Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kD41l_ChMJEPQGCuQms0qDluJNI.roa
File:                     kD41l_ChMJEPQGCuQms0qDluJNI.roa (raw, json)
Hash identifier:          LHOl0TUcYtrHGasTL6Xw78yt63hBhKH9BF2hmNY4Q9s=
Subject key identifier:   90:3E:35:97:F0:A1:30:91:0F:40:60:AE:42:6B:34:A8:39:6E:24:D2
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       88
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kD41l_ChMJEPQGCuQms0qDluJNI.roa
Signing time:             Tue 31 Mar 2026 07:35:14 +0000
ROA not before:           Tue 31 Mar 2026 07:35:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Mar 31 07:35:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=903E3597F0A130910F4060AE426B34A8396E24D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:0c:8e:6c:79:a2:41:fc:e1:47:f0:af:4e:
                    a6:3b:73:ea:21:ba:6c:f5:8b:31:5f:e9:22:01:fa:
                    18:75:5f:8a:e0:00:8d:87:ae:4b:f2:bf:da:13:7a:
                    9b:3f:c1:dd:3d:85:a3:5a:9e:1d:63:0c:ae:85:9e:
                    5e:ef:4b:00:04:36:d4:10:fb:c8:ec:da:b0:0b:8c:
                    5a:a9:00:a1:d7:81:9e:cc:d3:62:45:4e:bf:76:ab:
                    55:40:30:71:c3:69:25:cd:2d:b3:2d:cf:e7:ff:e3:
                    df:dc:f4:38:f3:29:4c:99:04:f4:f2:da:60:48:44:
                    b7:e5:03:8d:d0:0d:ce:88:6c:d3:6a:a4:02:8a:a7:
                    a2:cd:38:08:16:9a:55:1c:c2:41:09:73:5a:b8:63:
                    1b:bd:ce:de:95:f3:56:dc:79:97:7e:a6:da:c8:6a:
                    09:85:a5:8c:b8:b5:64:50:a5:d1:ae:6c:ee:e7:e2:
                    23:20:c5:2e:48:09:0c:53:2d:db:fd:a6:a5:ca:ad:
                    c5:26:aa:df:48:a1:bf:77:cc:aa:4a:05:1a:ed:fc:
                    e5:3e:64:f3:19:11:d1:7f:ed:cf:71:84:ef:6d:8e:
                    c0:6d:5b:bf:d3:a5:b7:61:ea:76:aa:42:65:96:df:
                    fa:6a:50:0e:ac:de:c7:02:55:b3:6a:55:3f:fd:16:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:35:97:F0:A1:30:91:0F:40:60:AE:42:6B:34:A8:39:6E:24:D2
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kD41l_ChMJEPQGCuQms0qDluJNI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:bb:c8:91:10:19:a2:32:2c:2f:bb:d2:53:92:2b:ec:91:
         00:99:8b:bb:89:9e:43:9e:17:c6:f3:8a:c5:f4:fc:dd:b7:fe:
         d4:9e:e8:ee:67:70:38:a5:4e:03:28:58:fc:4a:40:60:95:5e:
         94:04:8c:bc:87:64:3e:2a:8f:09:8a:c0:4d:31:c9:af:e5:55:
         c5:b2:f4:05:c7:aa:93:e0:20:98:d4:9b:9a:23:37:46:3b:d5:
         a3:71:8f:29:05:de:6d:0c:13:97:77:e3:d6:bd:14:62:b4:3f:
         5d:47:a1:b0:53:2a:9d:e1:6b:cc:60:a0:ad:9f:c9:8c:89:61:
         84:f2:a2:5d:54:22:15:43:8b:d7:69:75:d0:92:ba:8a:cd:36:
         ca:20:c0:82:a6:ef:4a:c9:a0:f3:70:41:7d:2f:11:c4:3d:27:
         79:7c:e5:c6:b3:d3:38:f5:8e:a8:16:80:9b:41:07:50:02:f1:
         4f:4d:63:15:8e:b7:a8:64:c8:04:95:2a:eb:72:50:40:07:76:
         72:a1:2a:a5:65:8e:cb:68:36:16:94:a6:91:f8:76:f1:46:d7:
         ca:56:43:2c:c3:8e:3f:38:75:9e:a5:86:df:92:12:1d:ab:b9:
         75:ab:c7:95:bb:ac:04:82:1b:78:b5:ad:1b:6b:bc:74:40:3c:
         92:2a:52:01
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD
NDYyOTRBNUQ1NjQzN0UxOUExMUFFRjlGQjlCODc3NjkwMTQzRTAeFw0yNjAzMzEw
NzM1MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwM0UzNTk3RjBBMTMw
OTEwRjQwNjBBRTQyNkIzNEE4Mzk2RTI0RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfSgyObHmiQfzhR/CvTqY7c+ohumz1izFf6SIB+hh1X4rgAI2H
rkvyv9oTeps/wd09haNanh1jDK6Fnl7vSwAENtQQ+8js2rALjFqpAKHXgZ7M02JF
Tr92q1VAMHHDaSXNLbMtz+f/49/c9DjzKUyZBPTy2mBIRLflA43QDc6IbNNqpAKK
p6LNOAgWmlUcwkEJc1q4Yxu9zt6V81bceZd+ptrIagmFpYy4tWRQpdGubO7n4iMg
xS5ICQxTLdv9pqXKrcUmqt9Iob93zKpKBRrt/OU+ZPMZEdF/7c9xhO9tjsBtW7/T
pbdh6naqQmWW3/pqUA6s3scCVbNqVT/9Fp+pAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUkD41l/ChMJEPQGCuQms0qDluJNIwHwYDVR0jBBgwFoAU+8RilKXVZDfhmhGu
+fubh3aQFD4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzExMjQ3Ly04UmlsS1hWWkRmaG1oR3UtZnViaDNhUUZENC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy04UmlsS1hWWkRmaG1oR3UtZnVi
aDNhUUZENC5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMTI0Ny9rRDQxbF9DaE1KRVBRR0N1UW1zMHFEbHVKTkkucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRFSMA0GCSqGSIb3DQEBCwUA
A4IBAQBvFrvIkRAZojIsL7vSU5Ir7JEAmYu7iZ5DnhfG84rF9Pzdt/7UnujuZ3A4
pU4DKFj8SkBglV6UBIy8h2Q+Ko8JisBNMcmv5VXFsvQFx6qT4CCY1JuaIzdGO9Wj
cY8pBd5tDBOXd+PWvRRitD9dR6GwUyqd4WvMYKCtn8mMiWGE8qJdVCIVQ4vXaXXQ
krqKzTbKIMCCpu9KyaDzcEF9LxHEPSd5fOXGs9M49Y6oFoCbQQdQAvFPTWMVjreo
ZMgElSrrclBAB3ZyoSqlZY7LaDYWlKaR+HbxRtfKVkMsw44/OHWepYbfkhIdq7l1
q8eVu6wEght4ta0ba7x0QDySKlIB
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:07 2026 by rpki-client