Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/UxD51p8KJMjS4wQhdV684LJZxXs.roa
File:                     UxD51p8KJMjS4wQhdV684LJZxXs.roa (raw, json)
Hash identifier:          hCQ2/XKItFvt27DvMT4lm0wBnG3p9p8GuBAWhz46TTw=
Subject key identifier:   53:10:F9:D6:9F:0A:24:C8:D2:E3:04:21:75:5E:BC:E0:B2:59:C5:7B
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       83
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/UxD51p8KJMjS4wQhdV684LJZxXs.roa
Signing time:             Fri 14 Aug 2026 09:12:54 +0000
ROA not before:           Fri 14 Aug 2026 09:12:54 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:12:54 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=5310F9D69F0A24C8D2E30421755EBCE0B259C57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:ad:01:3a:31:42:f3:33:8a:dc:fc:a6:08:
                    f4:ec:a3:69:a8:4a:82:2d:22:9c:18:4f:1a:12:a1:
                    a5:83:a1:28:41:92:14:00:91:f4:88:e2:2e:96:56:
                    08:bb:8e:09:8b:36:87:b6:bf:36:d2:02:93:a3:9d:
                    b5:c1:ed:37:f1:58:ec:51:f8:d3:a3:20:6a:14:38:
                    3a:d7:e1:7b:05:6d:3a:3a:8a:f7:74:0f:8b:1c:20:
                    6c:13:48:6b:a2:25:5b:85:c8:df:cf:7f:66:11:b8:
                    3f:a2:39:cb:e5:c4:60:50:a2:9b:48:41:bd:04:e6:
                    2c:21:8f:8d:93:47:cb:30:91:31:5f:18:25:af:99:
                    d5:13:a8:fb:d8:6c:48:da:80:7b:d6:2c:8c:2f:3d:
                    3a:8e:94:71:56:2e:95:b2:69:68:41:aa:2d:61:0c:
                    a5:f1:53:ef:3c:5e:b6:3b:d4:d9:d0:b7:36:54:22:
                    b7:87:b8:f8:51:d9:04:e9:c5:9a:f6:7d:54:ed:b0:
                    6a:84:75:72:7e:50:8a:a5:15:11:ee:bb:a1:f1:fa:
                    9b:84:5c:e2:42:46:06:5d:c8:62:76:a5:60:95:b8:
                    40:be:26:c2:8d:44:44:2a:8c:56:ee:99:63:cc:76:
                    8f:e6:fb:8a:cc:bb:65:b9:6c:11:b7:9f:ef:b2:ce:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:F9:D6:9F:0A:24:C8:D2:E3:04:21:75:5E:BC:E0:B2:59:C5:7B
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/UxD51p8KJMjS4wQhdV684LJZxXs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:07:ea:9a:f4:6f:14:48:39:f0:fb:cd:54:75:29:6f:62:ec:
         1d:29:cc:3c:00:dd:04:cd:ad:73:c5:c8:fe:9d:e4:56:5e:ce:
         ea:e7:c4:fc:b1:7a:7b:5c:e7:63:39:fe:e0:20:b5:2c:ce:15:
         ff:3d:af:19:35:c1:89:f5:a5:66:4a:f3:aa:5f:fa:8d:2b:06:
         32:32:5d:eb:76:95:71:32:bd:3a:a6:14:3c:ef:9f:fa:3c:0f:
         2b:0b:89:21:30:6d:35:23:f1:c3:e2:7c:86:48:31:fa:1e:07:
         e9:49:03:b2:68:95:fe:5c:38:70:c2:31:69:6b:b5:f7:1c:27:
         c3:c2:37:a9:6d:0c:90:a8:ce:14:2a:6d:dd:c1:ea:4c:01:38:
         d1:17:49:1d:21:56:db:17:21:40:70:78:d4:f8:ba:14:70:c3:
         74:5b:ca:6a:86:bc:b5:0e:27:f0:21:6b:f7:e6:cc:e6:72:e1:
         14:5f:d5:0e:9f:5e:10:54:85:67:b0:0c:b7:78:d8:a9:53:f9:
         e3:a4:a4:74:e0:4b:22:31:bb:21:2d:c3:ff:ba:9a:47:a7:4f:
         c3:b3:95:21:c3:5b:80:9a:09:88:3f:e9:6c:a0:7b:82:67:40:
         62:1a:ef:f6:e8:27:f7:d4:86:de:5f:e1:da:66:27:b0:bb:f4:
         16:b0:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:14 2026 by rpki-client