Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/O6KHEhjPuBrBK2Yur0sMeAR7Yyo.roa
File:                     O6KHEhjPuBrBK2Yur0sMeAR7Yyo.roa (raw, json)
Hash identifier:          keFgP1/AcEtV632Ts1FLIIZ2+mpoTt2DjJaDvQPLdB4=
Subject key identifier:   3B:A2:87:12:18:CF:B8:1A:C1:2B:66:2E:AF:4B:0C:78:04:7B:63:2A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       F6
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/O6KHEhjPuBrBK2Yur0sMeAR7Yyo.roa
Signing time:             Tue 27 Oct 2026 05:36:34 +0000
ROA not before:           Tue 27 Oct 2026 05:36:34 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     6282
IP address blocks:        133.157.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 27 05:36:34 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=3BA2871218CFB81AC12B662EAF4B0C78047B632A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:3e:15:38:0e:87:c6:fa:ce:b0:9e:75:0a:
                    c1:c3:b4:c9:bf:9c:12:40:65:14:34:87:19:62:f6:
                    e8:7e:9c:80:e4:af:e5:65:4b:7e:a1:fe:ff:57:05:
                    79:c5:0c:0c:58:ae:2c:6b:db:37:71:da:4e:af:63:
                    9e:6c:a9:56:e7:0f:2c:d4:e7:cc:4d:b3:43:9e:3d:
                    7f:2e:36:41:f7:5d:a3:b0:07:58:99:fa:1a:85:ae:
                    4a:52:87:5f:63:c5:b9:58:73:e2:de:f3:b3:34:75:
                    c2:43:97:09:71:4d:06:18:42:3a:55:56:b0:2f:e6:
                    35:21:7e:29:6e:f5:a1:4d:44:c3:d2:1e:b8:81:3a:
                    8f:79:b7:1c:68:2a:59:71:cd:93:98:41:53:11:ab:
                    42:75:f6:a0:4e:ef:93:e4:6e:d3:a0:50:38:30:61:
                    95:01:f0:cd:1e:f5:22:70:0d:0e:06:9b:19:8b:33:
                    d1:ed:a6:c2:00:21:10:ff:70:ae:70:dd:27:94:f2:
                    e3:a7:6c:72:15:51:77:a1:fe:7c:e9:79:26:6b:91:
                    fc:63:74:4c:0b:3c:f4:be:2d:77:a4:d5:4e:5e:4a:
                    e5:8d:48:16:37:e3:52:4a:a3:28:33:ab:43:f0:03:
                    a7:76:3e:05:f2:1c:4b:98:8e:b5:25:6f:0d:6c:79:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:87:12:18:CF:B8:1A:C1:2B:66:2E:AF:4B:0C:78:04:7B:63:2A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/O6KHEhjPuBrBK2Yur0sMeAR7Yyo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:bc:6e:b1:69:cb:d9:21:cf:b3:9f:a2:59:ee:6a:17:47:
         f0:b1:27:3f:96:bd:d8:ba:04:9e:6e:5c:ae:35:f0:56:ee:af:
         c4:4b:76:ce:50:42:f8:f0:5e:aa:a7:2e:49:50:d0:7b:75:dd:
         40:ca:cf:25:d4:8a:06:a2:05:74:f4:33:4c:ec:51:2e:d9:9e:
         f4:04:57:53:ee:90:aa:3c:d4:85:28:b2:5b:4b:f9:79:ed:a9:
         c4:c4:1c:17:19:2f:56:66:f3:be:14:0e:e2:07:c9:ee:5e:3a:
         a3:40:e8:7b:46:30:7c:9d:7b:a1:7b:3a:a6:bb:d1:fe:45:0d:
         ad:f7:af:d1:cb:a0:7b:9c:4d:38:9e:05:c2:dc:d5:ce:b9:a2:
         a5:0a:63:9f:28:9a:9c:8c:ec:01:c4:86:01:72:52:e8:8f:4b:
         f5:41:2b:ea:5c:86:47:1b:81:c6:3d:68:4b:8a:e4:99:d2:18:
         8d:fd:79:64:01:3f:b1:4c:83:af:bc:2e:be:27:2d:ca:48:a0:
         cc:a9:b3:8f:e0:61:7e:41:77:96:7d:23:fe:83:fb:39:0e:91:
         83:58:6d:3d:c7:ab:16:c9:ba:c9:0b:9b:fa:cd:e7:56:60:73:
         b1:cc:98:eb:38:84:ee:35:e7:5c:1d:ca:19:3e:11:2a:0a:da:
         8d:95:79:f8
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjEwMjcw
NTM2MzRaFw0yNzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCQTI4NzEyMThDRkI4
MUFDMTJCNjYyRUFGNEIwQzc4MDQ3QjYzMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxeT4VOA6HxvrOsJ51CsHDtMm/nBJAZRQ0hxli9uh+nIDkr+Vl
S36h/v9XBXnFDAxYrixr2zdx2k6vY55sqVbnDyzU58xNs0OePX8uNkH3XaOwB1iZ
+hqFrkpSh19jxblYc+Le87M0dcJDlwlxTQYYQjpVVrAv5jUhfilu9aFNRMPSHriB
Oo95txxoKllxzZOYQVMRq0J19qBO75PkbtOgUDgwYZUB8M0e9SJwDQ4GmxmLM9Ht
psIAIRD/cK5w3SeU8uOnbHIVUXeh/nzpeSZrkfxjdEwLPPS+LXek1U5eSuWNSBY3
41JKoygzq0PwA6d2PgXyHEuYjrUlbw1seTfxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUO6KHEhjPuBrBK2Yur0sMeAR7YyowHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL082S0hFaGpQdUJyQksyWXVyMHNNZUFSN1l5by5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFnRQwDQYJKoZIhvcNAQELBQADggEB
AE5JvG6xacvZIc+zn6JZ7moXR/CxJz+Wvdi6BJ5uXK418Fbur8RLds5QQvjwXqqn
LklQ0Ht13UDKzyXUigaiBXT0M0zsUS7ZnvQEV1PukKo81IUosltL+XntqcTEHBcZ
L1Zm874UDuIHye5eOqNA6HtGMHyde6F7Oqa70f5FDa33r9HLoHucTTieBcLc1c65
oqUKY58ompyM7AHEhgFyUuiPS/VBK+pchkcbgcY9aEuK5JnSGI39eWQBP7FMg6+8
Lr4nLcpIoMyps4/gYX5Bd5Z9I/6D+zkOkYNYbT3HqxbJuskLm/rN51Zgc7HMmOs4
hO4151wdyhk+ESoK2o2Vefg=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:48 2026 by rpki-client