Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/K3PLXSW5e6SI1HIeqvvWPHQWvN4.roa
File:                     K3PLXSW5e6SI1HIeqvvWPHQWvN4.roa (raw, json)
Hash identifier:          /0GcE8h131ASzEzeHVExiB6fq15HazPrBJPpZgdOADg=
Subject key identifier:   2B:73:CB:5D:25:B9:7B:A4:88:D4:72:1E:AA:FB:D6:3C:74:16:BC:DE
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       83
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/K3PLXSW5e6SI1HIeqvvWPHQWvN4.roa
Signing time:             Sun 01 Mar 2026 01:31:36 +0000
ROA not before:           Sun 01 Mar 2026 01:31:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Mar  1 01:31:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=2B73CB5D25B97BA488D4721EAAFBD63C7416BCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:3a:d7:b0:7c:5e:35:b6:95:85:65:9f:67:
                    c5:c4:85:a7:c3:56:68:bb:d2:e0:9b:41:2f:f0:17:
                    69:74:40:73:00:47:8e:9c:97:37:a9:f4:08:5a:52:
                    93:9d:33:8a:ff:11:29:35:e4:f8:6b:d2:35:88:d7:
                    c8:fd:f2:ff:01:3f:c3:45:ee:02:9e:ea:e2:59:7d:
                    91:5a:96:52:c6:27:9e:35:fc:06:ce:cf:c5:e2:35:
                    e5:6d:dd:d9:1b:70:58:cc:0d:0b:be:3e:8f:1f:6c:
                    1b:db:c3:c6:36:7d:5c:85:6a:cb:91:3d:69:40:06:
                    1a:62:47:75:00:eb:f6:76:b2:34:3a:3a:9c:bd:f6:
                    46:c3:1d:69:8d:29:68:88:6c:aa:da:0a:ac:dd:ea:
                    6a:69:89:b7:b1:6e:4c:2c:03:8e:e1:6e:a1:99:bd:
                    33:2b:60:a1:e8:1f:c6:f0:ce:e0:50:e8:f5:cd:c9:
                    28:87:82:24:14:84:e6:8f:d2:a0:90:86:39:25:42:
                    e5:d8:bd:a7:18:6c:f8:69:0e:8b:15:29:52:db:e3:
                    7c:24:07:83:95:51:54:0b:f7:1d:26:f3:f3:55:64:
                    85:7d:2d:43:6f:9f:53:e4:e5:a6:3b:7a:2d:57:1a:
                    1c:34:f3:05:dd:e6:25:97:9b:5a:b1:20:b8:2f:51:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:CB:5D:25:B9:7B:A4:88:D4:72:1E:AA:FB:D6:3C:74:16:BC:DE
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/K3PLXSW5e6SI1HIeqvvWPHQWvN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:9d:2c:7f:37:72:02:14:bd:da:a6:4a:48:0b:0d:b5:88:
         d8:ab:57:00:df:bc:a5:d4:ec:d5:28:2e:e5:50:30:8b:25:9c:
         21:2e:e9:c3:de:04:4d:32:b7:9f:8d:7b:f4:1f:ee:0d:97:8a:
         0f:5f:0e:ef:d9:e6:6f:aa:72:05:3c:a7:c3:57:ea:c1:ab:5f:
         54:a0:b3:a9:af:3b:1e:c3:25:15:a7:55:85:7d:7f:82:85:e4:
         7d:1a:a2:7a:e7:03:c9:ec:4e:0a:87:44:92:5c:1e:9e:08:48:
         a1:77:d8:de:24:d6:66:4a:8c:1b:ed:b5:c3:fb:1f:33:47:b7:
         22:9d:1a:fd:39:bd:9a:e8:e3:0e:94:9c:9e:3a:9b:b7:4d:b2:
         4b:ec:5e:c5:1f:20:f5:f3:c2:d3:7b:59:56:83:34:d7:c4:61:
         43:c8:5d:2f:86:24:32:0c:0f:37:03:18:e6:fc:42:6d:4c:e7:
         45:3d:a3:cb:72:32:6e:8f:68:32:67:4a:a0:ba:da:d3:f4:68:
         62:36:6f:eb:56:d2:dd:35:bb:28:72:73:e0:71:86:cf:84:c5:
         46:12:9b:bf:b6:c3:9a:28:64:58:6a:3d:7e:e6:5e:fb:f1:4f:
         e3:6f:0b:fc:4c:e3:e0:68:f8:92:5f:0a:1f:4a:3e:26:d6:bf:
         c4:2a:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:21 2026 by rpki-client