Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/IRDD9uCYs4Q97Tq76FBhVuhFKwo.roa
File:                     IRDD9uCYs4Q97Tq76FBhVuhFKwo.roa (raw, json)
Hash identifier:          7KOHrrF3sFZV7IHXR0vqXFa2Vv5FugIwL9jUArSZJAE=
Subject key identifier:   21:10:C3:F6:E0:98:B3:84:3D:ED:3A:BB:E8:50:61:56:E8:45:2B:0A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       77
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/IRDD9uCYs4Q97Tq76FBhVuhFKwo.roa
Signing time:             Fri 14 Aug 2026 09:00:54 +0000
ROA not before:           Fri 14 Aug 2026 09:00:54 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:00:54 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=2110C3F6E098B3843DED3ABBE8506156E8452B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:c3:36:b6:c0:2e:d3:4c:e7:10:23:83:f7:
                    6e:0b:d9:99:ae:84:34:ee:0a:69:be:3e:55:46:bd:
                    02:8e:2f:a5:0e:a5:31:c8:23:8d:15:2c:05:5e:51:
                    ba:90:95:6f:a6:ca:52:9c:8a:4d:eb:83:31:77:bc:
                    16:ec:a7:88:94:6f:5c:84:da:76:cf:26:6d:a5:78:
                    24:71:ba:b7:41:ab:78:a0:55:23:52:e2:92:a4:eb:
                    e6:15:c5:1d:04:38:ef:a5:a4:29:ee:9b:c4:e9:c1:
                    27:f4:9b:a5:9b:52:e3:cd:e4:8d:64:db:eb:2b:95:
                    8f:60:0f:7e:d0:b2:f0:e6:33:38:4b:dc:83:57:8b:
                    1e:9c:71:e6:f3:b8:3b:f7:4b:b2:94:70:bb:f8:28:
                    0e:54:0e:7b:3e:3f:71:77:48:78:85:28:6b:a6:ce:
                    a9:46:0f:21:e8:6d:26:bb:8b:e3:69:93:d6:4e:6e:
                    9e:f9:b2:d1:69:11:48:00:e2:a1:52:8d:bd:1c:39:
                    09:3a:0a:39:8f:4b:7b:d1:8f:5a:b0:dd:ce:96:9f:
                    2b:57:d6:06:16:1a:3c:10:e2:f6:c5:d4:c6:61:e6:
                    29:b7:d3:65:62:27:c4:d4:d7:47:48:e3:f0:ed:c9:
                    26:b9:99:dc:c8:c0:de:77:17:96:3f:2d:e8:e3:58:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:10:C3:F6:E0:98:B3:84:3D:ED:3A:BB:E8:50:61:56:E8:45:2B:0A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/IRDD9uCYs4Q97Tq76FBhVuhFKwo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:5f:81:c9:80:6f:56:c5:87:eb:99:46:ce:81:08:e5:9e:
         0a:29:d2:84:e0:51:a5:58:d5:ed:49:4a:ff:a4:30:c0:b6:e8:
         4f:95:6e:2f:f3:ea:df:cc:82:4c:1c:80:dd:ec:57:8f:57:9f:
         a0:5f:76:d9:a9:d1:d2:8b:58:27:0e:73:bd:dc:b2:cc:27:03:
         1d:75:c6:60:31:20:b0:26:d7:cd:de:58:56:c2:87:c9:ba:a7:
         83:7c:b6:ac:dd:96:c0:99:c0:25:e8:26:9c:f9:02:ac:73:c8:
         cc:f4:8f:29:f1:b7:e9:6a:7d:b4:0f:5f:80:09:da:3b:31:a6:
         1e:eb:a7:fc:87:4f:39:7b:df:1f:0a:4b:4e:4d:bd:77:e2:78:
         92:32:e3:61:95:a5:4a:bb:9a:75:9a:2c:ee:3b:a0:da:5c:b3:
         46:11:ae:2a:29:83:d7:09:bb:71:b3:4f:7e:ff:6e:20:81:f5:
         c1:43:f4:72:1f:26:6d:71:73:ab:98:23:80:17:6d:41:88:11:
         ee:a0:9c:23:21:d2:a9:87:6a:2e:f1:94:62:04:26:21:1e:6c:
         1b:be:6e:52:cd:06:6f:fd:af:62:d9:11:36:96:48:08:4e:89:
         5c:1e:ca:a3:9f:36:ef:e8:57:e6:1e:cb:8a:5a:12:42:59:80:
         95:9b:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:55 2026 by rpki-client