Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/Uo6l3vRU7p4A2lWw0n2vPQspjeI.roa
File:                     Uo6l3vRU7p4A2lWw0n2vPQspjeI.roa (raw, json)
Hash identifier:          PCzROI8knvWhiUJObCem9TVaddtczaGfVU5RZse0GDY=
Subject key identifier:   52:8E:A5:DE:F4:54:EE:9E:00:DA:55:B0:D2:7D:AF:3D:0B:29:8D:E2
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       D5
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Uo6l3vRU7p4A2lWw0n2vPQspjeI.roa
Signing time:             Mon 28 Sep 2026 06:05:17 +0000
ROA not before:           Mon 28 Sep 2026 06:05:17 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 28 06:05:17 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=528EA5DEF454EE9E00DA55B0D27DAF3D0B298DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:ee:7a:02:9d:d1:8b:a7:47:ad:2e:9c:4f:
                    41:52:94:14:1f:83:90:ba:43:27:9e:3f:bb:1f:c2:
                    f3:c5:d4:ff:c4:71:db:39:82:6b:b6:fa:27:4c:76:
                    30:05:c6:a8:ce:2f:0e:ef:c3:8e:9d:52:d5:11:11:
                    30:8a:9f:3e:9c:f0:7c:a8:9a:d8:60:bf:03:2d:5f:
                    6f:8a:8f:26:e3:a3:55:5a:e2:96:4f:3e:87:fc:34:
                    92:d2:0c:d1:94:38:a0:f9:7b:84:9f:a8:bd:29:93:
                    7a:53:e8:02:4c:75:57:92:a6:cc:df:8e:ae:f9:d7:
                    e4:55:ef:ea:f7:86:96:69:79:ad:80:d9:0c:5a:dc:
                    6f:91:e5:87:5e:84:d5:6c:97:da:f1:32:27:f8:46:
                    c7:57:c6:b0:62:21:c1:fb:41:9f:53:02:97:69:7b:
                    fd:1d:da:27:5d:fc:13:af:dd:d2:5f:cf:b8:98:1a:
                    b9:5e:af:e2:8d:ca:98:74:0c:cb:f5:33:81:fa:85:
                    13:4d:5d:5e:cb:36:a2:d2:c9:5f:83:31:49:ee:cf:
                    e5:c2:4b:f1:85:70:ad:ed:8b:a7:47:1d:fd:65:bf:
                    4d:0d:72:e6:18:9d:75:84:db:90:04:2e:15:5a:23:
                    69:a7:0c:76:d4:7c:71:ed:2e:e4:8b:20:18:df:da:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8E:A5:DE:F4:54:EE:9E:00:DA:55:B0:D2:7D:AF:3D:0B:29:8D:E2
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Uo6l3vRU7p4A2lWw0n2vPQspjeI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:db:82:df:ed:64:4e:a3:d3:d7:6c:32:b0:67:a2:cd:a8:
         4b:0b:f8:13:72:0e:17:0e:a6:f4:a7:36:f8:c0:06:dd:aa:87:
         e5:5d:6d:e1:13:d9:63:f5:a1:12:04:0f:47:4d:2d:8d:b2:09:
         97:0c:34:5b:ec:4d:f7:13:96:15:d8:bb:99:b4:48:7b:d1:95:
         02:8c:c7:a0:82:29:18:09:6d:25:19:07:50:1b:87:1c:b0:a9:
         ad:2f:6f:3e:bb:ba:0b:61:be:ba:e5:df:dd:c9:36:c0:3f:cd:
         d5:7f:d5:a2:a2:ee:64:9f:b6:1c:81:eb:f6:07:34:38:f5:61:
         3f:c9:59:05:d2:d9:cc:14:75:0a:8e:e7:67:07:c5:e2:e4:bb:
         f7:b0:c7:8f:35:1c:e6:38:e2:42:da:04:82:55:8f:1f:20:22:
         34:67:aa:f8:d5:33:e7:6d:62:7a:d4:94:25:41:0a:d6:e3:51:
         40:cd:5b:e4:3d:4a:94:d7:b9:66:f2:28:b1:56:dc:5a:54:02:
         8b:28:f2:ed:94:4a:c1:01:93:12:b7:fa:e1:ae:b3:e6:45:32:
         ba:de:e4:5e:26:ce:1b:5c:a9:61:b3:32:a4:79:b1:a7:96:72:
         5a:31:0c:87:29:94:12:19:a2:59:c6:50:d6:10:77:ba:a5:5c:
         b5:cb:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:08 2026 by rpki-client