Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/DSw7pBMmF6t4QsMVFjLCm5M12FE.roa
File:                     DSw7pBMmF6t4QsMVFjLCm5M12FE.roa (raw, json)
Hash identifier:          KTv7jT342wtL/XuBdtnv8+9MnlfcTYLt3DmeoV7l89Y=
Subject key identifier:   0D:2C:3B:A4:13:26:17:AB:78:42:C3:15:16:32:C2:9B:93:35:D8:51
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       9A
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/DSw7pBMmF6t4QsMVFjLCm5M12FE.roa
Signing time:             Fri 14 Aug 2026 09:31:01 +0000
ROA not before:           Fri 14 Aug 2026 09:31:01 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:31:01 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=0D2C3BA4132617AB7842C3151632C29B9335D851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:3c:14:bc:d1:ae:ea:ec:ac:98:bc:03:6d:
                    c9:1a:76:3c:1c:1a:75:22:0d:e4:67:f8:33:e5:58:
                    a2:06:c0:51:ff:f7:f9:cf:ef:83:bf:94:57:d2:b5:
                    65:28:2e:9a:8c:46:3f:06:65:9a:6b:2b:9f:b3:07:
                    ea:33:c1:b7:6a:41:45:53:c9:9b:09:96:56:46:a5:
                    bf:75:a5:74:f2:21:29:04:1e:bf:ce:02:0c:73:b8:
                    78:13:4b:8c:4e:54:4e:83:51:fa:59:6d:4e:35:05:
                    02:00:ec:fb:61:88:7b:52:91:83:32:63:f8:da:7a:
                    cc:14:cc:15:52:0d:f6:35:35:df:d8:84:4e:32:56:
                    2b:b2:16:66:94:8b:90:2b:11:37:e2:03:0c:a1:5d:
                    b6:d9:93:5c:c0:d2:ff:93:16:9a:02:2b:7b:93:51:
                    eb:cb:97:89:f1:24:14:a3:2d:64:cb:81:a2:4d:d4:
                    a7:43:23:00:bc:5c:91:91:b6:1e:40:a5:4a:db:3a:
                    3c:01:9f:2a:1c:f2:b0:16:70:2a:0c:7f:f0:3f:8f:
                    e5:b5:79:ea:5f:8b:d8:48:6c:bd:8f:4a:55:55:dd:
                    db:08:e9:2e:06:f1:42:30:0c:59:39:7a:54:93:b9:
                    66:53:9d:02:b3:3b:b8:a2:2e:f9:7b:23:69:7a:4a:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:3B:A4:13:26:17:AB:78:42:C3:15:16:32:C2:9B:93:35:D8:51
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/DSw7pBMmF6t4QsMVFjLCm5M12FE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:a2:48:ed:82:0c:8f:7f:52:b0:ad:ff:c7:b5:15:f8:30:
         e0:22:9f:fb:39:ca:22:ca:85:59:fd:f2:35:61:ae:fc:f5:cd:
         21:61:a0:39:41:b1:23:9d:1c:c5:0d:ba:02:fe:fa:50:49:b8:
         87:e2:41:f5:ba:93:fb:1c:82:d3:6a:1a:a1:72:81:92:21:31:
         8d:1c:04:b7:4c:b3:80:b3:a4:b9:26:05:82:bb:48:91:3b:d8:
         a0:a1:76:02:2a:bb:ab:62:32:86:41:96:07:05:dc:26:68:17:
         93:fe:cc:7c:2b:69:c2:57:29:e9:2e:5c:e5:ea:9d:01:3c:27:
         85:3f:c0:34:a5:2e:51:3c:8b:95:b2:de:70:96:4e:87:01:17:
         a1:81:f4:79:31:11:1b:a5:4e:2e:0b:8d:23:27:f9:e5:15:07:
         82:8d:97:24:b9:68:79:ea:94:e5:40:6e:c7:d4:b1:f3:96:cb:
         14:bc:8b:dd:1d:ef:aa:d8:d5:ba:4e:72:d9:85:53:c0:5c:44:
         0c:cb:81:3e:c0:22:ac:ee:cc:7f:3d:2f:12:72:fa:1c:12:2a:
         ca:4d:45:33:9b:79:59:26:95:e1:8b:48:63:0f:b8:d4:f5:fb:
         73:c0:9d:df:00:03:b6:de:6a:84:40:8e:4d:2c:25:9d:c2:1e:
         f2:2d:d6:fe
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw
OTMxMDFaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBEMkMzQkE0MTMyNjE3
QUI3ODQyQzMxNTE2MzJDMjlCOTMzNUQ4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvAzwUvNGu6uysmLwDbckadjwcGnUiDeRn+DPlWKIGwFH/9/nP
74O/lFfStWUoLpqMRj8GZZprK5+zB+ozwbdqQUVTyZsJllZGpb91pXTyISkEHr/O
AgxzuHgTS4xOVE6DUfpZbU41BQIA7PthiHtSkYMyY/jaeswUzBVSDfY1Nd/YhE4y
ViuyFmaUi5ArETfiAwyhXbbZk1zA0v+TFpoCK3uTUevLl4nxJBSjLWTLgaJN1KdD
IwC8XJGRth5ApUrbOjwBnyoc8rAWcCoMf/A/j+W1eepfi9hIbL2PSlVV3dsI6S4G
8UIwDFk5elSTuWZTnQKzO7iiLvl7I2l6So6VAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUDSw7pBMmF6t4QsMVFjLCm5M12FEwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL0RTdzdwQk1tRjZ0NFFzTVZGakxDbTVNMTJGRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnTYwDQYJKoZIhvcNAQELBQADggEB
AIS9okjtggyPf1Kwrf/HtRX4MOAin/s5yiLKhVn98jVhrvz1zSFhoDlBsSOdHMUN
ugL++lBJuIfiQfW6k/scgtNqGqFygZIhMY0cBLdMs4CzpLkmBYK7SJE72KChdgIq
u6tiMoZBlgcF3CZoF5P+zHwracJXKekuXOXqnQE8J4U/wDSlLlE8i5Wy3nCWTocB
F6GB9HkxERulTi4LjSMn+eUVB4KNlyS5aHnqlOVAbsfUsfOWyxS8i90d76rY1bpO
ctmFU8BcRAzLgT7AIqzuzH89LxJy+hwSKspNRTObeVkmleGLSGMPuNT1+3PAnd8A
A7beaoRAjk0sJZ3CHvIt1v4=
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:18 2026 by rpki-client