Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa
File:                     yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa (raw, json)
Hash identifier:          RewyxFtJz9Qm3yUU9uz9w036Unlr9k+6vq1yvsiagU8=
Subject key identifier:   C8:3B:02:D4:03:1F:4F:EC:43:FA:79:C4:30:4B:3C:2C:EF:AC:DB:2D
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       97
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa
Signing time:             Fri 14 Aug 2026 09:25:18 +0000
ROA not before:           Fri 14 Aug 2026 09:25:18 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:25:18 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=C83B02D4031F4FEC43FA79C4304B3C2CEFACDB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:2a:bc:1a:fb:8b:aa:02:4f:b2:4e:a9:f3:
                    51:b0:e1:9e:ef:c0:8c:c8:dc:ac:65:38:a8:33:ef:
                    2b:4a:f6:7a:78:84:a4:6e:af:95:e8:25:5a:75:e3:
                    6d:c3:82:04:e3:0b:80:b7:67:51:1e:11:6f:3a:9a:
                    de:e7:0e:c0:77:dd:5e:68:06:f0:9c:f7:8e:db:29:
                    b6:8c:4b:ed:b3:61:61:08:51:fb:4b:05:4b:26:ce:
                    bb:e8:e6:71:eb:79:ab:74:5f:72:30:56:b2:4f:54:
                    c2:c6:e7:4d:da:e9:64:b0:e8:f2:52:71:53:7c:59:
                    0c:9c:92:04:47:d3:75:8a:d0:df:d4:61:6c:b8:76:
                    5b:22:64:cc:75:4a:1a:ce:e2:b3:ae:6e:29:5a:99:
                    60:23:a1:28:0c:c9:55:37:a2:63:73:18:6d:7d:71:
                    11:b4:3d:36:5e:a9:d0:c1:89:b5:1c:96:a7:83:8b:
                    c8:31:a1:24:6f:cb:9d:a8:44:44:dd:67:46:5c:f4:
                    3b:b4:7a:70:a1:d0:50:45:ce:12:99:18:94:15:83:
                    28:24:83:90:c9:79:ca:ba:ec:05:d2:f1:52:74:01:
                    ca:88:d2:1c:88:71:cb:f2:17:ec:09:70:cc:12:40:
                    6e:c3:63:fa:89:b3:b6:39:06:e4:16:13:78:6c:93:
                    ff:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3B:02:D4:03:1F:4F:EC:43:FA:79:C4:30:4B:3C:2C:EF:AC:DB:2D
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:5a:e6:1f:10:bc:33:a4:45:67:cc:ae:f2:70:55:68:0f:a7:
         60:11:5e:f0:14:74:07:07:a4:76:66:11:5b:b2:81:8a:0d:d5:
         18:03:a9:99:bd:1a:43:c8:57:19:61:08:91:08:d1:2f:e3:53:
         89:51:d2:4b:4b:45:5a:c6:00:26:88:c8:2d:8f:99:6b:bb:87:
         54:50:bd:cf:39:b2:03:6a:af:1f:7b:f2:90:5a:95:95:90:ba:
         70:49:f1:dc:6b:a8:36:f6:cb:95:6a:13:f5:cb:09:14:aa:2a:
         78:30:63:cd:ce:9e:ed:10:9c:df:85:0a:8b:43:d9:99:57:0b:
         b4:6a:b8:4f:a6:fc:85:58:80:1b:2a:f7:a2:31:f5:e8:90:8e:
         8a:74:f0:5b:cc:f4:64:e0:df:7b:12:9f:2f:cc:fd:11:3a:12:
         d1:c6:54:cf:76:05:5c:56:e3:7a:90:af:b3:87:77:dc:43:ad:
         95:ea:6c:aa:d7:cf:b6:88:21:7c:3e:ce:ea:64:7d:c1:47:f6:
         41:04:b9:d9:b5:60:1e:72:d0:d2:af:d1:39:4a:84:98:9c:0c:
         af:b4:67:a4:ed:dd:2b:8f:3b:be:92:fe:e5:b5:0b:0e:ff:97:
         ec:b2:e2:4c:f3:5e:05:77:d4:25:db:2a:99:e6:28:8f:11:dc:
         31:0b:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client