Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/jnG0rEPDMOE3tJl7Q1x3fmkfOtk.roa
File:                     jnG0rEPDMOE3tJl7Q1x3fmkfOtk.roa (raw, json)
Hash identifier:          Z3IxHFXPjo+SJyjOeksWYQbnRGlnehKL9P0twwHXt5U=
Subject key identifier:   8E:71:B4:AC:43:C3:30:E1:37:B4:99:7B:43:5C:77:7E:69:1F:3A:D9
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       73
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jnG0rEPDMOE3tJl7Q1x3fmkfOtk.roa
Signing time:             Fri 14 Aug 2026 08:44:59 +0000
ROA not before:           Fri 14 Aug 2026 08:44:59 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 08:44:59 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=8E71B4AC43C330E137B4997B435C777E691F3AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:dc:da:a7:28:b7:8a:62:6a:74:9b:56:f9:
                    8b:04:fb:32:78:3d:01:89:9c:9e:3b:d7:26:aa:34:
                    b7:bd:43:cc:79:7b:c5:05:ac:a4:11:b6:6f:ee:96:
                    df:88:87:95:0d:cc:15:a5:06:ec:eb:78:01:18:0f:
                    3f:f4:56:41:20:5f:c4:07:63:02:3e:90:80:37:47:
                    33:df:5f:37:60:f5:1d:34:cb:81:24:5c:9b:ac:57:
                    d8:15:74:c1:22:f4:d8:13:ef:90:8c:c4:f2:f2:cf:
                    9a:5b:71:06:0a:60:66:c8:7b:6f:49:50:90:eb:d3:
                    d0:b2:f3:30:57:31:45:89:fb:a6:07:c1:54:9a:9f:
                    86:e9:8c:dc:5a:c7:db:7f:b7:7d:dc:7e:b0:44:57:
                    b2:bb:00:16:55:92:65:60:4c:62:c7:7a:09:e3:f0:
                    1c:de:a4:b5:95:1e:cb:ce:a8:14:f5:36:6e:d5:17:
                    94:55:c2:08:07:ac:56:ba:e3:3a:98:a7:05:25:82:
                    ec:f2:c9:14:2e:3e:b7:c6:08:b1:53:9e:90:78:6e:
                    f8:5b:1d:9d:55:13:ab:1a:c9:1b:c7:c9:0b:e2:19:
                    ba:c5:67:b7:38:8f:58:c1:0d:e6:ce:12:7d:88:9e:
                    5e:15:09:5a:30:76:37:f0:2b:3a:b2:b3:a9:0a:e4:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:B4:AC:43:C3:30:E1:37:B4:99:7B:43:5C:77:7E:69:1F:3A:D9
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jnG0rEPDMOE3tJl7Q1x3fmkfOtk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:7f:8e:80:73:1e:78:06:3d:97:92:8b:39:52:8d:46:2b:
         66:c4:c0:dd:d2:05:ae:6b:32:2d:4a:59:b5:97:5b:f7:e6:a1:
         99:16:58:bd:71:4d:04:18:49:e8:e9:2c:30:82:52:f0:b8:26:
         8f:12:87:63:77:3c:29:ba:10:6f:3f:df:93:f2:f9:43:a9:b8:
         61:02:e8:18:98:3c:a9:11:a6:bb:fb:5d:08:e5:24:5c:02:b9:
         7a:4e:e2:57:a4:0e:c9:2e:69:f7:0b:11:d3:3b:cf:e5:bd:de:
         2f:bd:a1:7b:e3:fa:c1:ab:a6:58:28:61:81:96:e0:59:4d:35:
         e9:2f:48:82:98:03:5d:c4:cd:60:ac:e4:73:42:ff:95:7e:ca:
         af:1f:8d:6b:be:cc:5e:74:d3:2b:f0:8e:b9:b0:1f:00:bd:59:
         a7:b9:a2:ef:bb:36:4a:59:53:cf:0e:86:88:48:ff:3b:dc:65:
         4e:9d:d4:51:0e:ba:52:ab:98:39:a2:66:70:34:ec:85:7b:89:
         cf:42:b5:bb:d6:1a:23:af:87:c9:24:33:9c:5c:98:c0:2c:ee:
         21:82:ee:ef:33:ca:7f:30:78:9a:8d:18:94:f2:2c:a9:47:8e:
         8d:63:80:06:02:0b:bc:dc:ae:22:13:7a:0f:be:41:09:34:75:
         3e:25:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:55 2026 by rpki-client