Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/gtzrtdbWVJgXh75UIhNrFVaTj5Q.roa
File:                     gtzrtdbWVJgXh75UIhNrFVaTj5Q.roa (raw, json)
Hash identifier:          59wE3WaBhymP53Ghc5dgHRy03Xv7pX2jRyow+v9BhDw=
Subject key identifier:   82:DC:EB:B5:D6:D6:54:98:17:87:BE:54:22:13:6B:15:56:93:8F:94
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       E0
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/gtzrtdbWVJgXh75UIhNrFVaTj5Q.roa
Signing time:             Wed 14 Oct 2026 09:11:21 +0000
ROA not before:           Wed 14 Oct 2026 09:11:21 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 14 09:11:21 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=82DCEBB5D6D654981787BE5422136B1556938F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:00:4b:d9:63:e2:d3:ae:f2:40:c4:e2:11:
                    46:d4:6f:9b:3c:b4:66:db:cd:ef:1f:ed:e7:8b:cc:
                    21:81:e7:8f:e9:73:33:54:66:2f:94:95:64:2e:df:
                    3d:59:8f:42:21:6c:93:f2:d2:bd:62:9d:57:9c:7a:
                    46:e3:a8:ee:94:2d:de:0b:c2:98:77:21:0e:a0:de:
                    19:78:a9:04:71:ff:09:a7:0f:f2:16:ee:00:bf:b0:
                    68:64:f4:e3:18:00:79:e5:f4:72:cf:62:53:26:2c:
                    e6:ea:70:40:3f:73:a1:e1:4c:1b:e5:9f:4a:d3:a5:
                    a0:ad:05:80:5e:62:e1:ac:d7:53:bb:92:fe:7b:72:
                    b0:a0:b1:ba:31:1b:06:77:ca:67:bf:cc:62:79:b6:
                    a9:e0:ad:63:39:cd:a4:0e:d1:ad:6b:27:ea:05:a0:
                    48:e7:4b:f5:b4:98:07:05:95:49:da:73:a5:38:c5:
                    3d:85:7f:74:41:7c:b7:0c:01:b3:c7:df:37:ef:0d:
                    d8:f1:10:9c:5f:da:5a:2f:f6:c1:9f:88:5b:b1:22:
                    da:24:ef:52:e3:b2:f0:b8:73:ad:8c:7f:23:af:de:
                    ee:95:b7:b2:2f:85:8f:78:c4:75:37:6c:22:d8:3b:
                    4f:32:e0:c1:13:5c:81:62:73:1e:31:2e:4f:49:e2:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DC:EB:B5:D6:D6:54:98:17:87:BE:54:22:13:6B:15:56:93:8F:94
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/gtzrtdbWVJgXh75UIhNrFVaTj5Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:cc:ab:07:4d:61:19:e1:a7:f0:ae:03:89:54:fc:86:46:
         80:d2:d2:59:6c:51:e0:98:07:20:ee:13:26:12:24:67:2e:c8:
         a0:f2:a3:5f:ca:ce:09:89:cd:e4:42:a8:06:fb:73:31:79:1e:
         e7:53:24:ba:be:cd:45:2e:5d:79:0a:93:d2:89:de:6b:d1:bb:
         44:cc:2b:8e:0f:d3:78:41:80:dd:33:d9:a0:de:58:12:f7:48:
         a2:37:53:74:f9:c2:5a:11:08:d6:ac:6d:57:78:43:73:21:48:
         aa:9f:00:e0:20:47:e2:0c:d7:5e:8f:c1:18:32:c0:94:16:4b:
         99:93:fd:0d:a5:f8:6b:3b:ef:d8:22:08:d3:c6:00:bf:17:f3:
         6e:0e:7b:f7:35:99:19:21:60:80:0e:46:32:8f:15:d7:f3:07:
         30:3e:b4:77:85:3a:a1:75:32:f1:60:3e:b3:a2:32:91:65:4d:
         32:bc:29:31:b3:db:fd:c0:e0:d9:3e:1c:97:e7:97:16:82:cc:
         ee:a4:c9:f7:fa:32:4b:51:71:24:dd:28:24:bc:6c:ae:5a:6f:
         d3:7a:74:26:ba:2b:90:c1:bd:3e:be:ce:4b:d0:57:09:c8:af:
         6b:7b:84:eb:cd:df:42:a0:64:cb:6b:4b:1f:20:86:d7:a7:37:
         c9:9d:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:15 2026 by rpki-client