Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/hnCh69n7ilO5f6saMq1zIWFmEVw.roa
File:                     hnCh69n7ilO5f6saMq1zIWFmEVw.roa (raw, json)
Hash identifier:          zwsCrkMS+T3TOv5XsPDIIUzOa5KwMRsLoRD7r9LbVUU=
Subject key identifier:   86:70:A1:EB:D9:FB:8A:53:B9:7F:AB:1A:32:AD:73:21:61:66:11:5C
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       7D
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/hnCh69n7ilO5f6saMq1zIWFmEVw.roa
Signing time:             Fri 14 Aug 2026 09:09:00 +0000
ROA not before:           Fri 14 Aug 2026 09:09:00 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:09:00 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=8670A1EBD9FB8A53B97FAB1A32AD73216166115C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:ba:7f:cc:0f:80:d3:51:2f:1b:c1:32:f0:
                    02:d5:57:5a:08:40:b0:ee:e2:72:c3:71:9b:27:ff:
                    20:c3:a2:4a:a6:6d:53:ce:cd:52:59:54:b6:1b:23:
                    c9:60:90:9f:c4:a7:cd:70:26:18:07:5b:90:80:e6:
                    0c:38:97:c9:e7:ea:63:e8:1d:0c:9b:1d:82:87:f0:
                    b1:1a:aa:4b:97:ed:ed:fc:fc:e6:e2:18:fc:01:36:
                    d9:de:74:c4:0c:4b:ef:b3:88:72:9e:29:47:0f:1f:
                    fd:88:7e:aa:92:fe:de:d1:d0:85:0d:76:89:00:ff:
                    fc:b0:f9:17:c6:9f:f8:c5:71:d7:7f:45:7a:b2:1a:
                    31:24:15:98:fc:fe:6b:5c:b6:3a:b5:57:90:47:c4:
                    57:28:24:ca:e6:16:5f:a8:e6:5e:9d:42:32:4a:e0:
                    69:7e:ad:9a:1f:4a:8a:e5:c3:b9:24:74:7a:1a:61:
                    f6:cb:b0:13:bb:c1:f8:41:bd:b6:79:ad:e0:07:6b:
                    3e:f1:8b:43:47:04:ef:ad:25:d2:dc:d1:93:05:2b:
                    05:f8:0a:73:67:8c:27:ae:a2:d1:5a:7e:4f:28:42:
                    bf:e8:9a:36:65:4b:cb:ec:3b:73:ce:f2:70:7c:22:
                    db:7c:41:16:f7:b0:3e:8e:2f:57:d9:19:1d:b5:47:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:70:A1:EB:D9:FB:8A:53:B9:7F:AB:1A:32:AD:73:21:61:66:11:5C
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/hnCh69n7ilO5f6saMq1zIWFmEVw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a3:68:6e:1e:4b:84:4d:30:31:b5:25:43:e9:5f:3c:6d:19:
         3a:0e:d9:9f:cc:ac:ba:97:b8:1c:d6:b8:5f:11:a9:9f:da:86:
         04:45:7b:44:25:c9:e9:cc:11:d5:2a:9b:c5:03:2d:e4:9f:fe:
         a3:96:90:ec:8d:6b:fd:fb:c8:ce:66:35:47:e5:38:33:bc:64:
         60:9f:9c:67:ee:8d:d2:59:5e:1a:e2:6f:2a:1f:4a:ac:9a:bb:
         d1:44:3b:e5:a2:19:50:51:b8:33:c4:ae:ff:bc:19:8f:30:e8:
         9c:c7:5c:d8:e5:86:ee:6a:d0:91:e0:45:62:88:8a:4b:ea:31:
         e7:d4:12:3a:a3:9a:4f:92:92:1c:b0:19:df:03:0d:bc:a5:44:
         79:90:c0:11:91:7a:fc:b0:fa:a1:f7:b2:7e:99:4f:5e:6d:7e:
         d9:d0:d0:f0:a4:5d:8d:03:6f:41:c4:36:0e:16:fe:a9:4b:93:
         95:8c:b5:33:e2:3a:fd:7e:f2:1f:ba:51:80:35:f7:46:21:bc:
         ec:04:c0:b8:ee:17:e9:da:84:c4:41:40:d9:2b:a6:b2:35:5f:
         7c:61:df:75:2c:90:9e:39:07:de:3c:09:18:f5:52:06:38:05:
         fe:ba:f0:3e:34:ec:87:d0:fa:a2:6d:74:37:8a:37:7f:10:5f:
         06:08:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:54 2026 by rpki-client