Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/NOwovya4v27LfGXFQXgqKW2MT7k.roa
File:                     NOwovya4v27LfGXFQXgqKW2MT7k.roa (raw, json)
Hash identifier:          yd7GPV2VPf6PScW7/kprqQ3Vaaj6TrbcmgagJUpdIPA=
Subject key identifier:   34:EC:28:BF:26:B8:BF:6E:CB:7C:65:C5:41:78:2A:29:6D:8C:4F:B9
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       80
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NOwovya4v27LfGXFQXgqKW2MT7k.roa
Signing time:             Fri 14 Aug 2026 09:09:02 +0000
ROA not before:           Fri 14 Aug 2026 09:09:02 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:09:02 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=34EC28BF26B8BF6ECB7C65C541782A296D8C4FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:93:4d:06:7d:b9:2a:20:94:b9:72:af:41:
                    9f:71:ca:2d:76:e9:c8:80:79:44:46:c2:50:4a:b8:
                    c9:6c:b3:cd:6f:3c:b5:d3:97:3b:88:ed:31:85:05:
                    d4:44:cb:91:87:31:32:f3:ad:22:16:5e:8f:d5:de:
                    16:85:6d:5d:8d:a3:11:7a:11:25:47:1f:bd:8d:27:
                    31:db:b1:68:d7:e1:f3:20:f0:c4:ce:e2:80:00:28:
                    fd:fb:1d:74:5b:94:33:7e:b2:6a:30:dd:1a:1d:6f:
                    e9:b6:4c:14:01:cd:eb:62:88:93:f0:52:4b:eb:7a:
                    ba:60:74:5d:29:ad:25:74:10:84:ac:5e:c6:f3:b9:
                    cc:24:41:fc:90:d3:ff:96:6f:9b:39:fd:9b:1a:fa:
                    5f:5e:21:dd:b6:ad:87:90:2d:9c:14:52:25:f9:6f:
                    2e:af:8a:f7:74:21:58:7f:7e:e3:74:d8:f1:33:36:
                    44:12:ac:49:df:b7:ae:d8:18:3f:b8:fc:b4:77:67:
                    49:a4:9c:cc:f4:f3:69:3e:26:f0:36:bb:d8:b0:24:
                    89:99:c8:ef:9d:0b:46:fd:37:51:fa:d3:47:9a:9a:
                    48:03:cf:06:87:5d:f9:06:70:78:dc:8d:4f:21:12:
                    61:93:dd:c8:51:31:a1:3d:f6:e5:e0:3e:b4:98:fd:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EC:28:BF:26:B8:BF:6E:CB:7C:65:C5:41:78:2A:29:6D:8C:4F:B9
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NOwovya4v27LfGXFQXgqKW2MT7k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:d9:2c:e6:80:f2:78:17:b2:8f:a0:37:f3:24:52:a4:2c:
         75:1b:00:82:31:74:96:07:13:37:57:95:41:cb:89:1b:ed:18:
         e6:d0:82:06:ed:40:8f:75:09:5c:40:fa:9a:44:f3:94:fa:fa:
         6e:df:e8:5a:c9:2d:f6:ea:f2:99:ef:13:3d:61:0d:40:06:36:
         14:4b:ea:6d:20:bb:bd:47:ab:15:aa:0b:1a:17:38:5d:5d:4f:
         df:48:94:b1:cf:25:df:97:21:ff:45:d4:35:74:dc:38:a4:6f:
         92:8d:d6:99:03:e1:69:72:c1:d9:2c:5c:3b:23:ad:34:b3:82:
         5a:40:40:53:e4:65:0f:11:d2:b3:39:41:bc:bb:76:97:49:4a:
         29:6c:6a:86:5d:97:cd:98:3e:c0:f7:06:b8:d9:82:5f:9a:72:
         18:06:63:4c:bd:4f:09:61:85:72:85:85:c4:91:66:63:cf:3d:
         d2:af:36:59:bc:cc:1c:a1:1c:8d:41:e6:c1:85:f8:5b:1c:b6:
         fe:2d:7a:e0:9a:80:11:18:c3:6d:03:1c:5c:13:91:44:54:ed:
         8f:52:4a:62:e4:b4:90:30:73:b0:56:22:17:a6:cf:1c:43:4a:
         f3:bb:6e:9a:14:8d:da:05:c2:53:4f:b4:ef:a7:df:06:b5:f9:
         0f:f3:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:28 2026 by rpki-client