Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/NGuEbAqCRj9Pum3Xxj4zVLNihCI.roa
File:                     NGuEbAqCRj9Pum3Xxj4zVLNihCI.roa (raw, json)
Hash identifier:          wS8yjTE7ADudcFapztEJsha9EA6WX0vROwupS0mmndI=
Subject key identifier:   34:6B:84:6C:0A:82:46:3F:4F:BA:6D:D7:C6:3E:33:54:B3:62:84:22
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       AC
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NGuEbAqCRj9Pum3Xxj4zVLNihCI.roa
Signing time:             Fri 14 Aug 2026 09:38:55 +0000
ROA not before:           Fri 14 Aug 2026 09:38:55 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:38:55 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=346B846C0A82463F4FBA6DD7C63E3354B3628422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:5d:2e:d4:99:4e:a5:49:07:66:68:2a:a4:
                    50:4d:8f:2b:c1:9c:13:94:9c:ea:dc:37:8f:85:52:
                    a4:75:5a:dc:51:87:03:2c:6d:57:59:47:73:8d:8b:
                    5a:c7:be:49:4e:fb:88:22:e1:dd:36:a7:32:fa:d0:
                    1b:b0:dc:7a:dd:bc:5b:08:a7:3d:94:73:3d:14:2d:
                    e4:dc:32:20:24:28:77:3f:57:ec:43:85:94:8e:93:
                    cf:e0:3e:d9:ad:57:d4:f5:95:27:b6:db:75:4c:e8:
                    22:6f:e8:15:b9:5c:e7:20:63:e4:35:4e:29:74:e5:
                    a9:e2:61:46:fb:50:cf:a7:eb:15:a8:d9:12:6b:ab:
                    e1:55:2b:24:0c:10:4f:cf:13:57:39:70:5c:e8:5f:
                    2c:d5:ce:12:59:e9:78:ed:24:ad:da:d0:07:51:83:
                    88:48:ff:5a:e7:ee:37:b8:58:6a:6b:94:a2:bb:7c:
                    d8:e5:f9:75:67:05:63:9d:30:d1:ea:91:57:69:22:
                    bc:f6:4c:6c:cf:65:3d:31:76:67:73:52:84:30:2a:
                    19:7d:79:87:22:af:a1:b2:67:66:5a:07:46:74:f1:
                    6c:42:4b:da:40:46:6d:a0:6d:51:c0:ba:de:55:23:
                    5e:95:bd:d9:2a:d4:8d:f6:88:a0:35:9b:2c:7e:22:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:84:6C:0A:82:46:3F:4F:BA:6D:D7:C6:3E:33:54:B3:62:84:22
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NGuEbAqCRj9Pum3Xxj4zVLNihCI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:04:d4:e9:f0:82:59:e6:c0:fc:da:4f:71:4e:35:6e:70:9a:
         44:aa:27:81:ba:12:af:a9:fb:bb:2a:2f:06:52:aa:31:e1:ff:
         da:38:70:75:7a:1f:db:7f:b0:da:58:8b:77:75:26:ba:20:1c:
         0c:cd:72:b1:3d:ba:db:f7:aa:3c:47:5d:65:46:6f:8e:f0:f9:
         4f:00:6d:f9:ac:52:97:23:5f:29:de:9c:d3:6b:88:5f:72:8b:
         9f:42:2f:9a:af:cb:78:ac:97:73:78:42:2e:1b:77:3d:1e:cf:
         e0:31:f7:e4:b7:ac:9b:4d:67:96:9e:74:51:94:cc:d5:36:66:
         25:9d:25:73:3c:7f:ee:e1:75:9e:eb:36:1c:77:5f:bc:b0:4b:
         c2:74:70:b6:89:42:d9:78:d6:df:be:b7:49:ee:49:fb:48:36:
         2e:3f:50:f5:a7:ed:94:fa:c4:26:da:98:55:cf:4d:17:f6:21:
         4e:a5:a7:44:9c:d9:82:0d:45:fc:19:65:90:ee:ea:db:3f:b1:
         2e:d7:af:7b:aa:ce:c0:b8:29:3c:e8:33:3d:ff:87:76:0d:5c:
         d3:2a:70:29:4e:da:f6:fe:0a:77:31:22:47:a7:2d:c4:59:8a:
         db:d9:46:2d:36:ce:9d:9c:70:56:7f:42:6e:b1:04:72:7a:46:
         23:9a:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:20 2026 by rpki-client