Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/G-IPrEQIOJFJO0oGeFNMGgabZGI.roa
File:                     G-IPrEQIOJFJO0oGeFNMGgabZGI.roa (raw, json)
Hash identifier:          Pb+D1c0UbVYX/3+E89L8gfmW3KMZ0JHc0sUCSglRMXs=
Subject key identifier:   1B:E2:0F:AC:44:08:38:91:49:3B:4A:06:78:53:4C:1A:06:9B:64:62
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       C3
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/G-IPrEQIOJFJO0oGeFNMGgabZGI.roa
Signing time:             Thu 24 Sep 2026 00:41:56 +0000
ROA not before:           Thu 24 Sep 2026 00:41:56 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 24 00:41:56 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=1BE20FAC44083891493B4A0678534C1A069B6462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:c5:ce:73:1c:ad:49:c4:10:7c:76:68:f5:
                    79:ec:0c:1c:47:65:af:6a:e1:e3:39:9c:46:3a:f4:
                    54:d4:20:60:1d:0a:96:56:f5:ec:5b:02:38:6d:46:
                    79:cc:2f:a6:24:e6:07:6b:02:0b:1b:0e:b3:22:50:
                    39:07:d1:2d:e3:53:38:0b:c8:8e:38:c2:02:12:d7:
                    ff:2d:86:ee:a5:28:71:f2:b2:08:87:f7:8f:04:57:
                    af:04:bd:d0:cb:cb:eb:ec:0a:d4:d6:2b:3c:31:f1:
                    47:a1:4b:32:c9:bb:ca:34:57:19:fa:f4:1a:f6:76:
                    29:44:67:28:e4:dc:ec:b6:bb:27:da:24:9f:5c:47:
                    e0:1f:01:6b:89:23:2a:73:36:80:e8:ca:1f:ee:62:
                    e1:47:6c:80:f8:9f:77:89:44:17:6a:22:09:bb:43:
                    da:4e:c4:34:3d:8b:e9:8c:14:d6:d9:27:0e:fc:08:
                    12:3c:47:1c:88:45:e0:c7:43:7d:55:f0:f3:f3:b9:
                    e4:5d:f2:08:74:9a:4c:c2:13:7a:b9:22:11:bf:27:
                    e8:6b:58:5d:d3:0c:42:5c:88:f2:20:f7:d6:71:ed:
                    30:d5:85:cf:f6:ef:8b:3e:47:9c:ae:51:d4:60:e3:
                    02:be:c7:45:a6:e6:8c:b1:99:b9:9b:31:20:cb:5d:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E2:0F:AC:44:08:38:91:49:3B:4A:06:78:53:4C:1A:06:9B:64:62
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/G-IPrEQIOJFJO0oGeFNMGgabZGI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:e5:ce:2c:4a:cf:7d:1b:f1:27:76:24:0e:a3:3a:00:91:
         a0:e9:94:72:9c:2c:23:fa:da:9c:01:fe:33:07:88:7f:52:c2:
         ef:02:1a:0f:8a:70:23:34:0f:17:70:a8:8a:91:e7:6c:00:a8:
         56:05:43:6d:84:84:6f:88:53:53:4a:f6:fb:da:a4:85:8e:be:
         3c:13:fa:81:52:df:a4:88:26:ee:2b:18:2e:f5:18:93:f5:f8:
         83:15:c3:9e:f5:17:e5:20:a8:ad:21:21:0d:fc:41:0c:a5:e4:
         67:b8:5b:52:00:c5:40:26:a6:aa:76:b0:cf:04:68:17:5e:4a:
         cd:24:cf:91:61:d0:ca:ce:42:2b:e4:86:77:e8:31:a6:ba:b0:
         43:8d:01:26:90:8d:c4:c8:d1:af:fa:dc:6f:b5:90:dd:d3:dc:
         f9:81:36:d0:16:3b:4d:77:78:12:f9:07:e1:92:5b:54:23:3b:
         09:6e:e1:a3:36:72:a1:a7:2a:3b:7d:10:4d:dd:55:69:9b:b7:
         b7:88:84:74:2b:45:fa:3f:5e:0a:a2:77:a7:07:b1:07:c8:5e:
         a8:4e:d7:ba:98:7b:1e:96:b4:b2:30:cf:c9:c8:c3:d5:6c:5c:
         aa:7f:98:8d:d0:45:cc:2d:8d:99:26:1c:4b:be:d8:4c:4a:08:
         b1:56:0c:f1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjQw
MDQxNTZaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFCRTIwRkFDNDQwODM4
OTE0OTNCNEEwNjc4NTM0QzFBMDY5QjY0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr9cXOcxytScQQfHZo9XnsDBxHZa9q4eM5nEY69FTUIGAdCpZW
9exbAjhtRnnML6Yk5gdrAgsbDrMiUDkH0S3jUzgLyI44wgIS1/8thu6lKHHysgiH
948EV68EvdDLy+vsCtTWKzwx8UehSzLJu8o0Vxn69Br2dilEZyjk3Oy2uyfaJJ9c
R+AfAWuJIypzNoDoyh/uYuFHbID4n3eJRBdqIgm7Q9pOxDQ9i+mMFNbZJw78CBI8
RxyIReDHQ31V8PPzueRd8gh0mkzCE3q5IhG/J+hrWF3TDEJciPIg99Zx7TDVhc/2
74s+R5yuUdRg4wK+x0Wm5oyxmbmbMSDLXT9FAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUG+IPrEQIOJFJO0oGeFNMGgabZGIwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL0ctSVByRVFJT0pGSk8wb0dlRk5NR2dhYlpHSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFnRQwDQYJKoZIhvcNAQELBQADggEB
AFcK5c4sSs99G/EndiQOozoAkaDplHKcLCP62pwB/jMHiH9Swu8CGg+KcCM0Dxdw
qIqR52wAqFYFQ22EhG+IU1NK9vvapIWOvjwT+oFS36SIJu4rGC71GJP1+IMVw571
F+UgqK0hIQ38QQyl5Ge4W1IAxUAmpqp2sM8EaBdeSs0kz5Fh0MrOQivkhnfoMaa6
sEONASaQjcTI0a/63G+1kN3T3PmBNtAWO013eBL5B+GSW1QjOwlu4aM2cqGnKjt9
EE3dVWmbt7eIhHQrRfo/Xgqid6cHsQfIXqhO17qYex6WtLIwz8nIw9VsXKp/mI3Q
RcwtjZkmHEu+2ExKCLFWDPE=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:29 2026 by rpki-client