Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/miiP_LWUZaEVPFqseaV1OZ85rwE.roa
File:                     miiP_LWUZaEVPFqseaV1OZ85rwE.roa (raw, json)
Hash identifier:          TVizY7wqA+dIprYI91EllfHJzLMBpXhc14+7DTILEkQ=
Subject key identifier:   9A:28:8F:FC:B5:94:65:A1:15:3C:5A:AC:79:A5:75:39:9F:39:AF:01
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       84
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/miiP_LWUZaEVPFqseaV1OZ85rwE.roa
Signing time:             Fri 14 Aug 2026 09:12:54 +0000
ROA not before:           Fri 14 Aug 2026 09:12:54 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:12:54 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=9A288FFCB59465A1153C5AAC79A575399F39AF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:d9:08:c9:eb:5c:9a:8e:08:9e:dd:4a:3e:
                    4e:fd:da:0a:7b:26:7e:65:bc:ac:38:3a:0a:3d:6d:
                    30:fc:bb:e2:da:b7:87:59:e2:0c:33:65:4b:8e:d4:
                    32:b0:b6:c3:69:b6:4c:0c:03:34:ac:c2:61:23:29:
                    f6:16:df:6f:84:03:c5:5c:9a:16:a1:ab:da:eb:e0:
                    36:45:b8:7f:f2:18:49:fb:f9:a3:27:63:e5:58:d3:
                    7b:03:89:d0:32:41:b5:bc:88:6f:49:41:b4:e4:97:
                    47:00:af:a9:73:1e:1e:1a:37:a5:d7:be:fc:7d:39:
                    c3:82:4d:68:95:93:6d:ac:22:3a:d0:7c:df:d7:91:
                    ed:99:08:88:f5:d7:21:09:6e:36:5e:86:5d:70:3a:
                    33:dc:30:b9:d2:e5:7c:1e:49:0c:69:7d:18:fe:8a:
                    f2:16:53:54:cb:9b:9b:33:b4:3f:28:e9:11:ab:c8:
                    f9:b4:d4:d8:e7:6e:eb:c5:9e:7b:13:a6:e4:cf:fd:
                    03:4d:69:d4:7f:ff:d2:7c:0e:c6:3c:19:bc:c1:2e:
                    f4:70:92:34:3e:54:04:9a:a3:93:11:64:de:76:71:
                    13:0e:90:c0:39:e1:bc:a1:40:f8:8c:e8:e8:ac:16:
                    30:5a:e1:ce:60:cc:f0:91:c4:50:85:5a:56:59:45:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:28:8F:FC:B5:94:65:A1:15:3C:5A:AC:79:A5:75:39:9F:39:AF:01
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/miiP_LWUZaEVPFqseaV1OZ85rwE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:cd:cc:9d:33:91:6a:03:62:90:5a:86:43:2c:8a:ad:6f:
         a6:a1:e1:ff:2d:3a:5b:f0:5e:ca:1b:67:38:38:e5:b1:ef:bf:
         3e:92:82:b4:f6:9f:30:1f:1c:67:4c:ae:8a:6e:cc:d2:78:c5:
         5c:c8:70:18:76:c7:45:cc:d6:fc:42:5c:33:36:35:6f:1a:79:
         0f:cc:c6:6f:e4:22:90:e6:94:2e:71:76:52:86:44:7f:12:23:
         ed:aa:bf:dd:b3:0a:5f:f2:88:1b:46:6d:82:4f:4f:9f:8f:d4:
         2a:c0:ec:ab:71:b3:77:b3:9c:e5:4f:05:47:a0:62:91:f5:cd:
         a7:1d:41:d6:26:25:70:ef:8e:b4:b5:fc:7a:e9:28:64:fa:6e:
         0d:dc:e9:1b:32:f4:9f:41:cf:e6:8c:08:6b:99:b8:f4:55:1e:
         ee:43:f8:95:64:09:27:e2:44:1c:e7:d2:df:d8:77:be:0d:67:
         83:34:6b:3e:70:c5:d5:0d:e6:28:ef:5b:23:68:c8:0d:06:d3:
         97:0c:33:63:c8:f9:50:d4:10:9e:b4:b7:55:84:9d:63:b8:76:
         32:f5:8a:bc:cf:cc:96:72:be:5a:88:f6:3d:7a:8b:52:47:ec:
         e6:43:f9:f3:4e:c1:75:dc:2c:86:d4:2f:ad:7d:f6:c9:5f:65:
         ba:b8:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:22 2026 by rpki-client