Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/RbpUuACljEjs_qkfNfLsj5W2Yx0.roa
File:                     RbpUuACljEjs_qkfNfLsj5W2Yx0.roa (raw, json)
Hash identifier:          RI7hqnerUvFCb2MIWrWmXc4VT1tiQ5Yq+b+afqxQSDc=
Subject key identifier:   45:BA:54:B8:00:A5:8C:48:EC:FE:A9:1F:35:F2:EC:8F:95:B6:63:1D
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       A4
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/RbpUuACljEjs_qkfNfLsj5W2Yx0.roa
Signing time:             Fri 14 Aug 2026 09:34:46 +0000
ROA not before:           Fri 14 Aug 2026 09:34:46 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:34:46 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=45BA54B800A58C48ECFEA91F35F2EC8F95B6631D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:84:c7:bc:54:7d:a1:fc:ae:d9:32:d9:7f:
                    85:db:51:c3:c5:bd:68:49:57:ce:f7:2a:04:fa:eb:
                    e4:f0:e3:51:e9:19:ac:7e:c2:41:cc:4e:10:e6:d1:
                    d2:e5:07:09:6f:87:4d:f0:96:cf:f2:8d:57:ba:01:
                    a1:59:0f:54:7d:43:a3:c6:40:a5:cd:ab:cf:78:b0:
                    30:ee:db:42:a1:ec:30:fb:76:e3:cf:d8:a1:18:e5:
                    15:77:70:77:7a:77:76:44:50:88:3d:88:02:76:93:
                    74:a2:ca:17:fa:82:60:db:3b:a4:7f:03:1c:d3:2b:
                    a6:90:0d:77:2f:a4:3e:92:b6:68:34:9b:5b:a4:79:
                    5a:89:fd:6a:01:aa:bb:88:73:ca:2a:64:d1:17:60:
                    f6:dd:b5:c9:6f:e9:a5:76:bd:04:d6:10:32:89:26:
                    ba:c2:5b:e4:6a:50:a2:77:76:9a:cf:c5:57:fb:cf:
                    4a:8f:6e:53:49:4f:de:30:ca:84:4d:8c:a9:eb:46:
                    ee:77:30:94:db:cd:15:a1:81:b9:79:e2:cf:a5:21:
                    6c:f9:5f:ab:f6:b0:9b:cd:f6:d4:e7:73:50:b3:f2:
                    83:5a:c3:e1:f8:01:11:c3:d4:dc:5f:60:c4:bd:e2:
                    3f:7c:1d:67:2f:b7:10:f1:77:05:3d:e2:f4:b5:ba:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:54:B8:00:A5:8C:48:EC:FE:A9:1F:35:F2:EC:8F:95:B6:63:1D
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/RbpUuACljEjs_qkfNfLsj5W2Yx0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:44:08:01:61:93:c1:a2:89:48:e4:d8:5b:18:f2:29:ae:98:
         02:49:e4:0f:89:af:ab:4f:c2:89:36:9f:11:7e:88:da:c0:90:
         58:9f:43:2e:09:69:12:24:11:d5:00:47:b7:12:68:8f:0b:ed:
         16:db:f8:4f:bd:67:1c:fc:0e:59:49:d6:23:63:7d:4f:e2:af:
         f0:9d:1e:b5:d6:68:ba:16:24:41:5d:b3:85:fd:0b:1c:72:5c:
         db:29:5d:b4:c9:93:51:a4:af:bb:83:e3:a4:5d:a9:6f:1f:d1:
         a5:29:b3:45:fb:84:23:1b:ad:8d:13:32:ed:f8:26:da:14:44:
         82:45:99:97:dd:84:90:6e:46:11:33:d5:1f:10:72:d5:62:47:
         9e:42:34:d8:bb:81:e0:f7:83:0d:22:fe:78:e5:16:a7:1f:8e:
         78:a2:c2:2f:19:93:41:7d:e7:d4:52:62:b8:2e:1e:2a:4d:10:
         6e:6b:1f:40:44:fd:d8:22:50:8b:23:b9:66:4b:1c:af:42:34:
         68:ed:18:85:d5:b4:68:04:3d:ee:67:6e:16:84:45:2b:3e:29:
         8a:6b:b2:89:5a:3e:5a:ba:19:dd:50:be:9f:ac:31:55:a4:8f:
         62:f3:76:f5:52:2d:99:b3:ed:9f:82:da:1c:34:91:d8:46:4b:
         28:b7:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:09 2026 by rpki-client