Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/jrr5DUf67hDnoKaWfmRUIFTCyHg.roa
File:                     jrr5DUf67hDnoKaWfmRUIFTCyHg.roa (raw, json)
Hash identifier:          Eay/BbjcV8YMvAsdFUGP8hhHz6osL+wq2YlF5piHQYA=
Subject key identifier:   8E:BA:F9:0D:47:FA:EE:10:E7:A0:A6:96:7E:64:54:20:54:C2:C8:78
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       91
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jrr5DUf67hDnoKaWfmRUIFTCyHg.roa
Signing time:             Fri 14 Aug 2026 09:25:15 +0000
ROA not before:           Fri 14 Aug 2026 09:25:15 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:25:15 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=8EBAF90D47FAEE10E7A0A6967E64542054C2C878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3b:b1:29:13:0f:89:b4:0f:5a:d1:89:27:ae:
                    e6:23:1b:5d:19:06:53:b4:cc:af:60:2d:f9:a4:0b:
                    ca:4b:2e:26:0d:ba:f4:71:87:07:86:11:96:74:7c:
                    fe:4e:27:3b:69:c8:25:72:a4:f0:71:20:8d:a9:bf:
                    cb:f2:47:4e:6f:74:62:68:9a:a6:88:6c:ff:af:fe:
                    54:52:52:75:8f:1b:cf:4d:8e:87:ed:77:4e:8e:0c:
                    31:68:9e:89:9b:b8:1b:9d:7d:a7:13:c1:a4:df:fe:
                    f5:95:f9:2b:46:ac:60:0b:be:07:c6:5b:ec:91:e8:
                    b6:7b:ab:b5:5f:e6:0c:bd:a5:5c:f7:80:46:73:f7:
                    8e:51:30:32:0b:69:11:de:1f:de:1d:3c:3a:10:ed:
                    ba:d8:ca:34:75:1d:38:5a:2c:fd:5d:ad:2c:8c:4f:
                    a9:2d:4f:c7:2c:c3:cd:bf:b4:71:c8:37:50:12:5c:
                    7c:d5:fe:d9:b5:03:86:d0:fa:ef:ba:ac:48:c5:cf:
                    50:3f:ce:87:ad:3d:ee:57:b0:74:8f:81:b0:cd:97:
                    a5:3d:db:4f:a3:8d:72:91:9e:93:8f:f8:e5:54:a6:
                    52:fb:47:ca:19:24:04:97:66:c6:57:24:3a:3a:6b:
                    06:77:86:1d:ca:c5:dd:cd:c4:ae:9b:6a:fa:ab:2a:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BA:F9:0D:47:FA:EE:10:E7:A0:A6:96:7E:64:54:20:54:C2:C8:78
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jrr5DUf67hDnoKaWfmRUIFTCyHg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:44:6c:08:46:98:9a:9d:70:82:01:3c:e3:b8:35:45:19:
         7e:73:65:f8:a8:30:24:b6:27:73:9b:10:72:ae:6c:c4:86:82:
         ef:31:0f:49:9e:a1:ed:35:7b:b3:16:ff:a6:65:7a:73:a0:f9:
         d7:bd:41:70:03:5c:16:bb:07:0f:1f:b2:07:0a:a4:ea:e6:09:
         87:56:9f:16:22:81:b7:7d:32:be:96:89:99:54:0d:f0:85:c8:
         88:da:f3:f2:16:4c:cb:7d:e9:89:fd:a5:79:42:98:39:04:05:
         1e:07:f7:ba:aa:3b:fe:a7:52:5c:74:10:79:08:d4:e4:9e:ad:
         58:f8:ec:bc:bc:e2:25:fc:79:71:bb:24:3f:b1:f6:5d:69:5a:
         c5:ac:ee:dc:e4:c4:92:85:49:93:30:61:85:38:99:cf:76:71:
         95:2b:f8:ce:a9:d8:e8:7e:c2:36:57:cd:1d:c7:a4:24:36:af:
         e7:89:88:ff:9b:ca:9d:b9:de:20:c8:df:6b:ec:25:a2:1d:34:
         6c:c3:55:22:a6:38:e2:86:07:ce:d9:7c:39:04:9a:e0:1d:22:
         6c:55:57:fd:86:02:96:4b:4b:ae:39:4b:6d:17:95:94:8f:e4:
         c7:4e:c6:ee:aa:36:8b:96:88:82:9f:d1:ef:e9:14:9c:1e:f3:
         e9:a9:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:55 2026 by rpki-client