Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/NNrLD9lQflbvMop7Fuh4QFRC9g8.roa
File:                     NNrLD9lQflbvMop7Fuh4QFRC9g8.roa (raw, json)
Hash identifier:          I424yQNJ4r29fKlLjOM1M6nDLkclIwGho9IMwTVdTEY=
Subject key identifier:   34:DA:CB:0F:D9:50:7E:56:EF:32:8A:7B:16:E8:78:40:54:42:F6:0F
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       B6
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NNrLD9lQflbvMop7Fuh4QFRC9g8.roa
Signing time:             Thu 20 Aug 2026 12:53:44 +0000
ROA not before:           Thu 20 Aug 2026 12:53:44 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 20 12:53:44 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=34DACB0FD9507E56EF328A7B16E878405442F60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:e7:88:ff:72:22:52:79:35:bb:2d:2f:72:
                    2c:ea:83:d6:95:21:4f:78:67:3b:e3:56:82:75:26:
                    8d:cb:99:08:ae:b6:0c:0b:1a:b9:37:9c:23:ce:0e:
                    1d:2b:b7:67:f8:7d:17:23:b6:73:3c:4c:70:c7:6b:
                    74:96:b2:7f:19:e4:59:2c:c4:44:8f:0e:c0:ab:4a:
                    97:ae:59:82:7a:b0:42:ed:2d:34:9e:c6:9c:0b:92:
                    6e:fe:c9:8c:c2:a1:30:b4:81:a7:bc:ce:a0:69:9b:
                    6c:1a:73:3f:04:d7:02:5c:e9:64:64:53:9c:33:fe:
                    61:8d:65:95:08:c7:92:60:00:73:ff:25:23:b8:0a:
                    c2:fe:ac:b6:d8:19:f7:06:0f:db:7f:58:67:71:e2:
                    52:6f:96:e8:eb:cf:b8:60:5e:be:31:9c:7b:30:89:
                    75:10:36:54:97:7c:74:83:c0:3d:d2:75:1f:c7:df:
                    84:e9:57:15:2e:10:b6:6c:47:cc:57:f5:13:be:e0:
                    43:4f:7a:ef:1e:d1:4b:0b:70:4b:c5:aa:de:4a:ab:
                    53:f8:95:47:72:b9:26:c0:b7:54:fe:0a:ff:8c:e4:
                    e7:3f:51:5c:23:95:2c:dc:d1:05:78:8a:90:b9:34:
                    55:dc:a4:3f:16:33:b2:26:9e:02:b7:c5:6b:8f:ed:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:CB:0F:D9:50:7E:56:EF:32:8A:7B:16:E8:78:40:54:42:F6:0F
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NNrLD9lQflbvMop7Fuh4QFRC9g8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:8d:54:80:3a:30:6b:d5:d6:3d:f4:84:19:a2:35:8d:f6:
         99:aa:6a:11:1c:3b:3a:07:64:74:8f:9c:48:a8:d8:0a:ef:9c:
         cf:dd:2d:f8:5d:01:6d:08:13:22:13:f3:68:33:d1:3f:c8:f9:
         6b:60:0f:9d:e1:ea:97:f1:94:7c:2b:55:05:ea:c0:dc:f7:d2:
         bb:c4:40:8d:14:50:a4:f5:60:bf:c3:a4:fa:fb:08:68:93:e2:
         91:c8:41:92:e2:87:d0:d4:ef:97:48:37:a4:82:6d:70:69:ab:
         7a:00:11:0a:d4:25:6d:0f:25:d1:69:46:a6:85:3d:41:99:14:
         3e:92:65:da:37:00:ce:aa:64:6a:7a:db:a6:c8:81:67:00:1c:
         b2:cb:ff:7d:c1:6e:9f:b3:56:36:19:06:f7:0b:e4:b5:a5:f1:
         7e:8e:8c:2c:90:5f:c6:ee:9b:84:83:e0:32:54:90:70:9b:b1:
         a7:96:df:46:d4:c3:db:e7:94:67:8d:a3:b8:66:a7:65:77:82:
         c5:9d:24:25:df:47:08:00:6d:53:f2:ea:11:26:33:a3:6b:df:
         aa:b3:a5:71:dd:18:c2:56:4e:71:7a:f5:2d:b2:84:aa:5d:c9:
         c1:e0:2f:d7:b7:f0:a2:7a:bd:69:9b:9d:b1:72:ed:7a:a7:dd:
         6c:8c:74:75
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICALYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MjAx
MjUzNDRaFw0yNzA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0REFDQjBGRDk1MDdF
NTZFRjMyOEE3QjE2RTg3ODQwNTQ0MkY2MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6E+eI/3IiUnk1uy0vcizqg9aVIU94ZzvjVoJ1Jo3LmQiutgwL
Grk3nCPODh0rt2f4fRcjtnM8THDHa3SWsn8Z5FksxESPDsCrSpeuWYJ6sELtLTSe
xpwLkm7+yYzCoTC0gae8zqBpm2wacz8E1wJc6WRkU5wz/mGNZZUIx5JgAHP/JSO4
CsL+rLbYGfcGD9t/WGdx4lJvlujrz7hgXr4xnHswiXUQNlSXfHSDwD3SdR/H34Tp
VxUuELZsR8xX9RO+4ENPeu8e0UsLcEvFqt5Kq1P4lUdyuSbAt1T+Cv+M5Oc/UVwj
lSzc0QV4ipC5NFXcpD8WM7ImngK3xWuP7bR5AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUNNrLD9lQflbvMop7Fuh4QFRC9g8wHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL05OckxEOWxRZmxidk1vcDdGdWg0UUZSQzlnOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASFnVAwDQYJKoZIhvcNAQELBQADggEB
ADu2jVSAOjBr1dY99IQZojWN9pmqahEcOzoHZHSPnEio2ArvnM/dLfhdAW0IEyIT
82gz0T/I+WtgD53h6pfxlHwrVQXqwNz30rvEQI0UUKT1YL/DpPr7CGiT4pHIQZLi
h9DU75dIN6SCbXBpq3oAEQrUJW0PJdFpRqaFPUGZFD6SZdo3AM6qZGp626bIgWcA
HLLL/33Bbp+zVjYZBvcL5LWl8X6OjCyQX8bum4SD4DJUkHCbsaeW30bUw9vnlGeN
o7hmp2V3gsWdJCXfRwgAbVPy6hEmM6Nr36qzpXHdGMJWTnF69S2yhKpdycHgL9e3
8KJ6vWmbnbFy7Xqn3WyMdHU=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client