Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/z-wWuK_zmeO2a5RM2GdueyMv-A4.roa
File:                     z-wWuK_zmeO2a5RM2GdueyMv-A4.roa (raw, json)
Hash identifier:          QrOSLhVtKlyNyV7tf3PO1Igs71nO2xQRsxLKN645mX4=
Subject key identifier:   CF:EC:16:B8:AF:F3:99:E3:B6:6B:94:4C:D8:67:6E:7B:23:2F:F8:0E
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       6C
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/z-wWuK_zmeO2a5RM2GdueyMv-A4.roa
Signing time:             Fri 14 Aug 2026 08:40:41 +0000
ROA not before:           Fri 14 Aug 2026 08:40:41 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     7529
IP address blocks:        133.157.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Aug 14 08:40:41 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=CFEC16B8AFF399E3B66B944CD8676E7B232FF80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:65:73:a8:ea:6f:0b:ef:09:77:1c:af:ea:
                    7f:89:04:60:cb:d3:30:7a:3c:3e:83:f4:1e:73:1a:
                    32:cb:5a:03:3f:e2:e4:da:c3:16:e0:ee:d9:da:28:
                    0e:c3:ad:fb:11:2b:76:af:87:af:56:75:02:cb:dd:
                    a3:35:cc:78:0c:72:58:7c:53:53:df:2c:0c:fe:38:
                    77:c2:bd:28:17:e5:1b:0b:97:9c:17:58:57:43:56:
                    87:bf:3f:45:76:06:2a:75:82:78:e2:52:3a:ae:f7:
                    20:fb:60:d7:c9:1a:0b:b5:c9:da:61:c2:4c:bb:16:
                    97:a2:e7:e8:ee:92:cb:e9:fa:45:e1:8d:4b:04:58:
                    ff:64:1a:b0:d9:1d:cd:a3:ab:7d:af:d0:07:ef:0b:
                    50:4e:a1:66:56:90:49:7a:b5:27:1b:bd:da:bc:49:
                    05:7b:f2:9a:82:cb:cc:36:56:d9:3e:72:e3:5b:14:
                    ca:ae:47:73:82:35:46:fb:0d:0a:21:fa:55:1a:bb:
                    64:f2:ac:49:0e:cf:e1:50:02:5c:dd:dc:2c:10:68:
                    e5:3d:35:fb:3e:44:7d:46:32:98:e1:f7:b4:e6:92:
                    1f:d8:ad:b8:ec:5a:4d:e2:fe:1d:cc:1c:21:68:0a:
                    ce:dc:e1:07:fb:f2:75:05:98:a4:89:8d:84:43:84:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EC:16:B8:AF:F3:99:E3:B6:6B:94:4C:D8:67:6E:7B:23:2F:F8:0E
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/z-wWuK_zmeO2a5RM2GdueyMv-A4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:4f:c4:99:51:3c:c3:13:de:81:95:47:53:49:aa:9f:b7:
         e8:30:b5:30:73:64:85:7a:f0:95:7a:48:bf:0a:72:80:7c:a7:
         d5:01:99:12:88:16:67:af:3a:ee:85:37:e5:4d:09:72:66:0e:
         e4:9e:34:fc:a2:2b:3f:ab:7f:9d:e1:c9:c3:97:ef:06:16:27:
         a5:86:06:93:f5:e9:82:ee:6b:95:a1:3f:94:c9:d8:0b:a1:79:
         32:8b:10:e4:13:40:09:f7:72:8c:be:33:f3:30:a9:e2:99:be:
         08:0e:f8:a8:00:7a:f3:ce:31:fc:9d:0e:00:0e:0c:12:b4:04:
         42:41:65:30:4b:c1:8f:bf:a0:64:68:c2:89:09:c9:7a:19:5c:
         9c:b5:1c:44:b6:9a:39:4d:b0:d7:30:ac:20:f1:f4:83:11:a4:
         eb:4a:17:56:cd:0c:18:cb:aa:55:00:41:72:3b:c1:ad:79:ca:
         d8:c3:94:1b:7d:dc:2a:42:f5:ea:29:b1:9b:cb:77:fa:fd:34:
         97:2c:fd:1b:de:2c:21:70:25:18:cd:7a:22:81:e0:a7:13:20:
         99:0e:18:3b:c3:10:90:23:3c:18:fe:47:7e:1e:51:fe:fc:0d:
         7b:60:86:7b:5a:3a:8e:ac:77:ea:89:cf:45:3b:1a:c1:62:df:
         29:83:da:3e
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDgxNDA4
NDA0MVoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0ZFQzE2QjhBRkYzOTlF
M0I2NkI5NDRDRDg2NzZFN0IyMzJGRjgwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALC6ZXOo6m8L7wl3HK/qf4kEYMvTMHo8PoP0HnMaMstaAz/i5NrD
FuDu2dooDsOt+xErdq+Hr1Z1AsvdozXMeAxyWHxTU98sDP44d8K9KBflGwuXnBdY
V0NWh78/RXYGKnWCeOJSOq73IPtg18kaC7XJ2mHCTLsWl6Ln6O6Sy+n6ReGNSwRY
/2QasNkdzaOrfa/QB+8LUE6hZlaQSXq1Jxu92rxJBXvymoLLzDZW2T5y41sUyq5H
c4I1RvsNCiH6VRq7ZPKsSQ7P4VACXN3cLBBo5T01+z5EfUYymOH3tOaSH9ituOxa
TeL+HcwcIWgKztzhB/vydQWYpImNhEOE+BkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTP7Ba4r/OZ47ZrlEzYZ257Iy/4DjAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xOTEvei13V3VLX3ptZU8yYTVSTTJHZHVleU12LUE0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBYWdIDANBgkqhkiG9w0BAQsFAAOCAQEA
jgxPxJlRPMMT3oGVR1NJqp+36DC1MHNkhXrwlXpIvwpygHyn1QGZEogWZ6867oU3
5U0JcmYO5J40/KIrP6t/neHJw5fvBhYnpYYGk/Xpgu5rlaE/lMnYC6F5MosQ5BNA
CfdyjL4z8zCp4pm+CA74qAB6884x/J0OAA4MErQEQkFlMEvBj7+gZGjCiQnJehlc
nLUcRLaaOU2w1zCsIPH0gxGk60oXVs0MGMuqVQBBcjvBrXnK2MOUG33cKkL16imx
m8t3+v00lyz9G94sIXAlGM16IoHgpxMgmQ4YO8MQkCM8GP5Hfh5R/vwNe2CGe1o6
jqx36onPRTsawWLfKYPaPg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:32 2026 by rpki-client