Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa
File:                     SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa (raw, json)
Hash identifier:          06lASmXE6AbNKLCorYR/YrfPgzgjbX8dp6adFNF7BXk=
Subject key identifier:   49:08:47:1D:CD:F3:B0:E0:44:05:D2:47:4E:91:F3:5B:B6:CE:DE:EA
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       89
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa
Signing time:             Fri 14 Aug 2026 09:17:00 +0000
ROA not before:           Fri 14 Aug 2026 09:17:00 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:17:00 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=4908471DCDF3B0E04405D2474E91F35BB6CEDEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:f7:14:9a:d1:95:3c:a9:29:f3:55:57:ce:
                    ba:2b:46:47:d6:e1:d1:06:d5:bd:dd:6e:c8:d6:b7:
                    f9:c0:44:72:2a:e2:50:87:86:95:7c:d9:44:ed:fd:
                    45:21:2a:a7:a5:5d:35:71:99:7a:77:19:ea:d2:24:
                    3d:a5:1e:7d:7d:97:c1:e1:b1:77:61:04:39:b4:9d:
                    1a:0d:fc:21:68:ef:5c:b4:84:9b:97:cd:fb:a3:63:
                    2a:b2:ab:d4:31:b2:ad:a8:74:c0:f6:f5:c2:ba:85:
                    e9:1a:cd:13:69:1f:24:cf:bf:27:8b:0e:6f:ef:c0:
                    4f:33:c4:ce:9d:54:8d:fa:39:0a:6e:80:9f:56:07:
                    24:d8:b8:60:97:cb:29:32:8c:0c:8b:48:c5:bf:d8:
                    4f:f9:0f:10:c2:1d:ff:8a:72:f8:e1:e8:a5:c7:1f:
                    00:1c:ba:14:3c:9a:4d:c9:ce:5a:2a:e7:ab:cf:f5:
                    c2:fb:e6:92:91:de:d4:87:4d:09:a0:4c:55:4b:25:
                    82:6e:b7:3a:77:b4:6e:73:8d:20:a6:0d:4b:70:17:
                    45:fb:7e:8b:3f:41:6a:53:ff:10:28:32:5a:0a:36:
                    27:30:7b:f0:6a:8f:7c:47:ce:04:e4:16:35:e8:1b:
                    15:44:4f:9b:8f:58:94:c7:63:9f:27:66:17:c3:b1:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:08:47:1D:CD:F3:B0:E0:44:05:D2:47:4E:91:F3:5B:B6:CE:DE:EA
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:19:a2:d8:dd:85:a0:db:2d:85:4b:e4:e6:a6:5b:7c:af:
         0f:34:e0:d1:82:15:1d:8d:fe:d1:ca:a7:a8:7c:f6:50:b1:b3:
         92:e9:81:d5:55:6e:b7:e2:36:76:02:95:bb:68:6f:36:6c:a4:
         22:1c:13:50:2c:da:f5:7a:e0:ad:76:8c:cb:d5:75:90:64:0b:
         d9:de:b5:80:5d:55:33:fe:b3:0d:c3:ef:5a:04:76:3c:21:c7:
         fa:22:8e:3c:c3:bf:a5:e0:3d:42:57:86:1d:42:65:e7:70:c3:
         10:53:57:f4:58:a1:20:50:21:c5:4d:01:fe:14:95:d2:a7:8d:
         55:c4:63:9a:f5:81:17:45:bb:db:3e:f3:4e:ad:38:b4:50:4c:
         e9:ed:be:0e:4b:ce:5d:ce:20:46:7d:77:18:c1:22:bb:0b:26:
         73:bb:d0:39:28:a9:78:0b:1e:d4:a6:ea:4a:96:de:8b:e9:f5:
         41:ba:d4:96:64:2e:c1:78:fc:e1:11:2b:dd:fa:e2:82:65:59:
         d6:2c:86:a1:97:da:04:c6:e2:e2:16:a4:55:f3:6e:28:7f:18:
         75:89:b6:5a:75:0f:2d:60:8d:a8:56:e2:fa:06:c2:68:b9:3c:
         e1:85:ed:9b:32:e4:b1:01:bc:02:1a:81:b2:46:82:e0:2e:e3:
         9b:b8:fe:bb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw
OTE3MDBaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5MDg0NzFEQ0RGM0Iw
RTA0NDA1RDI0NzRFOTFGMzVCQjZDRURFRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbgfcUmtGVPKkp81VXzrorRkfW4dEG1b3dbsjWt/nARHIq4lCH
hpV82UTt/UUhKqelXTVxmXp3GerSJD2lHn19l8HhsXdhBDm0nRoN/CFo71y0hJuX
zfujYyqyq9Qxsq2odMD29cK6hekazRNpHyTPvyeLDm/vwE8zxM6dVI36OQpugJ9W
ByTYuGCXyykyjAyLSMW/2E/5DxDCHf+Kcvjh6KXHHwAcuhQ8mk3Jzloq56vP9cL7
5pKR3tSHTQmgTFVLJYJutzp3tG5zjSCmDUtwF0X7fos/QWpT/xAoMloKNicwe/Bq
j3xHzgTkFjXoGxVET5uPWJTHY58nZhfDsdt1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUSQhHHc3zsOBEBdJHTpHzW7bO3uowHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL1NRaEhIYzN6c09CRUJkSkhUcEh6VzdiTzN1by5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnS0wDQYJKoZIhvcNAQELBQADggEB
ABksGaLY3YWg2y2FS+Tmplt8rw804NGCFR2N/tHKp6h89lCxs5LpgdVVbrfiNnYC
lbtobzZspCIcE1As2vV64K12jMvVdZBkC9netYBdVTP+sw3D71oEdjwhx/oijjzD
v6XgPUJXhh1CZedwwxBTV/RYoSBQIcVNAf4UldKnjVXEY5r1gRdFu9s+806tOLRQ
TOntvg5Lzl3OIEZ9dxjBIrsLJnO70DkoqXgLHtSm6kqW3ovp9UG61JZkLsF4/OER
K9364oJlWdYshqGX2gTG4uIWpFXzbih/GHWJtlp1Dy1gjahW4voGwmi5POGF7Zsy
5LEBvAIagbJGguAu45u4/rs=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client