Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa
File:                     WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa (raw, json)
Hash identifier:          4alNY303rN3g37PhAZIr/l0yPFEnGoDIOeLN2+C0H4w=
Subject key identifier:   5A:04:4C:3A:14:58:B5:B0:5A:14:6F:56:38:7A:47:7E:E5:C8:79:7E
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       B3
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa
Signing time:             Wed 19 Aug 2026 08:01:09 +0000
ROA not before:           Wed 19 Aug 2026 08:01:09 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 19 08:01:09 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=5A044C3A1458B5B05A146F56387A477EE5C8797E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:e8:01:ff:39:7c:58:8d:c8:f6:b3:d8:66:
                    0a:ba:aa:62:b7:35:ff:75:17:b1:fd:6d:de:ca:a6:
                    61:39:66:c4:02:f9:f8:e9:58:74:49:65:41:9f:ba:
                    e6:42:23:ce:04:20:ba:ad:fd:4c:be:66:68:3d:96:
                    fb:63:62:5e:5d:df:b5:15:a0:dd:ea:c4:bc:96:c7:
                    72:51:7d:eb:16:c2:87:98:2e:52:d6:91:5c:6a:71:
                    c7:d3:53:d1:8b:9a:4b:e0:06:a7:90:a6:b5:86:2e:
                    23:d5:6d:ca:73:2c:53:95:70:b2:6a:cc:dc:b0:c2:
                    da:10:37:25:7a:16:6e:30:4f:95:d5:f4:98:18:fa:
                    45:19:38:db:63:cc:cb:04:4e:80:05:bf:07:33:e6:
                    39:b8:ff:f2:93:6a:35:e8:da:88:dd:fd:17:e5:5b:
                    a4:d4:f0:0c:58:a4:72:dc:fd:27:57:f8:1a:bc:95:
                    60:b4:69:be:53:d3:6d:3f:49:49:c4:4e:bb:a0:9b:
                    8a:83:f7:0c:01:72:ef:af:c6:51:1b:53:d4:bb:68:
                    52:45:55:61:99:16:10:ff:49:2b:b3:b2:99:d4:2e:
                    05:c4:23:c7:c1:1e:f0:ed:41:83:3e:56:ef:3f:62:
                    f8:d3:e3:ff:23:90:2f:96:b0:28:2b:24:83:4c:cf:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:4C:3A:14:58:B5:B0:5A:14:6F:56:38:7A:47:7E:E5:C8:79:7E
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:43:ef:65:5d:2f:3e:03:2a:2a:8b:c4:63:ae:fb:f7:28:36:
         0d:f8:4b:61:3a:a6:61:10:a5:6e:52:e5:47:db:b2:2e:55:84:
         9c:08:ef:17:ae:d7:60:a4:2d:e4:97:14:13:12:7f:d8:94:18:
         2e:28:d1:54:74:da:9e:cf:94:3c:97:d7:4e:71:4a:56:47:53:
         a3:7e:da:95:d4:c4:f7:e8:a2:13:ed:90:40:53:a9:8c:83:89:
         c6:23:4d:c2:1c:0f:b3:88:24:df:ac:6f:ed:96:78:ba:1e:74:
         6c:aa:22:20:47:1d:93:86:ec:d9:97:59:4d:16:a8:ce:26:c2:
         46:60:21:37:c0:15:d6:84:3c:fa:0a:aa:3e:75:88:75:3c:92:
         99:1b:fc:cf:78:b3:98:3c:3a:b7:3c:10:ba:a6:0a:a2:2f:9c:
         4b:67:8c:65:cb:65:4a:89:71:c7:e0:ee:a6:58:db:3e:27:d3:
         a4:e1:31:8d:d4:3d:52:e0:3b:d2:01:36:3e:5c:8f:d4:2e:e2:
         01:4a:87:39:5d:7b:b5:ad:05:55:a5:ea:db:63:b7:e7:ab:fb:
         47:db:9e:cc:af:36:58:5b:29:74:d7:7b:d0:47:95:e7:a3:2d:
         4c:3c:4e:c6:f5:4e:69:09:61:bd:94:6e:90:c2:dc:9e:73:df:
         d8:eb:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:16 2026 by rpki-client