Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/iWFQU0syFY7mcSPjCEu678LTNYI.roa
File:                     iWFQU0syFY7mcSPjCEu678LTNYI.roa (raw, json)
Hash identifier:          TJWPhQDz3lAxjAkKkN/owPDACDhH71c2nqCf4y7eBgk=
Subject key identifier:   89:61:50:53:4B:32:15:8E:E6:71:23:E3:08:4B:BA:EF:C2:D3:35:82
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       AB
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/iWFQU0syFY7mcSPjCEu678LTNYI.roa
Signing time:             Fri 14 Aug 2026 09:38:55 +0000
ROA not before:           Fri 14 Aug 2026 09:38:55 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:38:55 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=896150534B32158EE67123E3084BBAEFC2D33582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:0e:db:b5:9d:ce:54:4c:77:ad:de:c1:d8:
                    fd:25:d3:98:98:7d:ea:1b:21:43:65:e2:4d:e3:d7:
                    50:4e:c4:53:ad:91:c6:be:f1:3f:bb:e1:c7:9c:1a:
                    0f:4b:52:92:db:77:a7:3c:8d:e9:e8:cf:9a:2a:9b:
                    0d:7f:0c:73:b4:67:77:89:af:15:3f:39:57:9e:36:
                    27:4c:7d:82:9e:d8:23:57:64:41:81:34:e7:a0:6b:
                    26:c1:6b:03:c4:b5:9a:42:2b:2e:8d:8b:4b:10:da:
                    02:92:a0:1c:4e:44:51:be:3f:db:80:41:95:e8:88:
                    6d:7a:bd:a8:10:c8:3d:0b:e9:19:a6:50:e7:74:20:
                    ee:15:d3:61:70:7c:00:38:71:01:76:a5:ae:59:5f:
                    26:77:1f:55:0d:3a:e0:dd:08:6a:04:30:3c:ed:a0:
                    4e:2c:60:4a:c8:3f:fe:3f:46:cd:e8:62:4e:c2:9a:
                    88:96:80:41:b4:31:dd:5d:71:59:9f:56:2a:c3:ec:
                    72:81:98:cd:9a:17:c1:d9:ae:8f:1a:84:8a:2b:df:
                    fd:fb:98:c1:7c:bc:e1:54:a7:6b:79:67:c9:78:3e:
                    39:06:fd:2b:67:26:e0:23:71:5d:6c:19:0f:42:e4:
                    fc:15:ed:e8:53:29:b8:1c:c7:42:a1:f3:51:af:07:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:50:53:4B:32:15:8E:E6:71:23:E3:08:4B:BA:EF:C2:D3:35:82
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/iWFQU0syFY7mcSPjCEu678LTNYI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:4b:00:06:f9:65:d6:94:80:8f:9d:9e:e6:e2:c7:67:84:3d:
         a9:1a:23:ff:d4:dd:d7:68:60:b7:3b:be:de:f0:58:2f:33:f1:
         25:cd:f7:b1:c5:c1:38:ea:5f:66:d6:a6:88:76:57:f2:9d:65:
         bf:41:1c:bf:5e:46:9f:c0:c8:3f:70:f3:45:9f:f1:09:df:ae:
         c2:a5:aa:20:41:f6:d4:e1:bc:b7:9d:5e:80:2d:85:13:e1:ac:
         aa:bc:dc:e9:fb:ba:93:0f:f1:cd:53:5f:80:60:b2:63:b1:de:
         2d:5b:89:5a:5e:66:2c:d6:a9:ff:43:f9:a8:f2:ed:38:be:4b:
         81:8b:f1:cb:d9:52:11:0e:80:62:fa:c6:b1:f3:23:67:a0:50:
         52:02:a1:2a:7a:3b:4f:2e:d2:aa:d4:8e:bc:41:34:9b:6d:79:
         a1:d8:e1:51:8b:ba:00:f9:d8:bd:8f:5c:40:35:ac:c7:10:17:
         a3:b1:e9:cf:7b:21:50:53:3e:cb:88:c9:e1:2d:f0:f1:e5:c1:
         a8:9a:fb:fa:d3:5f:5e:72:f3:9f:76:5a:a3:d6:4e:0c:39:5f:
         8d:eb:7a:e2:c3:da:11:24:a1:1c:97:6c:30:8d:9e:af:51:39:
         71:3a:f3:c1:37:f8:e9:af:1a:a2:85:42:2d:ab:a8:d7:28:ef:
         fd:44:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:56 2026 by rpki-client