Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/Z4P75_-h-UznUvG8_WzRkGA1Cro.roa
File:                     Z4P75_-h-UznUvG8_WzRkGA1Cro.roa (raw, json)
Hash identifier:          DK6484dYfvMrGGMkD/VWAn14ge2RuYvjM4Djg6crp90=
Subject key identifier:   67:83:FB:E7:FF:A1:F9:4C:E7:52:F1:BC:FD:6C:D1:90:60:35:0A:BA
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       E5
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Z4P75_-h-UznUvG8_WzRkGA1Cro.roa
Signing time:             Wed 14 Oct 2026 09:11:22 +0000
ROA not before:           Wed 14 Oct 2026 09:11:22 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 14 09:11:22 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=6783FBE7FFA1F94CE752F1BCFD6CD19060350ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:37:d6:84:fe:34:1a:39:6a:7d:f6:1d:57:
                    60:36:5c:8d:d6:72:e5:29:a4:c2:47:d6:b7:18:04:
                    0b:e6:12:e4:d0:50:3d:03:30:49:f3:aa:5b:d8:95:
                    f6:24:37:ae:01:c2:ac:49:e2:98:bc:ab:48:e3:03:
                    af:73:18:0c:48:18:0b:48:bf:49:f4:1e:47:8d:ed:
                    9d:fa:dc:e7:9d:7f:a3:21:92:70:fc:8a:84:93:29:
                    d6:4a:5b:5e:fb:e4:2d:33:7d:ba:29:82:15:0c:1b:
                    8a:0c:41:b2:99:69:87:df:1a:a8:a5:f8:29:61:f6:
                    89:5c:e3:a6:b1:db:7b:c8:00:00:cd:f6:cb:2b:35:
                    f4:92:0b:b6:47:f3:41:1f:5e:8b:48:9d:3b:41:09:
                    04:92:f5:42:26:8b:c9:f1:b9:8f:cf:60:9c:fb:cc:
                    23:f8:bb:7f:d5:39:25:65:0c:e8:fb:f9:cc:7f:4e:
                    e2:0b:26:c5:ef:12:0e:54:8c:4a:c7:b4:66:8a:92:
                    81:85:36:ca:e2:99:3b:78:71:2a:dd:05:63:19:d0:
                    fb:bd:8a:37:ed:04:75:a0:ee:4c:42:b8:8d:13:d0:
                    a6:96:13:26:cd:42:82:10:99:fe:05:d9:8b:6d:5e:
                    80:d2:58:9d:b1:23:ad:74:95:e6:02:e9:f8:1d:79:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:83:FB:E7:FF:A1:F9:4C:E7:52:F1:BC:FD:6C:D1:90:60:35:0A:BA
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/Z4P75_-h-UznUvG8_WzRkGA1Cro.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:ef:74:3e:5b:53:21:27:18:d9:62:2c:63:7d:67:1b:9a:
         cb:8e:67:68:1f:a4:88:64:25:87:f1:91:5f:2e:81:a2:8a:e5:
         1a:db:43:0c:1d:29:4b:8a:9f:6e:06:40:0c:1a:5b:91:ff:9f:
         96:c1:84:03:07:7a:d0:51:83:e2:17:60:93:ba:18:59:d9:df:
         79:9e:05:79:f3:d4:9a:36:9a:28:3b:38:e6:30:cc:6d:23:77:
         68:b3:b5:8e:3a:38:c5:d8:df:12:73:21:c0:a5:2e:6f:2f:e1:
         2a:2f:3c:39:e6:d7:dc:61:c3:ef:48:be:e5:89:8e:6e:e0:fc:
         b7:9a:94:3f:70:a9:91:28:63:2f:43:70:5c:71:de:4f:fa:52:
         e6:b5:d7:e0:11:79:7e:71:6a:a5:8f:87:88:3c:e4:cb:aa:d9:
         dc:e8:3f:65:9e:82:d6:86:32:d2:0f:6c:c5:87:11:f9:51:19:
         38:b6:ba:eb:c0:81:ae:8e:90:7b:b1:e3:24:29:99:16:42:2b:
         e2:a3:ca:b8:bd:eb:4b:0a:d4:3b:f6:48:8f:c4:a7:51:ed:b8:
         84:d0:a6:ff:5d:5f:7f:0d:a0:3e:b8:fb:69:c8:59:75:5f:10:
         c6:23:53:65:9f:4b:c6:62:62:6a:04:90:5a:fe:fd:68:7c:73:
         38:f3:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:24 2026 by rpki-client