Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/u72Et2KN5IwQOcXSswuiweZ4JD0.roa
File:                     u72Et2KN5IwQOcXSswuiweZ4JD0.roa (raw, json)
Hash identifier:          9ByTA9TTRBV89LaRPLk0UTSyKR9D+byCg69MWqF4Kg0=
Subject key identifier:   BB:BD:84:B7:62:8D:E4:8C:10:39:C5:D2:B3:0B:A2:C1:E6:78:24:3D
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       7F
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/u72Et2KN5IwQOcXSswuiweZ4JD0.roa
Signing time:             Sun 01 Mar 2026 01:31:34 +0000
ROA not before:           Sun 01 Mar 2026 01:31:34 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Mar  1 01:31:34 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BBBD84B7628DE48C1039C5D2B30BA2C1E678243D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:71:02:d4:8f:a4:04:f0:04:11:42:28:35:
                    9a:4b:cb:a2:71:82:16:dd:cd:69:9d:96:5b:9f:00:
                    9a:19:92:b2:12:d1:0e:40:72:51:6e:c0:7f:6d:e6:
                    e2:f5:72:67:a9:a3:d1:0f:4c:e7:b5:0a:ab:ee:f5:
                    90:e5:da:0e:5e:42:01:f6:fe:85:8b:67:72:73:5e:
                    b0:2b:3d:66:58:31:de:1e:76:e4:64:a4:90:99:1d:
                    40:5c:3b:cb:d3:49:6a:29:3b:76:52:83:a8:5e:62:
                    31:91:df:62:2a:8b:ea:5c:64:28:cd:7e:d7:5f:e2:
                    05:b4:a3:f1:31:19:66:e6:79:9b:93:ac:c1:60:a2:
                    9f:48:fa:b4:4b:e6:d6:20:47:e6:4b:70:20:fc:5e:
                    f3:fe:22:9a:04:2b:b1:b3:07:48:c1:a9:38:f4:9f:
                    60:38:51:da:1b:e5:5c:67:62:58:23:d6:cc:df:55:
                    da:04:8a:52:d5:1a:8b:f5:a5:9d:c7:03:67:0b:b7:
                    67:b3:3c:7b:2c:10:f7:24:85:ed:a0:f9:e0:17:61:
                    55:25:81:02:37:3c:84:0e:37:ff:44:34:cc:dd:2f:
                    e8:c4:d2:b5:11:5d:01:6c:69:b6:d4:e3:85:df:30:
                    e9:16:61:da:2c:56:0c:57:ad:48:e4:89:1c:e4:fd:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BD:84:B7:62:8D:E4:8C:10:39:C5:D2:B3:0B:A2:C1:E6:78:24:3D
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/u72Et2KN5IwQOcXSswuiweZ4JD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:fe:a3:a8:33:9f:a2:9f:8b:d5:c3:1c:bf:53:29:5e:25:
         97:1c:21:ea:ec:97:b5:51:23:f8:f3:ac:d5:ec:2c:1a:9f:6a:
         11:e4:91:79:a0:ab:35:c8:f6:cc:51:8c:90:5c:1a:dd:64:e1:
         06:5f:19:ba:f7:52:ff:fd:ce:f0:ff:88:31:62:16:df:6a:ec:
         92:49:69:bf:3a:f4:5a:4d:31:87:71:93:49:7e:08:99:99:b1:
         31:ed:5d:e1:09:94:54:b0:7e:05:e3:9f:15:3e:1b:f4:67:ca:
         f1:68:4d:83:3c:67:cc:6c:07:e2:04:90:1d:d5:3a:5b:9c:a0:
         c1:f2:b3:c0:30:74:f6:77:56:bb:00:98:18:c7:ed:a2:d2:2a:
         a8:55:44:37:02:f8:de:b4:9a:22:29:fc:6e:b1:f0:5a:81:05:
         e4:1f:ca:90:26:5d:9d:65:a8:d4:71:d4:2a:0a:66:9a:80:ef:
         ba:50:57:a0:e1:b1:b1:14:51:1d:f7:c6:de:ab:3e:66:cd:09:
         a3:73:6d:5e:e2:5b:f7:e7:92:6c:dc:06:8d:1b:b9:51:d6:0c:
         e1:38:f3:2a:c8:b0:12:db:98:1f:6a:43:98:9d:a2:6e:d6:52:
         e5:db:1e:bc:0c:cd:f4:fb:82:9f:3f:68:99:3f:04:03:57:8b:
         cd:00:df:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:02:38 2026 by rpki-client