Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/JOx4U2YO3w0Cu82V0Z7_VyKCsSc.roa
File:                     JOx4U2YO3w0Cu82V0Z7_VyKCsSc.roa (raw, json)
Hash identifier:          09LpCjLEsAkT4hQ5faBvUhixOwoewxFZw3doXfXoyZU=
Subject key identifier:   24:EC:78:53:66:0E:DF:0D:02:BB:CD:95:D1:9E:FF:57:22:82:B1:27
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       A9
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/JOx4U2YO3w0Cu82V0Z7_VyKCsSc.roa
Signing time:             Fri 14 Aug 2026 09:34:48 +0000
ROA not before:           Fri 14 Aug 2026 09:34:48 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:34:48 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=24EC7853660EDF0D02BBCD95D19EFF572282B127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:e7:14:a2:e4:32:40:2d:2c:b8:6f:55:f5:
                    08:2f:31:e3:c0:29:db:dc:fd:fb:02:7c:27:14:74:
                    ba:e9:1e:b2:c3:c7:b3:aa:7e:b7:ad:e4:80:ee:2b:
                    2c:6e:75:ae:8a:a3:96:17:1f:82:b1:c7:60:35:c8:
                    b5:57:7c:8e:e1:6c:65:e4:07:ab:48:9e:df:f8:e4:
                    2d:f4:3b:87:64:61:86:31:20:c9:92:0d:39:c0:e7:
                    c5:df:d3:41:24:4e:ff:a1:de:3e:6c:60:d6:02:69:
                    4f:05:1f:81:f5:8c:13:3c:9b:40:5e:99:4a:20:ab:
                    b1:ae:18:c6:b2:6c:5d:1d:f2:82:09:e6:71:ed:67:
                    2f:4f:18:1f:8a:13:e7:21:ac:21:88:66:c5:2b:64:
                    ef:6d:6c:3c:66:c6:c6:f4:e0:4c:86:fe:c7:8c:dd:
                    49:3d:32:76:c3:91:86:f2:c8:47:4e:91:4a:89:42:
                    c7:81:8d:6a:95:07:a4:bb:cb:d7:16:4d:21:2b:24:
                    7d:60:69:a4:54:84:8f:0a:a7:71:62:e8:7e:73:29:
                    72:c5:7a:84:7f:b4:e6:c0:a2:d7:61:be:f6:5b:d8:
                    f6:ab:4c:a1:85:06:89:e1:e2:54:8e:c6:d9:48:ce:
                    d8:47:03:24:2c:df:37:6d:da:a8:08:ca:b8:60:99:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:78:53:66:0E:DF:0D:02:BB:CD:95:D1:9E:FF:57:22:82:B1:27
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/JOx4U2YO3w0Cu82V0Z7_VyKCsSc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f3:97:f2:1a:63:5c:83:e8:c9:4d:e3:d2:15:57:72:77:c1:
         23:b1:6d:83:ae:02:ff:c2:26:d4:cf:9d:33:d4:c2:27:a2:5d:
         e4:ba:7b:4c:34:84:2d:9e:b9:a6:02:ef:93:c5:ec:21:3c:80:
         e6:b3:3a:a3:ed:d6:47:1e:ab:17:a4:ea:2b:99:3a:d5:3b:2b:
         f1:ca:57:46:c2:2b:c6:59:14:d4:87:d1:36:83:74:66:4d:0e:
         1f:2e:a0:89:18:30:94:a4:28:71:f3:b5:e8:68:06:41:fd:12:
         2a:50:4c:cb:21:47:9f:8c:dd:a6:41:45:03:97:ce:36:d9:e0:
         a1:61:e6:84:df:27:d6:7f:e1:8d:77:f3:5e:c1:9c:86:67:50:
         54:6c:7d:7a:49:fd:f0:26:20:cc:c6:5d:7b:85:ef:4c:ff:b2:
         e9:a3:91:9a:7a:a2:04:14:f1:d3:0d:71:a4:2d:b9:d3:d2:ef:
         04:9f:70:3f:7c:44:71:84:f0:92:79:68:c9:d3:eb:8a:92:07:
         3c:ac:ce:d1:72:ab:68:7c:c9:d5:18:dc:bb:11:8f:bb:b2:54:
         57:fa:44:84:53:36:76:7d:5d:56:c5:3e:93:9e:70:de:84:87:
         37:04:7b:bb:61:0d:3b:75:cc:0b:62:66:13:56:62:9f:dd:f4:
         14:85:c8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:56 2026 by rpki-client