Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/28n3k4ahh57Si0vM0fVriDPkl9E.roa
File:                     28n3k4ahh57Si0vM0fVriDPkl9E.roa (raw, json)
Hash identifier:          ACPdvoZXsmsZMAgvaBHFYq0YO3jSYkvMA0ExmZOCppg=
Subject key identifier:   DB:C9:F7:93:86:A1:87:9E:D2:8B:4B:CC:D1:F5:6B:88:33:E4:97:D1
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       DB
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/28n3k4ahh57Si0vM0fVriDPkl9E.roa
Signing time:             Wed 14 Oct 2026 09:11:18 +0000
ROA not before:           Wed 14 Oct 2026 09:11:18 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        133.157.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 14 09:11:18 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=DBC9F79386A1879ED28B4BCCD1F56B8833E497D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:37:d6:ec:1e:22:fb:fc:d8:96:73:b6:87:
                    0c:09:d4:3b:48:a8:73:de:55:fc:76:11:ff:f4:df:
                    5e:3a:a4:38:11:28:28:be:6e:21:a1:35:b4:1a:6e:
                    28:25:bf:ac:b0:7a:08:e8:08:31:f9:38:4d:70:be:
                    bb:32:36:0d:9a:fa:71:9d:e6:d8:78:8e:4b:7b:fa:
                    b6:cf:1f:d1:30:da:e1:45:ce:39:18:ee:67:30:ae:
                    bb:6d:78:05:3a:cc:73:70:7d:e4:9a:a9:61:0d:66:
                    32:43:0d:35:82:68:70:28:16:e6:09:eb:87:6a:1c:
                    91:09:5b:48:80:ef:4b:0f:b9:67:e9:be:07:24:8b:
                    49:3d:d6:4d:fc:43:5f:23:e8:bb:19:09:2a:30:da:
                    ae:7b:53:03:56:b2:ae:9c:db:ac:e8:fa:d5:be:9a:
                    8f:6d:eb:82:f8:9f:d3:93:34:a6:76:26:57:b5:32:
                    08:f0:25:bd:48:bc:59:1a:80:d4:aa:d9:4a:be:97:
                    65:98:d3:77:a6:66:21:46:16:62:37:63:02:7d:26:
                    43:85:97:8c:4c:17:bf:7b:7c:ae:54:8e:fa:94:ed:
                    5e:2f:25:ff:80:14:b9:32:b3:d9:ce:b5:46:65:c1:
                    15:89:c1:5a:0e:ea:c4:6b:98:f8:ba:91:05:64:dc:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:F7:93:86:A1:87:9E:D2:8B:4B:CC:D1:F5:6B:88:33:E4:97:D1
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/28n3k4ahh57Si0vM0fVriDPkl9E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:f4:80:99:a4:f8:8a:cc:6d:ed:70:42:ca:c9:cc:a5:a6:
         66:d9:10:19:02:b8:62:3e:6a:78:e9:07:cf:16:b8:4b:bf:aa:
         11:a3:dc:e5:ae:44:8c:3f:4e:68:ff:9b:f7:5e:c6:73:0c:0d:
         9d:cc:bb:4a:f9:74:64:59:69:57:c9:5f:05:f3:12:45:d5:b3:
         d0:e0:a4:1a:c0:8e:5a:e4:9f:2b:97:8f:7f:8d:0f:58:2c:80:
         59:ec:c1:45:64:5e:e7:43:fe:fc:59:ed:d1:ab:7e:be:8d:9d:
         14:8d:18:36:53:df:c2:5b:45:58:09:02:92:d1:40:e8:e2:ef:
         a9:d9:30:6c:75:ba:ae:33:61:21:0d:3e:34:df:23:90:ee:a7:
         05:7f:1b:06:86:6a:89:88:bf:cc:7c:1a:de:ec:d8:9b:0f:99:
         1c:17:6c:a5:eb:04:83:af:e5:f1:d0:47:70:df:60:38:3f:55:
         d4:f3:18:b0:2e:8b:4f:f4:87:9c:36:b6:30:bc:0e:b1:3c:88:
         c4:68:76:69:a9:68:dd:48:3d:8f:91:35:3a:98:16:43:e8:33:
         80:57:80:f4:f6:c4:1f:cb:7a:9c:e6:06:1d:9f:95:a9:02:d1:
         cd:38:98:15:80:03:94:53:d3:f0:ef:5c:db:69:c0:e2:10:d0:
         6b:16:94:c0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjEwMTQw
OTExMThaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERCQzlGNzkzODZBMTg3
OUVEMjhCNEJDQ0QxRjU2Qjg4MzNFNDk3RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfXDfW7B4i+/zYlnO2hwwJ1DtIqHPeVfx2Ef/03146pDgRKCi+
biGhNbQabiglv6ywegjoCDH5OE1wvrsyNg2a+nGd5th4jkt7+rbPH9Ew2uFFzjkY
7mcwrrtteAU6zHNwfeSaqWENZjJDDTWCaHAoFuYJ64dqHJEJW0iA70sPuWfpvgck
i0k91k38Q18j6LsZCSow2q57UwNWsq6c26zo+tW+mo9t64L4n9OTNKZ2Jle1Mgjw
Jb1IvFkagNSq2Uq+l2WY03emZiFGFmI3YwJ9JkOFl4xMF797fK5UjvqU7V4vJf+A
FLkys9nOtUZlwRWJwVoO6sRrmPi6kQVk3AtRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU28n3k4ahh57Si0vM0fVriDPkl9EwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxLzI4bjNrNGFoaDU3U2kwdk0wZlZyaURQa2w5RS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnXkwDQYJKoZIhvcNAQELBQADggEB
ALVw9ICZpPiKzG3tcELKycylpmbZEBkCuGI+anjpB88WuEu/qhGj3OWuRIw/Tmj/
m/dexnMMDZ3Mu0r5dGRZaVfJXwXzEkXVs9DgpBrAjlrknyuXj3+ND1gsgFnswUVk
XudD/vxZ7dGrfr6NnRSNGDZT38JbRVgJApLRQOji76nZMGx1uq4zYSENPjTfI5Du
pwV/GwaGaomIv8x8Gt7s2JsPmRwXbKXrBIOv5fHQR3DfYDg/VdTzGLAui0/0h5w2
tjC8DrE8iMRodmmpaN1IPY+RNTqYFkPoM4BXgPT2xB/LepzmBh2flakC0c04mBWA
A5RT0/DvXNtpwOIQ0GsWlMA=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:00 2026 by rpki-client