Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/rfk7DDfp9Mi2yhB-tp8VTyokrT4.roa
File:                     rfk7DDfp9Mi2yhB-tp8VTyokrT4.roa (raw, json)
Hash identifier:          18IIjRJE+U1ZKE37JXQvYZBrtHJHe+iL5iTEEX8NwM8=
Subject key identifier:   AD:F9:3B:0C:37:E9:F4:C8:B6:CA:10:7E:B6:9F:15:4F:2A:24:AD:3E
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       A0
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/rfk7DDfp9Mi2yhB-tp8VTyokrT4.roa
Signing time:             Fri 14 Aug 2026 09:31:02 +0000
ROA not before:           Fri 14 Aug 2026 09:31:02 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:31:02 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=ADF93B0C37E9F4C8B6CA107EB69F154F2A24AD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:fc:e4:1a:42:e2:41:23:b9:ed:67:a1:bc:
                    26:03:69:e5:79:20:8e:83:e2:7c:9b:54:ca:dd:e8:
                    f0:c0:2a:21:ee:be:55:ea:0b:a5:72:04:da:81:a4:
                    dd:c9:06:86:3c:0b:97:e1:b1:a4:4d:7a:70:a8:78:
                    d1:41:29:13:57:45:03:ff:d6:f8:f7:85:30:aa:80:
                    9d:94:30:4c:24:96:10:f9:57:8f:0e:36:63:47:b8:
                    58:ae:60:d8:73:b9:8c:e7:d8:f0:19:cd:83:50:e5:
                    92:d8:bc:2d:51:0b:60:f1:f6:2c:bb:6f:31:60:bf:
                    05:d8:f9:29:9c:a6:54:ee:9a:b2:e4:43:8a:e1:bf:
                    da:6e:e4:f7:26:9c:07:94:b6:a6:de:a1:df:dd:15:
                    43:46:76:ab:72:2f:8f:8b:60:f1:fd:55:e9:ed:e1:
                    57:8c:3d:bb:e4:4f:d4:e6:0c:0c:84:b0:92:78:87:
                    87:c8:88:cb:42:5e:56:b9:08:02:e1:0e:aa:47:87:
                    4a:40:e1:97:de:c2:7e:96:37:ba:be:3f:6f:5e:4f:
                    8f:51:7d:52:dd:74:ac:4e:af:32:79:67:d3:c9:f3:
                    a4:11:1f:92:e0:01:5b:1a:5b:f9:57:84:6a:8d:90:
                    52:66:c6:5e:94:38:60:49:5d:f9:1a:17:0c:23:20:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:3B:0C:37:E9:F4:C8:B6:CA:10:7E:B6:9F:15:4F:2A:24:AD:3E
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/rfk7DDfp9Mi2yhB-tp8VTyokrT4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5d:e0:13:05:ad:ad:1c:cb:26:bd:f0:96:68:88:ee:8a:02:
         a0:76:c9:58:6a:7e:e9:08:05:e7:c5:18:e4:a4:c8:a1:df:67:
         1a:78:de:93:6d:ee:b8:be:3f:76:a9:67:a6:60:5d:8c:ab:97:
         0f:1b:24:c2:28:c1:4a:d3:85:7e:2a:70:06:6c:00:40:09:75:
         30:96:6a:17:97:90:ce:dc:66:9e:3b:8b:90:b0:28:89:78:50:
         aa:82:20:37:1c:7b:11:d4:f0:1d:b2:19:ab:de:df:1f:51:70:
         b5:50:4a:f1:64:02:72:6d:ac:69:fe:1e:80:43:a9:5a:e3:eb:
         8a:21:2c:4a:c9:6b:03:21:ea:2b:e6:7a:8b:0e:9d:c9:8c:27:
         b8:73:a3:c7:4f:98:33:5f:93:eb:c4:6f:c0:a7:bd:33:23:c6:
         61:7f:9e:06:bc:96:3f:9f:46:34:5e:ca:e7:66:c9:ca:11:6c:
         c8:3e:af:67:34:ed:00:d3:53:18:79:ad:04:97:64:fd:61:8e:
         c9:95:40:4c:94:45:9d:6d:d6:73:95:a5:e5:c7:2c:08:cb:e5:
         f7:cf:a6:ca:0c:9e:ff:71:6e:b7:a8:fe:4c:3e:ac:be:6e:ca:
         80:0a:bf:cb:a9:7d:7d:cf:61:9c:d6:29:51:ec:51:ea:c2:e2:
         86:70:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:24 2026 by rpki-client