Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/XKCQgrvacHKmYqYGZphKGxaY4ho.roa
File:                     XKCQgrvacHKmYqYGZphKGxaY4ho.roa (raw, json)
Hash identifier:          UzhUuhRkCUdibMNgHetN4GAumLnIheojKbqWW8gL1iE=
Subject key identifier:   5C:A0:90:82:BB:DA:70:72:A6:62:A6:06:66:98:4A:1B:16:98:E2:1A
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       BE
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/XKCQgrvacHKmYqYGZphKGxaY4ho.roa
Signing time:             Thu 24 Sep 2026 00:41:54 +0000
ROA not before:           Thu 24 Sep 2026 00:41:54 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     58325
IP address blocks:        133.157.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 24 00:41:54 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=5CA09082BBDA7072A662A60666984A1B1698E21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:57:e3:65:93:4b:ea:49:7b:65:84:6a:08:0f:
                    cb:3e:b8:d8:56:6e:98:95:85:7d:14:d7:95:25:87:
                    0d:98:76:02:3f:8b:00:7e:c2:a6:88:d8:94:3f:cd:
                    b2:b1:d4:02:c8:d3:da:92:05:39:0e:66:eb:1d:51:
                    1e:f0:f1:41:95:17:c1:ab:9d:5e:3b:08:bf:d0:1c:
                    d1:c4:7b:22:1d:20:28:d4:65:04:6f:78:c3:15:48:
                    3f:a4:36:7a:81:26:bf:f3:97:8a:85:61:b1:b1:f1:
                    93:07:cb:0c:0a:a2:b7:96:a8:7c:ed:bd:6c:3c:01:
                    d9:97:14:7d:7b:97:e4:7c:dd:20:f9:40:de:e1:fa:
                    7f:a5:4f:95:dc:77:e5:95:72:1d:c9:49:c7:cb:91:
                    c3:db:9f:66:67:f9:e4:26:09:9c:e1:68:5b:3a:fe:
                    4e:cf:19:4f:13:87:f5:e2:68:ff:14:0f:2b:8e:b3:
                    8f:00:35:bd:c0:24:c6:22:1f:b1:2b:b9:ea:25:05:
                    70:15:0d:53:5b:2c:c1:8d:be:68:7b:d1:c8:3e:27:
                    9e:65:45:ed:30:1a:63:d6:a4:dc:4d:2e:69:34:f7:
                    01:63:ae:d6:9b:33:27:d8:48:6d:b4:99:dc:ae:78:
                    d5:84:32:7b:70:2a:62:1a:44:f3:11:64:0c:1e:4c:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:90:82:BB:DA:70:72:A6:62:A6:06:66:98:4A:1B:16:98:E2:1A
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/XKCQgrvacHKmYqYGZphKGxaY4ho.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:c1:ea:30:e2:d9:b6:1a:b5:97:97:0a:02:02:87:13:f6:
         63:bb:d0:54:27:06:c3:3f:19:f0:b3:27:20:81:ad:b7:ff:fb:
         65:70:59:58:b6:87:ec:77:d5:d2:4d:b8:43:60:44:70:9d:8c:
         c5:37:be:a1:31:d0:e6:f9:6d:31:23:5d:9c:2d:40:fa:78:36:
         a2:41:b7:cb:a5:bb:cf:22:63:2c:1e:7e:00:46:25:c7:b0:86:
         fc:ff:e2:fe:65:ba:29:5e:76:d8:02:41:87:da:0b:b5:de:3a:
         8d:d5:f8:a7:b2:77:86:39:06:db:b1:e0:ec:27:25:1f:b6:ab:
         c9:b6:6f:2c:6f:04:45:7c:55:8f:33:3c:4a:a2:28:a9:37:f7:
         72:fc:a9:95:90:bd:2c:a3:c0:6e:b2:a4:53:61:ca:d1:ed:57:
         ac:3d:7d:bf:77:db:10:62:2c:ef:98:b3:75:ef:33:09:38:f6:
         bd:3d:8a:c9:00:19:83:2b:ab:a5:7b:7a:9f:85:81:25:78:af:
         eb:6d:0b:97:a3:0c:b2:2e:a9:70:5d:05:32:0a:ba:84:21:05:
         53:3c:ad:07:37:32:3d:85:8b:28:cd:db:f3:bb:27:30:b7:1c:
         59:e0:50:c6:8b:ff:98:78:b0:62:10:a5:4c:03:72:ef:16:06:
         bb:33:05:54
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjQw
MDQxNTRaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDQTA5MDgyQkJEQTcw
NzJBNjYyQTYwNjY2OTg0QTFCMTY5OEUyMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkV+Nlk0vqSXtlhGoID8s+uNhWbpiVhX0U15Ulhw2YdgI/iwB+
wqaI2JQ/zbKx1ALI09qSBTkOZusdUR7w8UGVF8GrnV47CL/QHNHEeyIdICjUZQRv
eMMVSD+kNnqBJr/zl4qFYbGx8ZMHywwKoreWqHztvWw8AdmXFH17l+R83SD5QN7h
+n+lT5Xcd+WVch3JScfLkcPbn2Zn+eQmCZzhaFs6/k7PGU8Th/XiaP8UDyuOs48A
Nb3AJMYiH7ErueolBXAVDVNbLMGNvmh70cg+J55lRe0wGmPWpNxNLmk09wFjrtab
MyfYSG20mdyueNWEMntwKmIaRPMRZAweTE/jAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUXKCQgrvacHKmYqYGZphKGxaY4howHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL1hLQ1FncnZhY0hLbVlxWUdacGhLR3hhWTRoby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFnQgwDQYJKoZIhvcNAQELBQADggEB
ABCcweow4tm2GrWXlwoCAocT9mO70FQnBsM/GfCzJyCBrbf/+2VwWVi2h+x31dJN
uENgRHCdjMU3vqEx0Ob5bTEjXZwtQPp4NqJBt8ulu88iYywefgBGJcewhvz/4v5l
uiledtgCQYfaC7XeOo3V+Keyd4Y5Btux4OwnJR+2q8m2byxvBEV8VY8zPEqiKKk3
93L8qZWQvSyjwG6ypFNhytHtV6w9fb932xBiLO+Ys3XvMwk49r09iskAGYMrq6V7
ep+FgSV4r+ttC5ejDLIuqXBdBTIKuoQhBVM8rQc3Mj2FiyjN2/O7JzC3HFngUMaL
/5h4sGIQpUwDcu8WBrszBVQ=
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:43:12 2026 by rpki-client