Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/W-Xazd6K_v5UCT-AJbF2OuaIeWo.roa
File:                     W-Xazd6K_v5UCT-AJbF2OuaIeWo.roa (raw, json)
Hash identifier:          3/+hRxiw+orWkCfe4k/u5kpN11cM4jo8FDLRFf+kW8U=
Subject key identifier:   5B:E5:DA:CD:DE:8A:FE:FE:54:09:3F:80:25:B1:76:3A:E6:88:79:6A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       BA
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/W-Xazd6K_v5UCT-AJbF2OuaIeWo.roa
Signing time:             Thu 24 Sep 2026 00:37:32 +0000
ROA not before:           Thu 24 Sep 2026 00:37:32 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     58325
IP address blocks:        133.157.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 10:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 24 00:37:32 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=5BE5DACDDE8AFEFE54093F8025B1763AE688796A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:23:6f:c4:61:03:77:ce:1b:0d:40:88:57:
                    da:f5:47:8e:5f:f0:e9:6d:ce:44:34:7e:a9:08:99:
                    d4:ea:94:ea:3c:44:da:7b:e1:b8:43:0c:9a:f4:ac:
                    d1:8a:52:7b:d8:00:8b:08:f8:da:ac:79:f9:54:3c:
                    4c:1a:e2:3e:64:2e:9f:73:64:69:5e:9b:32:d2:8e:
                    10:c9:ba:5f:99:88:87:de:fe:3b:ae:b0:89:5b:23:
                    e4:30:43:1e:f9:83:6d:35:1c:f4:d2:bf:f4:35:58:
                    74:65:35:74:ca:c8:60:0c:b1:1c:9b:e2:89:fc:44:
                    b5:86:5a:68:69:bc:05:62:e8:7f:cd:67:6e:82:a5:
                    63:2a:51:9e:a3:c0:7e:f4:2c:53:98:4a:ce:b3:92:
                    71:54:6e:ec:29:bd:0c:8b:b1:cf:2b:52:cf:62:ac:
                    e8:86:e3:bd:fe:ff:b7:4e:13:f5:96:34:a8:1e:3a:
                    52:e1:1f:83:d4:f4:0d:2a:73:11:ea:e1:05:16:76:
                    5d:38:59:f1:fe:00:b7:19:80:5d:d9:f0:e1:fd:7e:
                    62:fa:d6:7e:3a:16:e4:6f:8b:38:94:a7:16:98:fb:
                    38:f2:eb:ef:31:5d:92:10:a5:d5:bb:3d:5e:59:9d:
                    e0:d4:a5:52:58:13:af:b8:a8:23:38:c9:ee:f7:db:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:DA:CD:DE:8A:FE:FE:54:09:3F:80:25:B1:76:3A:E6:88:79:6A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/W-Xazd6K_v5UCT-AJbF2OuaIeWo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:11:a7:5c:b2:1a:1e:90:f1:98:22:39:1e:29:b3:00:c3:
         98:e1:7a:09:f4:15:2e:bc:b9:dc:a4:db:ad:51:8f:59:42:9e:
         50:97:90:5f:be:1e:03:8e:8c:7c:4b:b6:60:3a:d9:3c:6f:f4:
         b6:e2:54:ce:de:70:d3:19:79:8d:8a:e5:96:22:77:2f:e0:52:
         b5:c5:57:be:eb:d6:07:c4:94:6d:c7:4e:16:19:a3:60:cc:64:
         73:81:bb:01:f8:9f:ca:00:f2:1f:ff:9c:b3:97:07:0e:95:be:
         f0:a9:6b:d9:9b:b6:eb:61:f4:bf:c0:df:af:66:00:18:69:5d:
         88:1c:a5:96:69:b5:33:98:dd:64:7e:ba:28:f8:38:42:9e:1c:
         20:5c:60:80:d6:16:e9:5d:17:5a:ea:54:10:e7:2a:b3:46:f3:
         cf:59:b1:b1:26:51:60:91:b5:6f:2a:f9:e6:fd:ce:eb:39:36:
         85:bb:5e:4e:f3:ff:82:f2:ea:26:82:d0:27:a3:a5:26:27:33:
         9c:70:f5:5c:bd:af:e2:5d:58:66:d5:62:da:b9:da:0b:bd:50:
         0e:a1:d3:be:18:64:1f:c8:3f:ff:17:0e:ac:6b:f2:b2:a1:36:
         77:53:f7:58:a9:b0:3d:f0:3d:54:f9:d4:38:d4:8b:0f:a5:27:
         d7:ee:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:59:18 2026 by rpki-client