Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/fOXJtT5Nx1IHgLl7PNmijrRXVHM.roa
File:                     fOXJtT5Nx1IHgLl7PNmijrRXVHM.roa (raw, json)
Hash identifier:          eEzwEUcuqepWuw01uxRYNzehvHGodfo+tEo6PAY3HY8=
Subject key identifier:   7C:E5:C9:B5:3E:4D:C7:52:07:80:B9:7B:3C:D9:A2:8E:B4:57:54:73
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       7D
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/fOXJtT5Nx1IHgLl7PNmijrRXVHM.roa
Signing time:             Tue 31 Mar 2026 07:30:14 +0000
ROA not before:           Tue 31 Mar 2026 07:30:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        122.50.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: Mar 31 07:30:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7CE5C9B53E4DC7520780B97B3CD9A28EB4575473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:7d:c5:f1:1f:03:4b:f7:45:87:50:b9:00:
                    e9:70:73:5a:2b:26:c5:66:79:79:d6:9d:25:4a:5d:
                    0a:10:94:ec:45:57:66:c7:ae:66:14:96:2e:f0:28:
                    c6:df:88:03:1d:6c:28:a0:e9:3a:27:ed:21:54:aa:
                    58:69:87:29:e2:7f:e6:33:cc:bd:fc:7f:ad:bb:98:
                    f8:93:a3:b0:e7:5f:63:17:9b:12:03:2c:a2:27:07:
                    51:e1:46:2f:20:6e:da:9e:9f:21:05:af:44:0e:fb:
                    d7:cd:a9:2b:97:e7:22:b4:06:51:7a:c8:89:88:26:
                    a4:05:4c:c1:48:62:2e:c4:c3:c5:ef:b5:1d:9d:18:
                    91:e7:6c:35:40:9e:b8:57:70:21:7a:33:a2:69:11:
                    04:ba:6d:88:7b:b2:94:4e:ac:c9:6d:37:7e:9d:09:
                    24:cf:82:03:b5:fc:fc:e4:4a:14:ce:c7:58:6a:0a:
                    c7:cd:79:aa:f1:5e:bf:fc:70:80:4c:4a:a3:9b:c3:
                    97:20:c2:6e:94:a6:7a:85:75:03:2f:bc:0f:78:9d:
                    b6:de:0d:af:b8:3b:37:5b:e4:b8:53:ea:65:36:eb:
                    9a:27:fd:9f:19:c0:52:a9:f2:58:74:96:5b:92:84:
                    c1:38:5f:65:71:d5:8b:0b:2d:37:2e:a0:28:7f:84:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:C9:B5:3E:4D:C7:52:07:80:B9:7B:3C:D9:A2:8E:B4:57:54:73
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/fOXJtT5Nx1IHgLl7PNmijrRXVHM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:f0:e8:1e:7c:0a:ba:3c:4d:ba:15:c1:15:97:21:f4:55:
         cb:ca:01:fd:75:f2:26:76:fb:86:4d:f6:49:c8:b3:06:72:c6:
         ec:db:55:41:d5:f5:50:dc:98:a0:21:c5:ba:b1:df:cd:a5:73:
         1f:d2:4b:c0:31:00:b7:a5:0e:a6:7d:9a:c3:bc:85:27:a3:eb:
         d2:07:ae:c7:77:ee:2b:a7:c1:44:99:82:9d:d6:33:b5:56:ac:
         62:aa:8b:b0:24:0b:07:69:1b:54:af:c6:1c:4c:b4:52:10:45:
         74:cc:3b:85:d1:d0:2c:02:8c:f3:73:ff:e5:9b:ee:53:ea:ca:
         fe:2c:67:86:8c:55:8f:d9:4a:92:da:39:ad:85:ee:81:f0:9d:
         9a:cc:c9:d7:4a:d8:d9:c8:46:cc:95:c1:c0:88:bd:fb:9b:56:
         9a:1f:02:b8:27:fb:0b:63:cd:8e:13:a4:eb:9a:6b:fd:7d:f3:
         94:3d:06:3f:ce:0a:9f:eb:8d:fc:b4:66:22:77:61:db:12:30:
         6b:83:ed:a4:f6:ca:b8:5b:d5:9d:9f:ff:32:b6:02:f7:64:99:
         61:16:9c:f6:04:80:7f:fe:c1:8c:75:51:5b:72:4f:ef:12:83:
         36:80:76:0d:ec:47:7f:53:15:e2:f6:92:10:88:ce:62:38:29:
         30:06:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:20 2026 by rpki-client