Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/-F5XZ0TFngUyLtqsdrTnp3ijyuQ.roa
File:                     -F5XZ0TFngUyLtqsdrTnp3ijyuQ.roa (raw, json)
Hash identifier:          FPAK0SRULaqR0yv2YgVLnTN0sLbwCiAt4LF1Jb2Eajw=
Subject key identifier:   F8:5E:57:67:44:C5:9E:05:32:2E:DA:AC:76:B4:E7:A7:78:A3:CA:E4
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       81
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/-F5XZ0TFngUyLtqsdrTnp3ijyuQ.roa
Signing time:             Fri 14 Aug 2026 09:09:03 +0000
ROA not before:           Fri 14 Aug 2026 09:09:03 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:09:03 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=F85E576744C59E05322EDAAC76B4E7A778A3CAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:c5:ff:24:9d:a7:2c:12:9f:7b:1c:02:18:
                    6c:d2:cd:2b:e4:f7:b1:3d:a4:b7:0a:36:68:bf:43:
                    f9:26:83:14:a0:39:dc:f5:27:a5:cb:eb:38:f2:d7:
                    b1:05:3e:e9:80:37:70:da:ff:1f:8f:01:59:72:1a:
                    0a:94:42:db:25:dd:c3:3c:43:e5:ec:cd:4e:9a:cd:
                    b8:a7:8f:23:d7:b1:f9:8c:55:be:12:b9:66:c9:e5:
                    8a:49:7c:b9:92:43:9e:9a:6c:df:bc:99:4c:be:a9:
                    9d:58:c3:ee:00:66:b2:58:ea:86:43:4a:26:31:5e:
                    32:af:0c:82:9d:ec:54:ba:ac:f1:5f:f7:6e:d2:98:
                    32:64:3d:d8:b7:02:af:b6:e8:e8:a4:7a:96:5d:72:
                    ff:3b:92:68:1b:fb:d1:63:34:0c:d8:91:10:b7:58:
                    27:a8:ae:e7:5b:35:38:75:e0:70:46:1b:6f:3c:80:
                    60:c4:41:4b:c9:0d:e4:92:50:31:d9:d2:2b:ef:f7:
                    36:dd:4c:d9:17:f7:9a:a0:25:32:99:f0:da:0e:30:
                    c6:32:4d:91:4f:26:0d:4f:1f:bd:b2:e2:9a:40:b2:
                    fc:07:45:bc:ae:c2:32:7a:0e:83:6b:91:d4:67:be:
                    d9:00:01:4e:30:01:82:06:90:26:64:d4:96:22:80:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5E:57:67:44:C5:9E:05:32:2E:DA:AC:76:B4:E7:A7:78:A3:CA:E4
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/-F5XZ0TFngUyLtqsdrTnp3ijyuQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ea:0a:b6:67:80:69:25:fa:85:3a:56:bd:ce:7a:dc:89:ce:
         8c:75:01:d1:4c:b6:a9:19:44:86:98:6d:bc:62:27:37:f9:d5:
         74:c0:e3:51:07:71:5e:25:a6:5f:0c:19:48:27:19:fc:11:a1:
         a3:c2:b7:ed:32:e0:52:a4:a2:39:49:3c:da:12:b0:aa:ab:d2:
         99:48:78:5e:e9:f2:0d:a8:46:8a:2a:5c:e4:85:55:7c:86:78:
         cf:03:06:f5:76:9b:a1:64:f6:ce:44:59:ad:4e:6b:f3:0f:17:
         0e:91:ba:65:2d:c6:0b:7d:8a:0d:32:9e:0c:c7:fa:06:fe:ca:
         d4:4f:7b:12:b8:5b:e0:25:55:71:2c:f6:15:a0:bb:12:a5:93:
         18:b8:33:1d:af:f8:ac:5f:b0:c6:8b:bb:6b:9a:5a:22:63:87:
         ba:15:c5:ae:62:db:62:05:7b:9f:41:84:8d:78:77:d1:fb:a7:
         08:dd:72:f9:b4:3f:af:3c:9e:fa:89:7f:0f:74:a1:70:d0:04:
         bd:af:c0:45:bc:e9:63:62:f0:53:6a:32:fc:c8:de:51:09:95:
         a6:ae:45:05:f2:82:a5:ec:0a:aa:c0:ee:43:cd:78:64:73:a2:
         a6:b9:1f:3c:67:02:ea:ee:7b:a1:23:64:34:5b:0d:83:2a:db:
         91:89:de:29
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw
OTA5MDNaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY4NUU1NzY3NDRDNTlF
MDUzMjJFREFBQzc2QjRFN0E3NzhBM0NBRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1QMX/JJ2nLBKfexwCGGzSzSvk97E9pLcKNmi/Q/kmgxSgOdz1
J6XL6zjy17EFPumAN3Da/x+PAVlyGgqUQtsl3cM8Q+XszU6azbinjyPXsfmMVb4S
uWbJ5YpJfLmSQ56abN+8mUy+qZ1Yw+4AZrJY6oZDSiYxXjKvDIKd7FS6rPFf927S
mDJkPdi3Aq+26OikepZdcv87kmgb+9FjNAzYkRC3WCeorudbNTh14HBGG288gGDE
QUvJDeSSUDHZ0ivv9zbdTNkX95qgJTKZ8NoOMMYyTZFPJg1PH72y4ppAsvwHRbyu
wjJ6DoNrkdRnvtkAAU4wAYIGkCZk1JYigHIBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU+F5XZ0TFngUyLtqsdrTnp3ijyuQwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxLy1GNVhaMFRGbmdVeUx0cXNkclRucDNpanl1US5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnSkwDQYJKoZIhvcNAQELBQADggEB
AKnqCrZngGkl+oU6Vr3OetyJzox1AdFMtqkZRIaYbbxiJzf51XTA41EHcV4lpl8M
GUgnGfwRoaPCt+0y4FKkojlJPNoSsKqr0plIeF7p8g2oRooqXOSFVXyGeM8DBvV2
m6Fk9s5EWa1Oa/MPFw6RumUtxgt9ig0yngzH+gb+ytRPexK4W+AlVXEs9hWguxKl
kxi4Mx2v+KxfsMaLu2uaWiJjh7oVxa5i22IFe59BhI14d9H7pwjdcvm0P688nvqJ
fw90oXDQBL2vwEW86WNi8FNqMvzI3lEJlaauRQXygqXsCqrA7kPNeGRzoqa5Hzxn
Aurue6EjZDRbDYMq25GJ3ik=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:54 2026 by rpki-client