Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/MC3aXZesvH0g8yK7ktcm3vSqcCw.roa
File:                     MC3aXZesvH0g8yK7ktcm3vSqcCw.roa (raw, json)
Hash identifier:          Ny/5SMdY8E+1fWW1CPQ9pGVWsIClMKsgdapSw7qlNAY=
Subject key identifier:   30:2D:DA:5D:97:AC:BC:7D:20:F3:22:BB:92:D7:26:DE:F4:AA:70:2C
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       C1
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/MC3aXZesvH0g8yK7ktcm3vSqcCw.roa
Signing time:             Thu 24 Sep 2026 00:41:55 +0000
ROA not before:           Thu 24 Sep 2026 00:41:55 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 05:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 24 00:41:55 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=302DDA5D97ACBC7D20F322BB92D726DEF4AA702C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:19:11:f2:8e:7d:24:9d:83:0e:b3:ab:5f:
                    70:01:1c:b3:6d:6e:1c:7c:44:5c:81:30:d0:29:0c:
                    6b:10:b3:22:48:26:11:6b:90:54:46:ec:c9:9f:f8:
                    ed:17:a4:07:41:4e:66:14:77:9e:a5:ce:15:57:0c:
                    b9:8f:2a:5d:9d:dc:44:fc:b9:d0:55:61:50:1c:ad:
                    13:38:7b:c5:66:ef:da:a7:1f:fa:d2:ee:46:52:ba:
                    45:1e:5f:2d:29:93:35:23:53:88:9a:8a:e6:d9:f7:
                    2c:f5:19:74:02:bc:fd:93:9e:c7:79:5e:8b:ba:87:
                    65:e9:c8:1b:63:a5:0b:d6:ac:27:59:f7:de:a4:91:
                    0c:ed:fb:5f:c4:d4:5f:a8:9e:a5:78:f3:5f:37:81:
                    27:4e:c1:69:ad:11:85:bf:d1:d6:27:dc:a4:04:6b:
                    ab:e8:d0:57:d9:f5:22:da:96:6d:09:f0:83:c8:de:
                    05:b9:22:72:fa:d7:23:47:8f:85:51:65:25:8a:38:
                    6c:26:a5:3d:80:31:20:9f:70:bc:f3:b5:f4:8f:f7:
                    6f:eb:e7:83:98:2f:e8:ab:15:5a:44:1c:bb:2c:47:
                    44:11:2e:b7:0f:2f:b0:72:26:fa:20:f9:76:4a:b2:
                    34:9a:44:b2:45:ad:a9:92:88:75:27:a6:8d:e5:ea:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2D:DA:5D:97:AC:BC:7D:20:F3:22:BB:92:D7:26:DE:F4:AA:70:2C
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/MC3aXZesvH0g8yK7ktcm3vSqcCw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:96:f3:c9:ab:1a:ec:c4:76:7e:b9:53:30:32:51:0d:f7:f0:
         e6:57:f3:88:00:cb:18:47:78:37:df:8f:d8:69:86:2e:09:dc:
         fc:21:32:92:b9:f2:18:8f:74:1d:b6:e8:44:47:5f:8f:65:66:
         8a:7b:97:64:37:39:4a:e7:93:a5:e0:90:20:28:99:b7:7e:9f:
         df:51:21:97:7b:79:04:ce:78:23:18:72:5f:9b:cb:b6:95:72:
         00:2a:ad:10:9d:96:eb:f3:f1:14:1c:f3:16:72:2b:38:3b:f7:
         04:04:03:44:de:25:39:7a:60:99:45:10:01:81:67:2e:0c:55:
         7c:7b:8f:cd:5a:91:57:6c:0b:6f:82:5b:89:96:44:a9:b7:83:
         ba:17:c3:67:8d:fb:d6:ff:32:42:4e:b5:e7:3a:b6:e6:49:a1:
         4b:e4:80:6d:26:f3:1f:24:95:6c:fb:bd:55:b3:2d:53:84:53:
         b4:6d:3d:93:ec:a8:a3:d7:72:46:7c:56:50:8c:7f:1d:c9:49:
         06:f1:10:6c:1d:68:d7:85:7c:cf:c3:35:5d:96:db:dc:c7:94:
         03:46:85:5a:8b:8f:93:6f:1d:42:b8:08:47:2f:ab:0c:97:0d:
         7f:de:40:9b:8e:67:97:5f:d8:0d:a5:6e:a1:6c:9c:be:da:09:
         8e:ec:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:45 2026 by rpki-client