Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/m-FqsvHznSxDamwI9BDuL1ri3D4.roa
File:                     m-FqsvHznSxDamwI9BDuL1ri3D4.roa (raw, json)
Hash identifier:          mJM08ZuWcMksVgBy5mG6gHTTER2TCb4T/5nMLJy8zZI=
Subject key identifier:   9B:E1:6A:B2:F1:F3:9D:2C:43:6A:6C:08:F4:10:EE:2F:5A:E2:DC:3E
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       F7
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/m-FqsvHznSxDamwI9BDuL1ri3D4.roa
Signing time:             Mon 02 Nov 2026 02:15:24 +0000
ROA not before:           Mon 02 Nov 2026 02:15:24 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     0
IP address blocks:        133.241.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 14:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Nov  2 02:15:24 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=9BE16AB2F1F39D2C436A6C08F410EE2F5AE2DC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:3c:ca:c0:15:94:fd:8a:2e:60:ef:dd:5f:
                    ca:d0:de:8d:b0:95:3c:cf:03:bd:60:54:65:92:50:
                    cf:83:87:65:48:8c:4e:a2:da:16:44:c7:83:c6:7b:
                    cc:cc:cf:c6:74:ef:4b:2b:1e:83:0d:ec:d9:8f:38:
                    67:db:5c:e2:4c:a6:63:8a:c2:a6:73:09:71:81:02:
                    10:86:d2:35:4d:30:ec:83:5c:3a:d0:d9:1e:c1:7d:
                    ca:97:72:31:76:bf:f0:cc:89:66:77:3a:b2:50:65:
                    f6:a9:43:a6:7c:98:3b:13:f3:86:73:d5:dd:1f:91:
                    44:65:a2:14:a4:88:93:d6:0e:42:ea:c4:ec:7f:41:
                    f6:2c:29:93:83:17:36:ca:26:3e:0c:9f:66:43:98:
                    4a:25:03:d2:bf:4d:90:6e:14:43:7a:69:1f:ab:6a:
                    86:e7:98:b0:30:30:95:f5:0b:74:c6:16:66:26:af:
                    d1:a5:72:aa:e8:84:c8:6e:38:76:04:c6:6d:66:9a:
                    89:d7:6a:0e:53:cc:c2:51:b7:ac:73:a3:35:29:21:
                    8f:a8:99:5c:2c:e3:d6:7e:b8:a8:56:4f:c9:f1:02:
                    60:84:a9:dc:b1:a1:89:16:e7:1f:48:76:b9:d2:fd:
                    87:7c:6c:0c:c3:0a:04:0e:89:17:c6:1f:fd:a9:69:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E1:6A:B2:F1:F3:9D:2C:43:6A:6C:08:F4:10:EE:2F:5A:E2:DC:3E
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/m-FqsvHznSxDamwI9BDuL1ri3D4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.241.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:ba:b9:52:94:9c:b8:2a:ff:fa:9c:0b:eb:8d:dd:5c:69:
         78:a8:0a:2d:b6:38:c2:7b:e8:74:04:02:e8:03:58:c9:65:56:
         d1:fe:35:ca:83:1a:45:84:f6:88:57:30:72:ee:f8:72:84:e6:
         96:5c:4d:1c:da:49:ac:ef:90:8d:4c:51:84:b0:11:9f:8e:e1:
         b0:ac:fa:13:b7:3f:b7:fe:8c:4b:9a:7e:3e:1b:1d:bf:72:1a:
         2e:55:05:bb:3e:74:32:e7:5d:e6:4f:13:37:c0:3f:24:89:cd:
         2f:36:ba:e7:f6:1b:f5:58:d0:c5:f6:8f:a9:9f:80:20:db:ec:
         79:c4:9b:44:db:f5:1c:56:cd:9b:47:6f:2e:f6:09:bc:db:6c:
         d8:82:c2:f7:e2:f8:c8:56:0f:ad:7d:b8:f4:fc:42:8f:7c:7e:
         e0:04:46:f5:ea:04:9f:39:20:14:2f:20:74:04:72:43:80:91:
         b3:ad:a9:7e:ba:fd:ab:f2:c1:b3:d0:da:8d:b7:a3:36:fc:76:
         72:71:93:33:a7:7f:bc:d9:e1:63:2b:62:85:29:e0:bf:c4:02:
         2b:1e:6c:d3:3b:a6:5d:a5:2d:77:cd:74:77:fd:b5:bb:16:6d:
         27:33:80:c5:4c:25:47:ed:92:e9:48:d1:57:2d:6a:3a:c6:4a:
         6a:00:45:dc
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjExMDIw
MjE1MjRaFw0yNzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlCRTE2QUIyRjFGMzlE
MkM0MzZBNkMwOEY0MTBFRTJGNUFFMkRDM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6dzzKwBWU/YouYO/dX8rQ3o2wlTzPA71gVGWSUM+Dh2VIjE6i
2hZEx4PGe8zMz8Z070srHoMN7NmPOGfbXOJMpmOKwqZzCXGBAhCG0jVNMOyDXDrQ
2R7BfcqXcjF2v/DMiWZ3OrJQZfapQ6Z8mDsT84Zz1d0fkURlohSkiJPWDkLqxOx/
QfYsKZODFzbKJj4Mn2ZDmEolA9K/TZBuFEN6aR+raobnmLAwMJX1C3TGFmYmr9Gl
cqrohMhuOHYExm1mmonXag5TzMJRt6xzozUpIY+omVws49Z+uKhWT8nxAmCEqdyx
oYkW5x9IdrnS/Yd8bAzDCgQOiRfGH/2padkdAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUm+FqsvHznSxDamwI9BDuL1ri3D4wHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL20tRnFzdkh6blN4RGFtd0k5QkR1TDFyaTNENC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWF8SAwDQYJKoZIhvcNAQELBQADggEB
AEv2urlSlJy4Kv/6nAvrjd1caXioCi22OMJ76HQEAugDWMllVtH+NcqDGkWE9ohX
MHLu+HKE5pZcTRzaSazvkI1MUYSwEZ+O4bCs+hO3P7f+jEuafj4bHb9yGi5VBbs+
dDLnXeZPEzfAPySJzS82uuf2G/VY0MX2j6mfgCDb7HnEm0Tb9RxWzZtHby72Cbzb
bNiCwvfi+MhWD619uPT8Qo98fuAERvXqBJ85IBQvIHQEckOAkbOtqX66/avywbPQ
2o23ozb8dnJxkzOnf7zZ4WMrYoUp4L/EAisebNM7pl2lLXfNdHf9tbsWbSczgMVM
JUftkulI0VctajrGSmoARdw=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:47:35 2026 by rpki-client