Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/xBXS9RuL3dzHaDk-z2ui_EqorwA.roa
File:                     xBXS9RuL3dzHaDk-z2ui_EqorwA.roa (raw, json)
Hash identifier:          bVZgNLLb+M5+oYFG8Iwq1ihjh8th/bWr5pm/73xEMvE=
Subject key identifier:   C4:15:D2:F5:1B:8B:DD:DC:C7:68:39:3E:CF:6B:A2:FC:4A:A8:AF:00
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       D6
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/xBXS9RuL3dzHaDk-z2ui_EqorwA.roa
Signing time:             Wed 14 Oct 2026 09:06:55 +0000
ROA not before:           Wed 14 Oct 2026 09:06:55 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Oct 14 09:06:55 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=C415D2F51B8BDDDCC768393ECF6BA2FC4AA8AF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:50:0d:1b:c1:52:9b:73:13:44:92:1e:70:54:
                    aa:2d:a9:63:b1:2e:28:43:68:f8:9b:11:ff:93:16:
                    0f:23:be:ec:e6:15:f7:5f:45:2c:0b:fb:30:ed:5e:
                    bf:ae:70:84:ff:1f:12:7f:ab:4f:87:63:4c:0d:c7:
                    6d:40:a4:ae:13:6f:68:29:e5:a1:09:f1:17:b1:b5:
                    87:5b:6a:e8:65:38:55:c6:ae:cb:95:2c:e3:ef:6f:
                    cc:5a:9e:e1:4a:05:c0:60:44:48:a1:fe:df:d4:e2:
                    2c:a9:f3:70:b9:e9:81:24:0a:03:2f:ed:34:a2:dd:
                    d1:93:05:15:6f:9d:81:df:48:34:74:90:1a:81:d2:
                    c6:cb:58:1e:69:0d:f0:fd:c8:28:47:c9:cd:61:54:
                    10:fa:93:8c:08:30:96:75:37:83:73:0f:4f:91:7b:
                    45:65:39:79:cb:15:e9:42:5c:d0:9d:6e:8c:27:84:
                    7c:f8:0a:dd:f9:d1:67:b7:69:e7:c2:4f:0f:e8:db:
                    4c:13:77:b1:01:f4:7a:a9:b2:d5:db:94:73:91:7d:
                    6c:43:a2:48:e4:88:0c:26:ae:22:1d:6d:6d:4f:b5:
                    e2:13:b2:42:5d:c9:74:cd:2f:b1:3f:82:15:7f:45:
                    19:03:29:f2:76:eb:35:41:f5:3e:e2:96:22:a2:91:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:15:D2:F5:1B:8B:DD:DC:C7:68:39:3E:CF:6B:A2:FC:4A:A8:AF:00
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/xBXS9RuL3dzHaDk-z2ui_EqorwA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:76:22:48:69:26:c8:90:f3:fa:3f:48:0c:e1:bf:ac:dc:28:
         1d:93:d7:f7:bf:79:c6:92:6a:51:7b:3f:bd:68:98:44:51:c6:
         ce:60:ed:1b:40:91:92:e1:2d:f2:0c:03:25:5f:50:a0:58:09:
         e0:09:14:e9:b1:5d:b0:fc:e6:69:18:bd:04:18:34:b9:a1:aa:
         59:8f:96:60:54:61:bd:5b:54:89:2b:0f:e2:55:d1:ff:48:ee:
         84:7f:4e:fd:c7:0e:b6:8b:b1:b7:c9:e7:12:f3:5a:22:5c:db:
         91:62:5a:b2:99:2d:f9:6e:9d:b4:7c:30:cb:08:ae:0f:a4:21:
         96:d6:29:5e:c0:20:8f:13:ba:55:ce:73:ef:86:9f:c0:e5:91:
         ca:95:ad:21:f1:9e:2d:99:78:b0:c2:00:fd:48:ee:bf:d2:2f:
         be:96:3b:4f:21:89:94:16:64:df:9c:56:2c:8e:31:04:c8:7d:
         6f:92:01:1e:60:7f:a3:ee:8b:ec:a8:cf:87:09:90:62:74:8e:
         78:b4:f0:a1:de:ad:16:c2:88:b4:83:c1:82:7b:ff:ce:d2:76:
         d5:dd:9b:47:e0:c6:d6:79:03:4e:63:5d:6e:06:e9:b0:38:0d:
         e3:e8:5a:15:36:7b:1b:17:b6:66:f9:ec:03:e1:d1:a0:1c:56:
         91:7d:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:45 2026 by rpki-client