Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/kt-U36VlR-oxuBidbRCLY7G0-ng.roa
File:                     kt-U36VlR-oxuBidbRCLY7G0-ng.roa (raw, json)
Hash identifier:          EZTKkkXtQGJiZ/LNCvzgZph+slHs50xABLCvOSP41Kk=
Subject key identifier:   92:DF:94:DF:A5:65:47:EA:31:B8:18:9D:6D:10:8B:63:B1:B4:FA:78
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       85
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kt-U36VlR-oxuBidbRCLY7G0-ng.roa
Signing time:             Fri 14 Aug 2026 09:12:54 +0000
ROA not before:           Fri 14 Aug 2026 09:12:54 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:12:54 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=92DF94DFA56547EA31B8189D6D108B63B1B4FA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:a9:91:ef:b2:26:8c:51:fd:0b:9b:0c:bc:
                    9f:81:c9:f0:09:a2:cb:7c:02:c5:d7:d8:f4:9a:6f:
                    7c:f2:f7:a1:a9:d6:6a:18:24:e9:20:1c:73:af:94:
                    e0:d2:07:63:2d:6e:5a:35:a5:57:ac:34:ee:bf:3c:
                    d9:04:fb:98:02:b9:19:f6:4d:00:6d:79:ba:15:f0:
                    1a:4d:42:90:32:41:ca:f5:55:30:85:91:b8:db:37:
                    07:00:6f:0e:7e:c2:cd:8e:9e:86:1f:8a:83:cc:b5:
                    ef:ac:b3:5e:ed:95:e8:48:71:db:b4:13:eb:fc:b4:
                    8b:3c:34:e3:fa:6e:bb:18:b1:04:4e:16:86:c7:f4:
                    a4:4a:3f:42:21:4c:26:c4:05:19:bd:0b:f2:c9:b2:
                    cc:35:13:9d:04:57:45:26:4a:5c:7e:83:7c:91:a3:
                    79:55:27:8f:07:c2:fe:98:a1:f6:f4:f7:b2:98:55:
                    58:87:ae:e6:08:26:d5:47:76:34:1e:e8:52:03:9e:
                    24:ae:08:32:d0:13:a0:3d:b5:b3:1c:8d:a8:6e:85:
                    ed:60:04:2a:77:65:ac:dd:db:cd:8b:95:8c:eb:0d:
                    a2:81:1f:f8:c1:b8:ba:f1:c5:e6:b6:01:3d:f4:38:
                    18:4e:d3:60:37:2c:cf:8c:b8:b9:e4:18:1d:00:33:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DF:94:DF:A5:65:47:EA:31:B8:18:9D:6D:10:8B:63:B1:B4:FA:78
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kt-U36VlR-oxuBidbRCLY7G0-ng.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:f8:04:01:6f:49:15:12:76:66:df:4a:55:77:77:22:a0:
         e6:f2:e2:5d:ef:e9:6c:ec:f1:0a:a1:34:ca:d8:35:0a:17:d2:
         e6:df:f8:f6:3d:30:05:cb:d7:1e:9c:8e:4a:e2:ef:f1:0a:5a:
         a9:cc:88:76:b4:0f:30:a5:c4:c7:aa:9f:70:0c:74:f6:bb:7c:
         54:72:e4:d6:e8:c7:e1:50:7b:65:dd:e3:96:60:fa:a5:56:bc:
         ec:c7:fd:5d:f0:81:19:41:c0:ed:d9:e1:de:11:0a:c6:f9:6d:
         52:91:82:23:94:43:28:1e:25:ff:d4:0e:86:89:bf:90:3e:15:
         4e:70:29:b1:bc:07:02:80:b9:e3:d2:f4:bc:20:55:f4:92:c3:
         34:0e:93:13:e9:0e:9a:f7:21:d4:70:8b:99:63:f2:47:d3:be:
         46:cb:2d:56:89:a1:0e:bb:3b:a3:d6:00:6d:86:bb:3b:48:47:
         74:23:2d:6a:1d:07:9b:cf:07:ab:1f:79:dd:02:44:52:68:32:
         c5:33:66:3f:00:6b:a5:63:1b:0e:75:63:20:db:ba:a6:99:11:
         a9:97:c9:0a:fb:93:2d:d0:3a:d4:e7:28:85:7c:4d:1b:66:38:
         77:54:4e:f4:75:f5:70:86:cd:41:05:7c:8d:29:fe:5d:5c:91:
         e7:7f:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:56 2026 by rpki-client