Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/zUCo47r57P-0Ut5OJJa5CS-Us9U.roa
File:                     zUCo47r57P-0Ut5OJJa5CS-Us9U.roa (raw, json)
Hash identifier:          fuS7a+xyABAGFoVWg0RS5nivCrUbWEIqZSyKcH6DCOw=
Subject key identifier:   CD:40:A8:E3:BA:F9:EC:FF:B4:52:DE:4E:24:96:B9:09:2F:94:B3:D5
Certificate issuer:       /CN=3767DE73DD8A0E2A3FC2420DBB4851AF24B7D9F4
Certificate serial:       13
Authority key identifier: 37:67:DE:73:DD:8A:0E:2A:3F:C2:42:0D:BB:48:51:AF:24:B7:D9:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N2fec92KDio_wkINu0hRryS32fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/zUCo47r57P-0Ut5OJJa5CS-Us9U.roa
Signing time:             Fri 13 Nov 2026 08:10:34 +0000
ROA not before:           Fri 13 Nov 2026 08:10:34 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        192.76.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/N2fec92KDio_wkINu0hRryS32fQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/N2fec92KDio_wkINu0hRryS32fQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N2fec92KDio_wkINu0hRryS32fQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3767DE73DD8A0E2A3FC2420DBB4851AF24B7D9F4
        Validity
            Not Before: Nov 13 08:10:34 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=CD40A8E3BAF9ECFFB452DE4E2496B9092F94B3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:d7:3b:37:50:cb:fb:ab:3d:35:73:2d:3a:
                    27:72:a9:16:10:19:67:56:6f:b8:be:68:50:e6:4c:
                    9b:0a:37:04:db:82:ed:be:12:02:f1:d8:d4:03:70:
                    b5:6d:ef:9b:ef:e2:e6:61:2b:8f:4f:cd:48:6e:1c:
                    fb:25:1d:de:e7:fa:10:11:95:ec:b9:12:6e:05:77:
                    8e:66:4f:53:44:55:49:79:6e:2f:56:21:86:d8:85:
                    b5:03:46:f6:6f:a7:36:a6:5c:58:1a:c6:a5:7e:d3:
                    80:7d:3b:0b:52:b7:88:97:e1:ab:b6:39:ee:d6:b6:
                    12:04:e2:96:5a:cd:a6:43:df:66:de:b5:19:8f:61:
                    a5:43:1e:1f:98:01:a2:8e:f9:85:f4:8c:34:ff:55:
                    b2:4f:6c:b9:15:bd:54:ff:15:06:8d:55:3f:6c:e6:
                    d9:c0:5b:c5:db:7a:98:76:c5:1f:c0:bf:ba:a5:0d:
                    6f:5d:d1:98:15:99:26:80:bc:35:43:5c:78:0c:14:
                    ff:95:46:16:0a:60:23:63:68:71:a5:29:9b:4b:e6:
                    8c:b9:f5:09:ee:18:6f:5b:9c:33:5c:52:c0:0d:09:
                    8c:37:71:11:2c:e0:55:a9:45:59:0b:40:ae:e1:32:
                    c6:00:23:50:79:b2:c9:08:74:a4:f8:8a:42:98:eb:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:40:A8:E3:BA:F9:EC:FF:B4:52:DE:4E:24:96:B9:09:2F:94:B3:D5
            X509v3 Authority Key Identifier:
                keyid:37:67:DE:73:DD:8A:0E:2A:3F:C2:42:0D:BB:48:51:AF:24:B7:D9:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/N2fec92KDio_wkINu0hRryS32fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N2fec92KDio_wkINu0hRryS32fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/zUCo47r57P-0Ut5OJJa5CS-Us9U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.76.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:70:15:c3:21:90:14:12:32:76:bd:45:e0:ee:b6:66:86:2e:
         9c:ab:95:2e:88:6c:f0:a1:6f:ae:9a:51:d6:4b:b5:64:39:85:
         76:6d:d6:6e:0b:55:67:5c:c8:51:e2:aa:68:da:09:a8:77:db:
         f0:f1:91:a8:b0:bc:56:8c:74:5e:12:ba:95:7f:93:3c:b6:b4:
         bc:db:0b:56:b1:e2:1a:08:6c:dc:20:c4:a3:d5:81:55:a6:f6:
         cc:e6:d6:36:0c:61:e0:30:e4:10:2b:73:bc:95:f3:51:0c:f3:
         9d:9f:17:a2:ad:e0:19:02:e7:6c:4b:e0:c6:e9:79:db:c6:1a:
         c3:74:f6:3a:8c:5c:f9:3e:d9:70:9a:5c:a0:95:e1:a1:3a:81:
         f7:ce:ce:f7:a1:80:61:02:6d:02:41:81:d1:11:ee:5d:f5:42:
         db:cc:66:b1:35:58:98:26:19:63:ce:ec:d6:cb:34:dd:93:3f:
         c9:75:83:69:b9:7b:16:4a:6e:79:db:e1:7b:23:5d:cd:bb:01:
         2d:a4:3a:dd:8d:93:d3:e0:e3:ef:67:b2:5a:c2:59:44:18:f8:
         b7:de:bc:cc:b3:67:a5:d5:e0:77:c1:f0:9b:c2:3a:f2:f2:32:
         25:f5:02:41:98:b4:21:8d:7a:aa:37:ce:8c:9d:17:b6:6b:a9:
         4f:cc:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:45 2026 by rpki-client