Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/WuEoLsCLZlJvEnvTvfHfON73gsw.roa
File:                     WuEoLsCLZlJvEnvTvfHfON73gsw.roa (raw, json)
Hash identifier:          l6yd0sFcs+yXs8HZCLqNhnmpc3RcVmfjY9GWCtU3nwg=
Subject key identifier:   5A:E1:28:2E:C0:8B:66:52:6F:12:7B:D3:BD:F1:DF:38:DE:F7:82:CC
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       BD
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/WuEoLsCLZlJvEnvTvfHfON73gsw.roa
Signing time:             Thu 24 Sep 2026 00:41:54 +0000
ROA not before:           Thu 24 Sep 2026 00:41:54 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 12:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 24 00:41:54 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=5AE1282EC08B66526F127BD3BDF1DF38DEF782CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:72:cd:d6:24:c6:20:23:dc:f0:47:e5:78:
                    d3:0b:0a:c0:1f:80:87:d8:f6:be:fb:8a:d5:1b:37:
                    d8:fd:da:0e:b4:e8:db:5f:43:5b:ed:82:31:d7:5e:
                    34:cf:b3:c8:17:ab:2b:72:28:3e:b0:cd:38:e7:1c:
                    26:ce:a9:e7:b7:59:75:89:52:e6:d5:f0:c1:58:9b:
                    81:a8:7f:b5:84:ef:cc:7a:cf:e8:6c:bb:e5:c8:ac:
                    a1:66:46:8b:42:e2:78:f1:7f:4f:8d:b4:4a:09:c4:
                    61:0f:bb:bc:cb:b1:7b:d6:4b:99:4b:39:c8:a5:61:
                    be:77:60:fd:81:af:bc:e1:7d:fe:9b:f5:2a:88:a8:
                    4b:f5:77:8d:95:11:58:b9:6f:53:be:5c:54:e3:dc:
                    89:14:f2:fc:e1:6f:ef:9c:01:99:d0:56:8f:d6:3d:
                    37:2b:23:e6:d0:ae:8a:3f:98:d9:14:c0:bc:c1:ce:
                    9d:03:bc:40:8b:8e:b2:98:f4:dd:f8:0b:6b:14:45:
                    a5:f3:83:6c:e7:d8:53:f0:82:1d:b2:0c:ef:50:a6:
                    c7:d9:66:5b:d5:3b:c2:7f:49:b9:a2:c8:80:61:02:
                    47:20:40:37:16:d6:c4:50:dc:66:76:6b:8f:e9:85:
                    44:7b:1a:94:13:43:fc:b4:ba:8d:7c:40:6c:5e:de:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:28:2E:C0:8B:66:52:6F:12:7B:D3:BD:F1:DF:38:DE:F7:82:CC
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/WuEoLsCLZlJvEnvTvfHfON73gsw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:76:d7:b4:c0:7b:8e:e9:b9:fa:6b:8b:e7:a8:15:02:e4:
         ce:e7:10:c4:29:a7:64:66:55:8c:43:a0:00:a5:66:37:57:21:
         2e:0f:37:87:6d:61:5f:c3:de:ac:8f:af:b9:d6:5a:cb:97:39:
         80:b8:b8:5f:96:3e:87:e0:6c:20:3a:2e:8f:c6:9f:be:03:9d:
         a6:45:7b:47:06:ca:f2:ed:c2:b9:fc:0e:26:59:f7:66:47:78:
         fa:49:a1:88:4e:ec:0a:b5:03:02:5a:fb:0b:53:d4:ad:fe:39:
         cf:a3:77:b5:75:a9:d8:2d:0e:05:98:1a:d7:cf:6b:76:cf:e9:
         d8:55:17:15:82:2f:8a:61:71:97:f5:f2:be:cf:c1:91:ed:db:
         7d:62:14:25:48:24:4e:f6:55:82:3c:b2:27:4a:15:5c:27:ed:
         9c:ac:ef:ca:02:eb:82:a1:5b:67:60:db:53:62:85:7a:7d:c0:
         ff:51:d0:1c:1c:e4:5a:84:7f:df:d0:17:3c:d0:3a:71:52:65:
         33:92:67:b4:4c:57:53:5b:ba:f1:e1:5b:88:0b:3e:16:b6:69:
         2f:93:fb:71:d9:03:37:a9:64:f0:3d:23:a4:03:e2:7e:6b:b7:
         3e:f1:1a:44:8d:b4:aa:a4:b7:ee:30:45:93:13:32:7e:f0:c8:
         1f:2d:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:36 2026 by rpki-client