Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/vbX9e19A6zIlxOASwU8UXmVkX1U.roa
File:                     vbX9e19A6zIlxOASwU8UXmVkX1U.roa (raw, json)
Hash identifier:          sniWShg/OP1c55P9MZ6sG41AfU0bLrlYD1GzLibzpUM=
Subject key identifier:   BD:B5:FD:7B:5F:40:EB:32:25:C4:E0:12:C1:4F:14:5E:65:64:5F:55
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       F9
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/vbX9e19A6zIlxOASwU8UXmVkX1U.roa
Signing time:             Mon 02 Nov 2026 02:15:28 +0000
ROA not before:           Mon 02 Nov 2026 02:15:28 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     0
IP address blocks:        133.241.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 15:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Nov  2 02:15:28 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=BDB5FD7B5F40EB3225C4E012C14F145E65645F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:df:91:29:bc:b7:7f:ed:36:17:57:a2:f8:
                    8a:fd:6e:4f:93:c7:15:77:07:fe:8e:97:fd:0a:62:
                    5e:35:b6:62:3f:d3:83:c1:bd:d5:f3:b0:a9:bf:cf:
                    0d:c5:da:e4:ce:b2:60:ef:0d:f1:1c:88:96:56:de:
                    63:7c:8f:86:62:db:77:ed:3d:bd:15:1b:ed:65:43:
                    ba:b0:d1:7e:d4:e9:b3:ab:40:2d:48:57:c8:53:9f:
                    95:1c:dc:97:15:f7:ce:f0:a2:ae:68:fb:1d:47:fb:
                    9f:0d:4f:35:75:0a:cd:7f:d0:c8:81:0c:46:b0:c0:
                    e5:aa:6a:a2:79:da:8f:f8:65:49:15:bc:76:3c:bb:
                    14:20:1a:47:a0:dc:50:67:99:f5:f6:ce:b6:41:c3:
                    58:e9:e0:bc:11:a8:a7:3c:37:d6:5b:07:9f:8b:b4:
                    10:ea:e2:2e:44:61:77:a7:72:5c:d8:a2:c9:53:ba:
                    45:1c:15:b4:93:34:40:80:15:c8:f6:19:9c:c0:2d:
                    28:98:df:19:38:27:93:fb:c5:15:85:b5:2c:28:49:
                    87:f5:23:11:46:45:e6:f4:45:09:03:f9:80:f3:2b:
                    5a:c7:5b:69:5e:73:5f:7c:9c:b0:3e:27:3d:31:13:
                    6d:6c:13:66:14:45:7b:3e:f6:5f:66:a0:4a:b5:a0:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B5:FD:7B:5F:40:EB:32:25:C4:E0:12:C1:4F:14:5E:65:64:5F:55
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/vbX9e19A6zIlxOASwU8UXmVkX1U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.241.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:51:bc:de:e5:f7:4c:14:7a:81:a2:8d:9a:b7:38:b0:5b:
         5f:f6:b9:d4:d8:82:c0:cb:ef:e2:40:d6:e7:1d:c1:8b:94:51:
         fd:fd:d0:4d:70:94:07:0f:11:df:74:2d:3e:be:f4:5d:f9:c6:
         8d:47:1f:51:b6:f9:5b:29:cf:32:db:1f:26:d9:51:62:55:3d:
         53:e0:b7:36:ef:da:61:6c:71:6a:0b:ab:ca:a8:e7:35:e0:d4:
         b1:48:bb:f7:1d:57:65:ef:b2:62:de:2b:28:9e:b7:af:0d:a9:
         42:ab:4f:4d:72:48:6e:a4:a2:94:29:c0:55:45:2c:b5:8f:5f:
         35:48:29:50:5c:e7:c7:22:2f:a2:76:7d:a3:1a:cc:16:8b:da:
         48:24:e7:58:0a:ec:03:44:69:a6:48:b9:f6:27:8c:20:57:8d:
         22:12:ae:3b:05:7a:9b:f8:50:ee:d1:c9:82:07:67:18:a3:aa:
         60:dd:12:77:a7:e5:24:5d:fa:bb:49:14:5d:92:67:9b:32:2a:
         26:22:a5:c4:f2:18:a5:74:e6:f7:06:7f:fb:ae:67:c6:68:82:
         3c:0b:05:8d:0f:60:91:fa:e2:60:c1:de:cd:3a:25:5d:ac:b5:
         10:1a:8d:02:01:d3:e3:63:90:a9:a5:ba:6e:22:8f:8b:bd:8a:
         e2:31:eb:89
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx
MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjExMDIw
MjE1MjhaFw0yNzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJEQjVGRDdCNUY0MEVC
MzIyNUM0RTAxMkMxNEYxNDVFNjU2NDVGNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTEt+RKby3f+02F1ei+Ir9bk+TxxV3B/6Ol/0KYl41tmI/04PB
vdXzsKm/zw3F2uTOsmDvDfEciJZW3mN8j4Zi23ftPb0VG+1lQ7qw0X7U6bOrQC1I
V8hTn5Uc3JcV987woq5o+x1H+58NTzV1Cs1/0MiBDEawwOWqaqJ52o/4ZUkVvHY8
uxQgGkeg3FBnmfX2zrZBw1jp4LwRqKc8N9ZbB5+LtBDq4i5EYXenclzYoslTukUc
FbSTNECAFcj2GZzALSiY3xk4J5P7xRWFtSwoSYf1IxFGReb0RQkD+YDzK1rHW2le
c198nLA+Jz0xE21sE2YURXs+9l9moEq1oGZFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUvbX9e19A6zIlxOASwU8UXmVkX1UwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax
EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN
dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkxL3ZiWDllMTlBNnpJbHhPQVN3VThVWG1Wa1gxVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeF8YAwDQYJKoZIhvcNAQELBQADggEB
AEvCUbze5fdMFHqBoo2atziwW1/2udTYgsDL7+JA1ucdwYuUUf390E1wlAcPEd90
LT6+9F35xo1HH1G2+VspzzLbHybZUWJVPVPgtzbv2mFscWoLq8qo5zXg1LFIu/cd
V2XvsmLeKyiet68NqUKrT01ySG6kopQpwFVFLLWPXzVIKVBc58ciL6J2faMazBaL
2kgk51gK7ANEaaZIufYnjCBXjSISrjsFepv4UO7RyYIHZxijqmDdEnen5SRd+rtJ
FF2SZ5syKiYipcTyGKV05vcGf/uuZ8ZogjwLBY0PYJH64mDB3s06JV2stRAajQIB
0+NjkKmlum4ij4u9iuIx64k=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:45:56 2026 by rpki-client