Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/uFEIs8bjuhKxnMm33nNaA2L0UD4.roa
File:                     uFEIs8bjuhKxnMm33nNaA2L0UD4.roa (raw, json)
Hash identifier:          K24gtVXb7J3Qj3NEeapE+FqlynR9WUumsl3KrSeAsJI=
Subject key identifier:   B8:51:08:B3:C6:E3:BA:12:B1:9C:C9:B7:DE:73:5A:03:62:F4:50:3E
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       93
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/uFEIs8bjuhKxnMm33nNaA2L0UD4.roa
Signing time:             Fri 14 Aug 2026 09:25:16 +0000
ROA not before:           Fri 14 Aug 2026 09:25:16 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:25:16 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=B85108B3C6E3BA12B19CC9B7DE735A0362F4503E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:01:6b:8b:ea:6f:e8:e2:a8:8f:15:5a:5a:
                    6b:2b:cc:13:50:88:09:04:5a:bf:d6:5e:8b:77:c9:
                    f1:67:f0:7b:c8:58:40:a3:3b:14:b7:d4:05:64:5d:
                    81:3e:2f:7d:2b:f6:fe:46:fb:5e:df:48:c1:a8:cd:
                    59:1f:4c:2a:e5:f1:a6:2c:60:25:ad:bf:4e:3f:e0:
                    75:80:d8:45:06:b1:96:f4:d1:10:ba:e3:eb:4f:3b:
                    5f:17:32:eb:02:a9:58:86:1e:dc:0a:4b:c9:f1:ba:
                    5a:f1:99:f0:69:4d:37:59:4f:f8:5d:fe:3d:84:29:
                    99:65:63:74:e8:8e:7e:c4:1e:35:1a:f7:09:ab:cc:
                    07:58:a6:04:01:02:8d:2f:d6:33:be:b1:62:0b:c5:
                    7f:47:25:e7:17:71:db:a0:de:e7:1d:b8:05:ef:f7:
                    62:2a:40:2d:d4:95:f1:38:39:65:b5:25:fa:f2:6d:
                    8a:97:f7:7a:ad:7c:a5:11:ac:2c:88:78:30:94:db:
                    3f:3b:99:6c:c3:77:da:35:45:16:2b:ac:92:3e:6e:
                    9f:d2:77:f2:a0:44:65:33:73:36:e1:4f:9e:50:e0:
                    b8:5c:25:c6:f3:c6:70:53:b5:12:18:59:88:19:f0:
                    db:a3:4c:ca:58:35:ca:e4:fb:01:8a:7e:1a:39:3b:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:51:08:B3:C6:E3:BA:12:B1:9C:C9:B7:DE:73:5A:03:62:F4:50:3E
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/uFEIs8bjuhKxnMm33nNaA2L0UD4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:1d:f7:19:77:46:71:3a:8d:72:71:90:79:9b:75:4a:e9:67:
         d2:6f:ea:a1:86:1a:79:e3:e7:29:4d:0a:1a:3f:f3:ab:3e:84:
         63:b2:67:09:59:55:e1:fa:28:82:64:24:d3:c7:87:97:83:b9:
         5c:59:10:99:ae:31:ac:93:76:03:8e:4a:c1:2a:83:df:de:d9:
         4c:8f:69:71:93:52:f2:fe:6b:65:7a:e9:9b:a0:af:88:a0:7e:
         ea:db:96:61:d9:87:40:44:c3:99:ac:07:8b:f2:70:43:89:ee:
         10:2b:5b:78:fb:70:d4:89:7a:c9:a2:f5:2f:eb:06:0e:f6:8e:
         26:3d:9e:b8:3d:dc:30:77:b6:2a:d9:22:93:0b:24:68:3a:ac:
         14:9b:29:86:fa:9e:e4:d4:e1:50:85:d6:77:b4:24:98:23:d5:
         48:d5:b0:5f:96:b1:a9:19:18:19:68:81:9b:c5:09:b5:56:31:
         9c:e2:78:07:ec:a4:62:4b:8a:c1:d0:19:73:0c:70:43:57:5e:
         00:bc:72:fb:0e:83:f7:fe:db:38:46:fa:eb:a6:62:b3:38:41:
         d3:89:29:b2:02:cb:ad:06:7a:da:3c:9c:89:18:07:93:c5:f4:
         19:9f:7b:3d:3b:d5:99:17:45:16:19:61:5d:ab:fc:04:1d:27:
         bc:0c:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client