Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/r4YflMVjdjfsT2iNnl6efl8q2II.roa
File:                     r4YflMVjdjfsT2iNnl6efl8q2II.roa (raw, json)
Hash identifier:          6eeHgaCAGItUtwP0401GUfM64H9i544bm1rFbahV9hk=
Subject key identifier:   AF:86:1F:94:C5:63:76:37:EC:4F:68:8D:9E:5E:9E:7E:5F:2A:D8:82
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       8D
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/r4YflMVjdjfsT2iNnl6efl8q2II.roa
Signing time:             Fri 14 Aug 2026 09:17:03 +0000
ROA not before:           Fri 14 Aug 2026 09:17:03 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        133.157.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:17:03 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=AF861F94C5637637EC4F688D9E5E9E7E5F2AD882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:44:2d:21:aa:8d:87:0f:1a:5b:fb:11:c7:
                    ff:33:84:73:8d:45:34:02:83:4d:c2:e9:90:69:55:
                    d7:71:9c:fe:cf:69:87:ea:aa:be:fc:07:84:ee:c8:
                    65:d0:11:b9:b5:e0:57:66:8f:0a:12:be:d5:7f:93:
                    81:2e:2b:7b:70:eb:78:2b:8b:7a:3c:73:c3:c3:8e:
                    3f:f7:8f:ad:90:16:72:de:fe:07:56:37:1e:eb:9a:
                    8d:5a:17:a1:ab:26:44:2a:8e:7e:56:ef:e7:e5:61:
                    f6:91:6b:e3:ef:e5:0a:0a:b5:a3:8c:c9:1a:27:b7:
                    c5:75:f1:c4:8c:b1:22:df:5f:36:a6:41:4e:e6:37:
                    4b:ac:71:09:c8:2c:7a:2a:11:53:81:f6:d8:ac:05:
                    be:ca:a0:48:98:0a:e0:5a:79:db:74:ab:f3:d2:f9:
                    c7:ce:c7:f7:22:7c:fb:b4:b0:fa:ed:60:86:ce:87:
                    c2:32:22:06:32:12:65:1d:9e:50:48:37:f9:d9:22:
                    32:ae:23:26:31:31:43:fc:71:f8:58:3f:a6:d5:87:
                    66:ae:a2:74:65:2a:57:c0:dc:44:39:7f:42:3c:48:
                    fa:30:5f:2e:09:4e:50:02:1d:59:53:17:18:1f:a4:
                    fa:a7:2c:8b:12:74:a8:3c:69:61:60:44:1d:7c:f7:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:86:1F:94:C5:63:76:37:EC:4F:68:8D:9E:5E:9E:7E:5F:2A:D8:82
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/r4YflMVjdjfsT2iNnl6efl8q2II.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:03:1a:68:fb:cc:77:65:b9:83:7d:39:39:59:24:7b:cd:
         65:8c:ea:7c:ce:fa:e2:c1:94:17:25:14:d1:19:e5:a7:fd:26:
         ac:c7:fb:06:f1:29:59:0a:f9:3f:85:7c:b5:26:5b:c6:85:09:
         71:4b:9d:f6:ea:4a:09:81:61:87:67:0c:bb:f1:22:5b:be:d5:
         ef:65:b9:a7:88:97:aa:24:f7:d1:ad:45:d5:4b:55:ca:66:d4:
         a6:1c:e3:1f:ea:98:d1:24:b6:90:d1:45:d3:e4:ba:d0:ba:ae:
         62:d3:1e:4d:e1:eb:c7:78:82:74:75:69:85:d2:5a:fd:e8:0b:
         a1:25:19:41:90:16:48:a0:54:d9:35:db:5e:9b:0e:e3:6f:78:
         51:8f:94:ce:f8:ac:f4:de:81:c7:b8:59:10:07:5e:c6:c5:1b:
         3f:bc:86:15:4d:d9:d3:3c:57:00:a7:d0:66:34:10:91:d5:48:
         1a:3f:05:7c:23:9c:30:37:47:ec:c1:26:8f:3f:75:2d:27:95:
         b3:36:15:37:8f:dc:bf:33:48:5a:a8:b8:ef:bf:ad:b3:4e:30:
         df:38:0a:0a:be:19:9e:c9:10:d7:98:f2:d4:87:4b:ed:01:5b:
         b0:31:75:d4:37:31:45:c7:92:5b:9f:59:d3:0b:2d:0f:fa:4a:
         89:0d:4a:18
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw
OTE3MDNaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGODYxRjk0QzU2Mzc2
MzdFQzRGNjg4RDlFNUU5RTdFNUYyQUQ4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0Q0QtIaqNhw8aW/sRx/8zhHONRTQCg03C6ZBpVddxnP7PaYfq
qr78B4TuyGXQEbm14FdmjwoSvtV/k4EuK3tw63gri3o8c8PDjj/3j62QFnLe/gdW
Nx7rmo1aF6GrJkQqjn5W7+flYfaRa+Pv5QoKtaOMyRont8V18cSMsSLfXzamQU7m
N0uscQnILHoqEVOB9tisBb7KoEiYCuBaedt0q/PS+cfOx/cifPu0sPrtYIbOh8Iy
IgYyEmUdnlBIN/nZIjKuIyYxMUP8cfhYP6bVh2auonRlKlfA3EQ5f0I8SPowXy4J
TlACHVlTFxgfpPqnLIsSdKg8aWFgRB1891ZNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUr4YflMVjdjfsT2iNnl6efl8q2IIwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL3I0WWZsTVZqZGpmc1QyaU5ubDZlZmw4cTJJSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnS8wDQYJKoZIhvcNAQELBQADggEB
AH9lAxpo+8x3ZbmDfTk5WSR7zWWM6nzO+uLBlBclFNEZ5af9JqzH+wbxKVkK+T+F
fLUmW8aFCXFLnfbqSgmBYYdnDLvxIlu+1e9luaeIl6ok99GtRdVLVcpm1KYc4x/q
mNEktpDRRdPkutC6rmLTHk3h68d4gnR1aYXSWv3oC6ElGUGQFkigVNk1216bDuNv
eFGPlM74rPTegce4WRAHXsbFGz+8hhVN2dM8VwCn0GY0EJHVSBo/BXwjnDA3R+zB
Jo8/dS0nlbM2FTeP3L8zSFqouO+/rbNOMN84Cgq+GZ7JENeY8tSHS+0BW7AxddQ3
MUXHklufWdMLLQ/6SokNShg=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:56 2026 by rpki-client