Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/J4dLJnV7LJYGEHktnOKSkTicAmM.roa
File:                     J4dLJnV7LJYGEHktnOKSkTicAmM.roa (raw, json)
Hash identifier:          L6bLju1oUCWvkX9G+r1q1aTvjpUn2Zyi5Sk5QgCuj4Y=
Subject key identifier:   27:87:4B:26:75:7B:2C:96:06:10:79:2D:9C:E2:92:91:38:9C:02:63
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       6E
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/J4dLJnV7LJYGEHktnOKSkTicAmM.roa
Signing time:             Fri 14 Aug 2026 08:40:46 +0000
ROA not before:           Fri 14 Aug 2026 08:40:46 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 08:40:46 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=27874B26757B2C960610792D9CE29291389C0263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:9d:8a:95:b7:7d:d8:5f:04:78:56:ea:89:
                    d9:d6:cb:87:53:ef:32:d3:66:9b:12:af:83:12:ff:
                    27:2b:2b:73:c9:ff:65:99:37:d8:ac:08:d6:d1:15:
                    e5:db:d7:26:4d:ad:99:10:09:43:6b:6e:8d:54:f6:
                    f1:47:44:a8:4d:f5:70:20:f7:e9:97:03:89:1f:96:
                    45:be:a7:2b:86:f4:59:65:d2:df:cb:ae:78:03:31:
                    ad:9b:39:29:d5:49:1e:7a:42:05:e1:ea:c8:ce:fd:
                    ee:08:7f:bc:ba:6e:7e:ce:68:ed:47:01:cf:f9:43:
                    3d:4f:ac:c6:7f:3a:14:c9:b4:3c:96:e7:2e:34:b8:
                    6c:1c:7b:18:24:68:c5:ef:eb:ce:24:eb:1a:fb:14:
                    e5:b1:89:51:75:73:5e:b7:a0:94:23:a1:9f:bd:8e:
                    2b:bd:01:8b:92:f4:79:1f:40:af:7e:9d:5c:5c:9b:
                    c7:6f:fd:ec:9a:e0:cb:ed:57:90:5a:59:a6:9a:92:
                    f5:c0:dc:68:c2:1f:74:24:82:90:5f:3b:17:2b:30:
                    13:28:52:ba:c0:91:56:23:2b:4c:46:4e:7a:06:e4:
                    f7:51:cf:e0:cc:88:63:da:02:c8:fb:15:d6:18:e6:
                    2b:9c:8d:5c:e5:9f:97:ad:22:5c:9c:7c:7d:84:cd:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:4B:26:75:7B:2C:96:06:10:79:2D:9C:E2:92:91:38:9C:02:63
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/J4dLJnV7LJYGEHktnOKSkTicAmM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:b8:b0:83:e1:f0:5c:31:d5:d3:97:51:74:83:e3:03:2e:
         25:c3:72:71:10:9a:61:f5:33:cc:11:61:4a:5b:39:69:ce:22:
         92:9a:a0:13:09:04:42:21:28:53:64:c0:52:33:73:ea:b2:09:
         90:b1:7c:87:9d:fc:e2:58:a4:e1:2c:2f:5a:ed:ce:cf:29:64:
         9d:14:e2:c8:84:12:b3:8e:1b:bb:8c:6f:55:cf:f8:a4:7f:72:
         85:ed:24:2a:30:9f:89:83:a1:fa:57:39:ad:e0:af:9c:da:9a:
         a8:d6:b5:f9:15:35:e1:83:c1:87:e3:e6:90:5e:b0:41:92:ce:
         3b:6c:fa:53:0f:ab:92:c5:32:ee:05:78:63:42:74:48:66:a1:
         c8:55:20:1a:4e:ff:f8:49:aa:c6:98:d3:88:4b:9d:25:0c:62:
         84:85:ad:67:72:9a:a6:c9:b8:9a:db:e0:22:47:e6:e1:2e:f8:
         c9:36:9a:80:05:a7:aa:73:af:21:87:21:26:dd:8e:a7:6a:dd:
         4c:9d:19:87:04:c3:6f:6c:d9:5e:a7:cc:bd:d0:2a:80:ea:77:
         89:1f:25:07:ae:b4:66:b7:ab:f0:07:3b:41:64:a7:0c:3a:ec:
         ef:c8:2c:c5:6c:ae:58:89:13:ae:4e:65:d9:5a:d7:41:35:03:
         13:d7:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:44:21 2026 by rpki-client