Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/9WpUZ5lhpOtfkbU8n_ubNLlQShw.roa
File:                     9WpUZ5lhpOtfkbU8n_ubNLlQShw.roa (raw, json)
Hash identifier:          gDUcSf9wsm475YD7A20RJILLPUlqNO95epPT7wVey+Y=
Subject key identifier:   F5:6A:54:67:99:61:A4:EB:5F:91:B5:3C:9F:FB:9B:34:B9:50:4A:1C
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       5D
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/9WpUZ5lhpOtfkbU8n_ubNLlQShw.roa
Signing time:             Tue 31 Mar 2026 07:52:12 +0000
ROA not before:           Tue 31 Mar 2026 07:52:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     146987
IP address blocks:        157.120.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Mar 31 07:52:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F56A54679961A4EB5F91B53C9FFB9B34B9504A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:03:58:09:69:bf:1a:e0:01:01:d0:dd:71:e4:
                    5e:20:76:ef:c5:e3:d7:2f:ef:5a:b9:09:36:bb:06:
                    88:15:f8:a0:27:17:1f:58:95:ac:1c:0b:8e:8f:e4:
                    67:cf:ee:f8:7f:b5:be:ab:da:8d:b0:15:78:99:c1:
                    01:33:ad:cc:ff:3e:90:53:76:2a:63:09:84:75:44:
                    67:df:3c:29:dc:e7:3f:e9:4b:04:0e:7a:d5:61:5a:
                    ca:bb:ea:0a:4e:0a:6a:87:97:27:78:aa:8f:74:34:
                    28:5c:ab:e4:14:e1:fd:27:fd:60:15:0c:3f:93:cf:
                    f1:ab:9b:40:e0:61:22:64:eb:a7:1a:de:5f:53:05:
                    e4:be:24:31:5b:16:f0:92:63:8f:4c:09:bb:4d:c7:
                    52:22:78:95:a9:57:80:3d:ea:66:42:29:0d:43:3a:
                    63:61:93:e1:bd:d1:04:d4:86:76:1a:11:78:7f:d7:
                    f6:ef:6d:b3:ff:85:51:5e:ab:b2:07:66:a3:28:4e:
                    8b:b2:67:a7:77:2b:ad:5a:bd:d9:34:78:ce:55:d9:
                    00:e7:ae:f1:f8:e6:64:c4:4f:f9:0c:69:83:dd:f0:
                    ea:a5:88:67:2b:39:64:15:ca:b1:52:b3:d7:87:fe:
                    f7:cc:84:40:ee:68:19:8e:3c:83:83:e9:9f:98:e7:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:54:67:99:61:A4:EB:5F:91:B5:3C:9F:FB:9B:34:B9:50:4A:1C
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/9WpUZ5lhpOtfkbU8n_ubNLlQShw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:31:1c:97:2d:0a:18:8e:14:0f:c1:ed:4c:e3:5d:32:0f:
         6c:42:72:20:1a:e1:fa:12:07:37:4c:73:ee:3b:0d:28:55:aa:
         30:ea:a3:25:51:de:78:e3:5b:b3:c6:5c:bd:b9:96:48:56:12:
         52:86:7d:02:08:a2:38:2e:fb:94:02:25:86:43:19:11:b6:d9:
         b3:e5:f4:d7:4b:97:cd:94:a1:50:4b:53:bd:cd:e7:19:f4:31:
         07:d6:e4:cf:3c:a2:90:82:b2:3a:e5:7c:b3:0d:e9:96:79:64:
         95:28:17:6c:5f:fc:55:36:2b:51:04:ec:f9:f7:dd:2b:55:b5:
         00:e4:0c:a6:55:d8:83:84:81:bf:bf:ae:f9:12:83:93:56:c1:
         93:38:75:ec:1c:95:cb:75:2d:d9:83:97:35:6d:89:21:f5:01:
         2f:13:b2:a2:b7:d3:c7:21:5a:8a:40:05:09:dd:f5:bd:88:27:
         12:aa:f8:a1:95:39:18:df:34:24:fb:80:17:07:79:7c:ff:76:
         a7:6d:4d:d0:fe:3e:2c:69:53:a5:f4:fd:8a:67:2e:ca:a9:38:
         54:76:6c:66:df:0d:a1:e8:e3:fb:00:d2:77:84:fa:21:82:fe:
         a1:c5:96:8a:c4:84:9e:18:cb:aa:c0:7b:e3:08:56:55:f8:db:
         14:e8:71:03
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjcy
RkFBNTIzQkE2NTI2ODU1RDk5MDY1RTIxQjRCOTU4QzVGMDE2MB4XDTI2MDMzMTA3
NTIxMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjU2QTU0Njc5OTYxQTRF
QjVGOTFCNTNDOUZGQjlCMzRCOTUwNEExQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOADWAlpvxrgAQHQ3XHkXiB278Xj1y/vWrkJNrsGiBX4oCcXH1iV
rBwLjo/kZ8/u+H+1vqvajbAVeJnBATOtzP8+kFN2KmMJhHVEZ988KdznP+lLBA56
1WFayrvqCk4KaoeXJ3iqj3Q0KFyr5BTh/Sf9YBUMP5PP8aubQOBhImTrpxreX1MF
5L4kMVsW8JJjj0wJu03HUiJ4lalXgD3qZkIpDUM6Y2GT4b3RBNSGdhoReH/X9u9t
s/+FUV6rsgdmoyhOi7Jnp3crrVq92TR4zlXZAOeu8fjmZMRP+Qxpg93w6qWIZys5
ZBXKsVKz14f+98yEQO5oGY48g4Ppn5jnDFECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBT1alRnmWGk61+RtTyf+5s0uVBKHDAfBgNVHSMEGDAWgBT7cvqlI7plJoVdmQZe
IbS5WMXwFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA5NjYvLTNMNnBTTzZaU2FGWFprR1hpRzB1VmpGOEJZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLTNMNnBTTzZaU2FGWFprR1hpRzB1
VmpGOEJZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEwOTY2LzlXcFVaNWxocE90ZmtiVThuX3ViTkxsUVNody5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdeHEwDQYJKoZIhvcNAQELBQAD
ggEBAJ8rMRyXLQoYjhQPwe1M410yD2xCciAa4foSBzdMc+47DShVqjDqoyVR3njj
W7PGXL25lkhWElKGfQIIojgu+5QCJYZDGRG22bPl9NdLl82UoVBLU73N5xn0MQfW
5M88opCCsjrlfLMN6ZZ5ZJUoF2xf/FU2K1EE7Pn33StVtQDkDKZV2IOEgb+/rvkS
g5NWwZM4dewclct1LdmDlzVtiSH1AS8TsqK308chWopABQnd9b2IJxKq+KGVORjf
NCT7gBcHeXz/dqdtTdD+PixpU6X0/YpnLsqpOFR2bGbfDaHo4/sA0neE+iGC/qHF
lorEhJ4Yy6rAe+MIVlX42xTocQM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:45 2026 by rpki-client