Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/l2Tewk0LsnsdENvQQQUy6tJzlU0.roa
File:                     l2Tewk0LsnsdENvQQQUy6tJzlU0.roa (raw, json)
Hash identifier:          XwGoY0X69zWjaf8/gCkkhZfGBIDrZTNyjsuW1ouTrQQ=
Subject key identifier:   97:64:DE:C2:4D:0B:B2:7B:1D:10:DB:D0:41:05:32:EA:D2:73:95:4D
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       8A
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/l2Tewk0LsnsdENvQQQUy6tJzlU0.roa
Signing time:             Fri 14 Aug 2026 09:17:00 +0000
ROA not before:           Fri 14 Aug 2026 09:17:00 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:17:00 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=9764DEC24D0BB27B1D10DBD0410532EAD273954D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:eb:d9:e4:2d:c3:b2:78:0d:12:00:83:c1:
                    e4:27:d0:99:86:7a:ad:83:13:60:50:02:f3:80:e5:
                    38:91:b4:62:a8:6c:b7:db:e5:62:bd:cd:00:26:39:
                    0f:0a:8e:8c:39:7a:1a:aa:b4:49:b6:4a:17:7a:86:
                    f0:68:ba:03:f5:8b:0a:b2:fa:fa:9e:4d:a2:e9:fd:
                    48:0b:63:3e:9a:49:8d:68:84:4f:01:7c:d1:60:42:
                    da:39:82:2e:e6:4a:12:51:db:d6:a3:c5:7f:74:0e:
                    a3:2c:19:aa:90:77:30:37:df:20:85:c5:7f:94:55:
                    bc:8a:2f:5e:85:0c:ea:d2:af:60:f9:f8:47:32:86:
                    4e:9e:9a:7c:5c:6c:17:ef:a2:0b:a8:a2:01:15:e1:
                    4f:72:f4:ba:33:35:7b:68:5c:4c:0c:5e:c5:47:10:
                    11:d3:40:a8:1f:5e:c6:f8:e9:20:8c:6c:37:1e:45:
                    ee:cd:88:6b:de:92:18:cd:de:4f:ff:12:c1:1a:41:
                    fa:06:02:00:f3:df:00:89:30:3e:d4:af:0e:9a:30:
                    49:ea:d4:6a:9a:71:22:83:a6:f6:2f:f8:cd:68:f0:
                    60:e8:42:b7:cf:44:44:03:d2:b3:f3:d7:ec:8c:59:
                    05:02:5e:26:06:6e:c7:4f:cb:29:f7:65:19:c0:6d:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:64:DE:C2:4D:0B:B2:7B:1D:10:DB:D0:41:05:32:EA:D2:73:95:4D
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/l2Tewk0LsnsdENvQQQUy6tJzlU0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:d4:4d:02:43:23:bd:42:dc:b8:1f:c5:1e:36:d0:78:1f:
         ba:33:c8:84:d4:58:07:47:8b:8d:a9:7a:66:54:b2:7c:01:7d:
         ad:03:a9:ea:09:30:58:59:8a:51:86:99:64:b0:ca:f4:4f:71:
         2d:ff:a7:12:64:59:ea:99:01:50:12:4c:21:58:b8:e6:61:cd:
         dc:98:b0:11:47:75:d0:22:37:93:14:18:43:db:3a:fc:a3:7e:
         74:78:7f:9d:8a:37:f3:12:96:9b:86:9d:42:bb:f4:6b:1e:3e:
         b3:30:8e:64:a6:1e:12:be:2d:36:6d:35:8d:19:58:e2:1c:b1:
         ea:f6:4a:97:46:29:4a:65:d3:ce:87:50:28:e7:2a:d8:e2:c8:
         31:9f:4f:64:80:6e:39:f8:cb:b3:f2:ed:f6:56:0b:ad:ad:d6:
         4c:0a:c4:25:6a:62:d8:6b:15:b0:69:7c:24:58:e3:b1:f5:30:
         53:fd:f7:07:cd:fe:e0:d0:8f:75:a0:00:98:02:e6:ba:c0:19:
         6a:2a:05:e1:58:cc:63:7d:75:7b:e4:47:cb:3f:25:1f:f3:65:
         5d:f0:90:2b:5c:ed:e9:78:e4:1b:bf:c7:34:3d:e6:fb:32:94:
         7b:60:5a:ef:0f:10:8a:2c:d2:ac:7b:61:66:ed:e2:71:17:17:
         8d:8a:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:44:52 2026 by rpki-client