Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/wQ1IySCesTMRt-0oXocTFX801QQ.roa
File:                     wQ1IySCesTMRt-0oXocTFX801QQ.roa (raw, json)
Hash identifier:          swZOahGM+CkzLQjqrX/EY3zjFQThX6l6vy8k8V/kzfY=
Subject key identifier:   C1:0D:48:C9:20:9E:B1:33:11:B7:ED:28:5E:87:13:15:7F:34:D5:04
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       7C
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/wQ1IySCesTMRt-0oXocTFX801QQ.roa
Signing time:             Fri 14 Aug 2026 09:09:00 +0000
ROA not before:           Fri 14 Aug 2026 09:09:00 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 09:09:00 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=C10D48C9209EB13311B7ED285E8713157F34D504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:49:05:8c:43:a0:b9:60:d9:64:31:32:94:91:
                    fd:10:c9:9e:5c:76:14:95:67:4b:e0:3a:7f:e6:45:
                    a0:48:1d:74:6b:d3:fb:ec:5b:90:5a:55:97:54:2f:
                    2e:b2:69:e9:6b:99:53:cd:f0:d4:bd:ff:18:25:83:
                    ba:11:52:51:c8:1c:a0:e1:48:01:4e:e8:10:d7:02:
                    85:1f:3b:a7:d3:6e:d5:8d:8c:dc:d7:c0:ce:85:0a:
                    8e:09:5a:21:7e:9b:19:46:8c:d2:2b:27:8b:5b:1e:
                    4e:0e:01:26:63:2f:e9:6d:bd:14:f0:5c:fb:df:fa:
                    7b:5b:64:30:d5:d9:1f:b3:46:fc:47:90:34:7a:3e:
                    c1:61:14:e5:4f:37:43:18:a2:04:8c:d3:c1:b2:51:
                    83:ed:17:43:3c:92:a1:42:dc:01:47:92:70:3a:20:
                    f3:01:ba:f5:9d:16:da:9f:1b:7d:b2:50:f5:39:5a:
                    b4:02:fd:1c:d1:8a:7b:7d:f9:f8:bf:95:50:ca:78:
                    3c:ef:96:cc:f1:38:92:f0:b2:59:aa:79:c0:aa:ad:
                    74:24:e8:e6:30:53:23:60:f7:28:f4:51:e2:84:12:
                    92:da:37:39:c7:d2:35:49:26:be:62:34:83:08:8d:
                    00:d4:65:66:dc:41:1f:87:30:ac:88:04:74:90:a4:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:48:C9:20:9E:B1:33:11:B7:ED:28:5E:87:13:15:7F:34:D5:04
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/wQ1IySCesTMRt-0oXocTFX801QQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:59:ec:14:eb:fb:15:a9:d2:cb:56:cb:fc:af:08:6e:16:a5:
         70:23:95:6b:2a:6d:a6:53:f1:2e:14:be:49:25:43:05:35:22:
         d9:3d:ef:72:28:53:fa:ea:6f:5e:39:1e:6d:7c:5b:ea:f9:d1:
         4e:c7:57:c5:ab:b1:90:ac:52:00:e2:f2:9d:65:47:36:bc:9f:
         a9:f0:75:a3:a2:5e:2b:7e:13:d5:ff:6b:03:61:fd:ee:06:9e:
         86:71:61:4b:73:74:9f:cf:b8:12:c8:18:1a:0f:92:47:3d:c8:
         9b:15:3f:e5:14:5a:fb:7b:03:b3:7b:6b:1c:b3:9b:a3:7f:87:
         09:d1:30:4a:82:95:30:9a:60:57:a0:ec:32:b2:d6:8c:2e:1f:
         4f:11:e3:89:b7:ec:3c:d1:79:43:1c:97:6f:65:30:40:e2:c2:
         0a:46:f1:9e:f2:63:e7:ec:2c:a8:82:a1:8b:ec:37:03:ea:37:
         fe:6f:9a:39:61:ae:de:15:06:e5:6c:3f:1e:f8:5a:d0:e2:7e:
         c3:11:f8:7e:c9:f5:41:b9:b2:19:c0:1d:47:d6:1d:ec:f6:9a:
         79:96:06:90:40:9c:1b:a9:43:85:55:86:97:a1:34:91:31:c3:
         55:0d:8b:73:e6:03:8a:a5:5a:88:f9:25:8b:d5:5a:9b:7a:dd:
         ab:27:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:44:09 2026 by rpki-client