Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/kD_Ikbdkbpj_J2EiEcQ_Gdf7caU.roa
File:                     kD_Ikbdkbpj_J2EiEcQ_Gdf7caU.roa (raw, json)
Hash identifier:          AQ0xJpZgTOkLGfsSLS6djqamoWWubO8h/y+vDzw7hQk=
Subject key identifier:   90:3F:C8:91:B7:64:6E:98:FF:27:61:22:11:C4:3F:19:D7:FB:71:A5
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       8E
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kD_Ikbdkbpj_J2EiEcQ_Gdf7caU.roa
Signing time:             Fri 14 Aug 2026 09:20:52 +0000
ROA not before:           Fri 14 Aug 2026 09:20:52 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:20:52 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=903FC891B7646E98FF27612211C43F19D7FB71A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:7e:6a:2d:67:16:c6:9a:5b:7d:11:a9:14:
                    05:56:82:46:03:6b:5d:64:bd:c5:83:bb:54:69:bd:
                    2b:7b:e6:4d:55:6c:d8:43:38:e1:72:75:ea:b1:a2:
                    2b:cd:09:99:85:52:4c:2a:2b:26:8e:4c:3e:fa:61:
                    ef:b6:99:76:f3:ca:4a:85:f3:d3:b1:d5:ba:f3:0a:
                    d5:60:8b:a8:d9:bb:63:60:48:cb:3f:31:e5:8c:72:
                    e7:7f:f8:6b:0e:19:f2:49:2a:5e:bd:ec:3a:fe:07:
                    38:10:58:87:57:7e:69:14:cc:80:eb:aa:84:ce:1c:
                    cc:33:24:66:26:53:93:95:8c:3f:5a:c2:28:53:be:
                    b1:fe:35:b2:ea:08:2c:dd:33:f9:73:fd:7b:2c:f8:
                    45:4a:bc:ab:6f:db:ec:eb:eb:28:32:3c:bb:47:68:
                    66:c5:aa:70:eb:ec:ff:94:0b:93:d8:8c:26:8b:5c:
                    40:55:a8:65:de:51:fa:ae:18:b0:7e:9d:c1:00:0e:
                    81:b6:9a:94:8c:3b:bc:01:db:67:66:43:90:ea:19:
                    92:3d:9b:68:f3:22:55:35:43:85:d1:ea:7a:64:8f:
                    21:92:7b:3d:c7:e7:51:4f:70:8a:da:95:f7:ed:21:
                    24:00:7d:d4:9f:64:cd:75:72:b9:89:17:ac:85:e4:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3F:C8:91:B7:64:6E:98:FF:27:61:22:11:C4:3F:19:D7:FB:71:A5
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kD_Ikbdkbpj_J2EiEcQ_Gdf7caU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:fc:28:5f:4b:4e:d3:f4:ad:08:fe:17:e2:c5:43:e9:14:
         7d:9f:8b:f2:9c:c9:92:8d:05:99:e0:6f:ed:12:f2:65:15:93:
         58:09:6a:c5:71:f7:77:cf:2a:e6:b8:be:35:7f:6a:1b:f9:a2:
         c1:e5:64:22:9b:9e:a3:a7:24:ce:9f:eb:49:85:e1:15:9f:cb:
         d8:fa:4c:91:d7:c8:d6:6a:d9:35:3f:99:91:ee:e8:d9:a8:84:
         d6:b5:90:0d:24:26:5d:d5:c2:97:af:75:28:2a:44:b1:1a:b0:
         6b:fd:59:ed:d5:bd:04:0e:d6:67:07:4f:57:56:97:ca:62:19:
         f5:45:ff:7a:36:43:eb:f7:8f:00:2c:83:64:4d:38:65:2e:4e:
         4f:45:69:29:96:7d:89:c0:78:29:f7:f6:67:69:db:6b:b1:bb:
         82:80:d0:81:4e:e1:e6:62:7a:8f:fd:b0:61:8d:0f:c0:84:e2:
         27:bf:0b:f6:c9:41:63:ff:1d:8f:10:02:5c:47:17:a6:89:88:
         10:83:02:92:62:0e:27:13:df:63:79:6f:ef:64:4d:08:35:75:
         41:a3:c6:5a:95:a7:ea:34:c9:05:1c:e6:11:f4:6d:1a:d9:3e:
         03:51:66:57:f3:e0:5b:66:1c:23:27:4e:2d:53:2f:dd:90:3f:
         b6:a5:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:28 2026 by rpki-client