7:9a:7f:be:45:2c:d1:
         f0:40:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:13 2026 by rpki-client