Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/j6GZqFdtFxz9oyvYKwfHRt290Gw.roa
File:                     j6GZqFdtFxz9oyvYKwfHRt290Gw.roa (raw, json)
Hash identifier:          rk4nXul7VxL7M8u3bFZJFobRfBbm6Gls1Gu0FAg9nG4=
Subject key identifier:   8F:A1:99:A8:57:6D:17:1C:FD:A3:2B:D8:2B:07:C7:46:DD:BD:D0:6C
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       5F
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/j6GZqFdtFxz9oyvYKwfHRt290Gw.roa
Signing time:             Tue 31 Mar 2026 07:52:13 +0000
ROA not before:           Tue 31 Mar 2026 07:52:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        157.120.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Mar 31 07:52:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8FA199A8576D171CFDA32BD82B07C746DDBDD06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:ac:40:7f:0e:03:af:ca:9a:c7:0f:17:a0:
                    99:e2:99:a1:b8:53:39:04:71:eb:d9:78:02:ef:38:
                    6f:45:47:8a:81:75:eb:16:e7:ae:fc:b3:76:3a:f9:
                    c5:c2:c8:71:da:d7:70:ee:df:8b:08:d5:d4:3f:15:
                    c3:24:b5:0d:4d:12:6e:fb:ac:fa:d2:a3:e2:d5:93:
                    5d:54:ff:30:cb:18:90:1f:0c:5a:bd:e3:4f:f7:11:
                    b3:12:31:e2:f0:98:d6:a6:82:71:7f:82:25:e9:ad:
                    2d:fc:b2:b0:82:b4:24:3a:2a:2a:c6:6e:cb:d2:12:
                    ac:25:a8:ba:bc:f1:b5:ea:b3:8f:bb:16:4d:3b:3e:
                    44:2c:ee:34:b8:90:57:6b:94:fe:89:13:86:4d:5c:
                    47:6b:67:42:a7:3d:70:01:e2:ff:40:28:94:e6:db:
                    9e:7c:87:50:86:11:13:28:9a:71:fc:f1:72:20:ea:
                    2a:b4:16:4d:8d:d2:47:79:1b:c8:18:c5:5a:75:73:
                    90:07:69:b6:c2:d6:f1:2c:25:a6:5d:6c:7c:8c:d2:
                    75:d2:14:2c:9f:6d:58:5e:87:41:5a:a0:88:8e:02:
                    1b:16:13:28:03:c7:d2:16:50:57:98:70:9c:78:2f:
                    00:b9:bd:6c:a3:b8:9e:55:23:64:eb:55:02:38:d2:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A1:99:A8:57:6D:17:1C:FD:A3:2B:D8:2B:07:C7:46:DD:BD:D0:6C
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/j6GZqFdtFxz9oyvYKwfHRt290Gw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:cb:0e:76:2c:d8:56:5c:6f:eb:48:7c:28:3a:09:59:1c:0c:
         30:dc:5b:c0:8e:2b:95:b2:86:d1:2d:59:42:68:47:69:f9:aa:
         b0:a0:45:d7:bf:04:7f:97:c0:a2:8e:43:e3:da:e4:1f:6c:fe:
         e7:de:41:c3:df:52:7d:d5:97:3e:3a:0c:8e:f0:da:8f:bc:f1:
         16:df:b0:61:c3:ea:40:38:b3:c5:7e:34:7f:6a:68:32:bc:1c:
         3a:51:d2:66:76:24:30:3d:aa:8e:9a:f2:a8:52:29:3d:80:9a:
         46:1a:6c:ed:67:c7:80:d5:34:ba:2e:e2:94:57:11:9a:f4:38:
         eb:8d:83:d8:76:de:3f:fc:69:28:c0:fb:1b:f9:75:b3:19:76:
         db:23:d6:08:a0:98:d8:01:8e:96:33:02:89:26:a0:23:7e:97:
         7a:00:0e:fc:90:7e:e9:79:21:53:90:21:0d:78:11:05:0f:3f:
         16:1d:91:49:84:30:07:e5:5f:01:47:4e:b6:31:1f:66:f7:13:
         52:25:b2:2c:b2:64:c7:b0:c8:64:9a:36:77:e6:53:0e:80:ef:
         6e:0e:05:23:f0:8f:dc:37:0f:ae:ae:1a:b2:18:75:92:03:ee:
         db:f0:98:68:ea:30:2a:21:42:0f:d0:e9:32:03:db:31:c4:c5:
         58:4e:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:08 2026 by rpki-client