Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/AEb5aVSYVIgm5f4pjLM8jMdgp1w.roa
File:                     AEb5aVSYVIgm5f4pjLM8jMdgp1w.roa (raw, json)
Hash identifier:          qdKAXabNs7T8feLymzSIMww74Mrv8CgcMLLpxSGcfvg=
Subject key identifier:   00:46:F9:69:54:98:54:88:26:E5:FE:29:8C:B3:3C:8C:C7:60:A7:5C
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       E7
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AEb5aVSYVIgm5f4pjLM8jMdgp1w.roa
Signing time:             Wed 14 Oct 2026 09:11:24 +0000
ROA not before:           Wed 14 Oct 2026 09:11:24 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        133.157.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 14 09:11:24 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=0046F9695498548826E5FE298CB33C8CC760A75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:e8:07:36:06:b8:d1:59:c7:fc:b3:9c:53:
                    6c:f3:57:be:59:a0:a8:fd:c6:51:c7:c0:bb:4e:0e:
                    9a:8c:25:ef:d8:15:c9:55:af:dc:9d:12:91:53:cc:
                    e9:1a:b6:84:c8:27:f4:7f:ab:a8:9b:6a:03:e8:53:
                    4a:c5:28:94:04:41:d9:85:ed:d5:03:15:0e:1f:3e:
                    75:29:bb:05:e6:19:a6:0b:ac:f8:fb:69:0c:50:d3:
                    74:d0:c8:ee:3b:35:88:b9:4f:7b:6d:3f:56:fe:13:
                    30:d3:40:d2:d6:b4:13:e9:b9:41:6e:bf:a3:40:34:
                    51:15:02:24:6c:24:1b:c6:f9:0e:d9:6b:34:13:00:
                    6d:7c:bb:e2:63:97:42:f4:d2:b6:13:76:f3:75:e1:
                    a1:28:53:97:35:69:a2:b6:23:42:07:c0:f9:b7:a0:
                    01:51:31:a5:1f:ad:b0:88:33:f2:31:57:16:6e:6e:
                    de:b5:c3:ee:f1:d9:06:70:4f:e4:c7:f5:c0:af:f0:
                    34:fe:63:4f:12:2d:ef:0f:a4:30:79:03:2f:eb:5a:
                    af:ca:96:63:f8:0e:fd:b6:f1:ca:7e:fa:a6:96:db:
                    6e:09:11:f8:22:15:c5:9f:d7:c0:42:77:2c:a4:0a:
                    08:98:f2:60:4a:54:79:91:07:b9:1b:7f:b1:2f:44:
                    a9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:F9:69:54:98:54:88:26:E5:FE:29:8C:B3:3C:8C:C7:60:A7:5C
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AEb5aVSYVIgm5f4pjLM8jMdgp1w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:a6:d0:80:ec:f7:41:d0:50:1a:b7:99:2a:eb:ff:ca:f1:
         2a:b0:1a:e8:34:36:d9:12:a0:44:65:63:7e:ea:ab:f1:f7:40:
         41:d6:ed:08:cc:13:97:35:f5:1e:d2:1c:05:37:0a:e0:3e:7a:
         09:2b:b7:f9:dc:d5:88:4e:0f:45:32:47:78:19:8f:60:27:60:
         df:8a:8d:2d:e0:fb:56:09:b7:ad:d7:25:93:df:23:a9:f5:ee:
         04:05:d4:22:60:1a:25:74:6f:c5:da:e1:4f:66:f4:41:08:b3:
         96:9f:89:6b:b2:78:04:eb:5b:0e:96:c8:d7:f9:4d:12:76:3f:
         4c:1b:a9:cc:37:04:c9:31:ca:6c:c3:e7:f3:6b:ec:15:06:38:
         ba:78:91:ac:ff:23:15:d7:e9:7d:a2:69:f7:e5:17:a6:8b:ca:
         77:69:f7:6f:39:0b:2f:79:97:c2:7f:89:80:01:c7:b9:54:5c:
         43:fd:93:15:8a:52:da:55:92:ac:77:59:3d:b4:3c:e4:3c:92:
         a4:d6:9e:10:b3:cd:c2:be:5a:8a:d6:5f:7d:bd:f0:88:a1:fb:
         d7:cb:af:37:b7:f3:3c:0b:28:3c:d5:a5:34:2b:80:ad:1b:22:
         0b:d0:14:e3:5a:2b:ef:91:f7:4a:5d:2d:72:3d:22:4d:84:bb:
         c0:f0:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:09 2026 by rpki-client