Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/-hlT2OzdVMOxBma4U_0HpNmRa7M.roa
File:                     -hlT2OzdVMOxBma4U_0HpNmRa7M.roa (raw, json)
Hash identifier:          gHXLg2F311I8N6tzAHQpRXDCMjRc633wZQrhbP3S7jg=
Subject key identifier:   FA:19:53:D8:EC:DD:54:C3:B1:06:66:B8:53:FD:07:A4:D9:91:6B:B3
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       F4
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/-hlT2OzdVMOxBma4U_0HpNmRa7M.roa
Signing time:             Tue 27 Oct 2026 05:36:33 +0000
ROA not before:           Tue 27 Oct 2026 05:36:33 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     6282
IP address blocks:        133.157.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 27 05:36:33 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=FA1953D8ECDD54C3B10666B853FD07A4D9916BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:5f:70:59:a9:5c:0d:70:6e:b2:90:1f:f9:
                    bc:bd:c4:dd:1a:c6:0c:a7:0d:ca:26:57:a0:16:d4:
                    54:5e:de:c2:c9:10:3e:7e:5b:c5:0f:a0:7b:4d:55:
                    ab:e6:bc:1f:19:5f:94:40:2e:b8:ae:f2:7c:9c:a8:
                    b3:8a:73:5f:13:2a:42:93:3c:b5:d2:b9:08:2a:3e:
                    e4:9c:57:99:73:98:ba:e5:14:bb:5e:84:0e:99:f9:
                    4b:00:05:08:ba:8b:4a:ba:16:80:1f:c8:1a:1f:96:
                    17:d1:09:8c:0d:fc:33:87:59:5d:69:30:c5:dd:36:
                    aa:0c:4b:af:01:90:5d:bf:02:27:6e:51:45:0d:ed:
                    d8:a5:60:5f:a6:33:4b:56:ac:07:e6:29:bf:39:3f:
                    17:0b:f2:ba:24:e6:e6:22:6d:bb:61:2a:3f:f9:fb:
                    e1:bb:6d:19:11:64:37:7e:67:67:30:9d:24:6f:1b:
                    b1:62:05:b9:b4:14:38:50:bb:d8:f1:04:1b:80:42:
                    11:35:a9:d5:3c:49:1a:86:a9:31:c3:fa:63:c9:13:
                    fd:c2:d9:b5:c0:1a:21:af:0e:65:c0:06:1f:f3:04:
                    79:a6:86:56:5c:5a:fb:a1:a9:d4:d3:f5:97:30:19:
                    0c:91:16:e3:c7:bc:e4:f6:1b:8e:8a:7e:dc:c2:01:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:53:D8:EC:DD:54:C3:B1:06:66:B8:53:FD:07:A4:D9:91:6B:B3
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/-hlT2OzdVMOxBma4U_0HpNmRa7M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:a7:87:60:85:32:f6:ba:6c:75:72:fc:9c:bb:7b:d3:8e:
         0c:ef:12:fb:9e:f9:96:8e:79:2a:5d:28:2a:6b:c2:83:29:cb:
         bf:35:5d:a0:db:3f:83:b3:20:f0:73:da:be:84:a3:e7:a1:c2:
         60:f8:6d:d1:72:5c:38:71:80:f4:fd:f7:16:3f:5f:e0:32:87:
         90:43:09:b1:4a:6e:fa:94:d1:f6:d9:ee:74:d7:f0:04:ea:ad:
         96:07:af:17:7b:c2:cf:a5:5c:9b:d5:a9:7f:eb:0e:52:5a:50:
         8f:11:e9:9b:0d:3f:99:63:07:5f:3a:87:b5:a9:84:47:88:0b:
         05:46:05:43:85:40:4e:f7:5e:df:11:bb:ab:2c:0a:cf:be:14:
         be:6b:4f:27:bf:26:c7:57:92:26:1a:95:82:d5:05:62:3b:61:
         c5:9f:43:13:63:1e:b3:d2:84:aa:b9:52:04:69:d7:2f:2f:7b:
         20:b7:f3:21:bc:24:01:b1:c3:f8:6f:20:48:99:7a:0f:6f:f1:
         64:3d:3f:48:45:b3:a4:ec:aa:66:15:65:ab:5f:6d:be:61:f0:
         bc:62:61:42:38:50:fc:51:90:c2:c6:e5:4f:6c:7f:0c:00:1a:
         59:d0:83:85:6a:3b:44:c1:63:e6:e8:c5:db:7c:58:f0:78:ec:
         c1:b4:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:21 2026 by rpki-client