Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/xDabVXv1apDq3lb0Xob9U7Fz2nU.roa
File:                     xDabVXv1apDq3lb0Xob9U7Fz2nU.roa (raw, json)
Hash identifier:          ZoRi10vG4Kt+/urzD8QRF7J672fIvzQ/73lEEaJvY4o=
Subject key identifier:   C4:36:9B:55:7B:F5:6A:90:EA:DE:56:F4:5E:86:FD:53:B1:73:DA:75
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       8B
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/xDabVXv1apDq3lb0Xob9U7Fz2nU.roa
Signing time:             Tue 31 Mar 2026 07:35:15 +0000
ROA not before:           Tue 31 Mar 2026 07:35:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55897
IP address blocks:        157.17.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Mar 31 07:35:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C4369B557BF56A90EADE56F45E86FD53B173DA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:d4:77:ce:a6:75:bc:a8:df:dd:52:e0:90:
                    26:53:01:4d:45:82:9f:8c:4c:d3:1f:21:4c:db:95:
                    1e:c4:77:82:d9:b2:d1:c8:87:29:20:de:23:8e:a9:
                    bb:5e:d1:69:f6:54:c7:ba:36:2a:16:e2:cc:0a:5d:
                    e2:52:32:75:9d:d1:16:40:5f:c1:df:a6:34:73:bc:
                    07:08:1e:21:33:ab:16:83:5e:56:dc:b5:52:12:f7:
                    37:df:38:7e:ad:4b:37:5a:da:c9:2f:5e:b2:89:b7:
                    09:5e:65:d2:f2:ac:fa:bf:ba:89:6b:f3:4f:95:e0:
                    6d:98:8e:5f:81:14:b4:71:9b:64:d8:17:62:b9:01:
                    c9:e9:ec:26:3f:3b:82:27:ad:d0:ae:56:7b:45:2c:
                    29:3a:4f:c7:ec:6e:17:54:15:74:75:a1:e4:9d:72:
                    b3:bc:10:c5:6e:a7:3d:30:1f:e5:68:00:7e:06:88:
                    23:21:d9:e8:36:4d:8a:c0:e6:f8:fa:08:d0:6b:22:
                    cb:1f:b7:f7:39:26:6d:86:47:da:94:8d:04:83:27:
                    73:34:e3:ca:88:55:11:bf:11:91:ab:68:c2:2b:fc:
                    94:04:d4:af:04:28:e0:f5:c9:8f:f3:90:25:c4:91:
                    b5:e5:67:d7:c8:9e:14:f1:6d:68:2a:d7:43:15:ba:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:36:9B:55:7B:F5:6A:90:EA:DE:56:F4:5E:86:FD:53:B1:73:DA:75
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/xDabVXv1apDq3lb0Xob9U7Fz2nU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:77:86:0c:e9:a4:c6:f2:1e:d6:db:50:fc:5c:9a:5a:16:3c:
         f1:b1:b1:ff:8d:60:03:78:31:de:f6:0a:26:a5:a1:35:b3:d0:
         97:65:9d:af:39:8f:8f:67:96:28:49:77:b0:a0:2a:ac:aa:75:
         7f:d5:a3:7e:7c:26:22:cf:6b:bd:70:b2:e7:ea:ea:d4:fa:f4:
         c2:ef:b5:c3:f6:e5:aa:a4:77:b2:d1:cb:d9:50:06:74:01:e8:
         b4:41:99:a2:17:44:32:61:fb:e5:1b:6d:b5:a5:73:0c:c6:3b:
         6b:15:f5:2b:7b:df:9b:71:9f:1c:6a:c4:20:5d:07:d7:82:59:
         8e:07:84:46:b0:f1:46:81:06:c0:1e:2f:83:52:a7:b5:31:46:
         95:cb:b9:99:8c:c7:8e:66:6d:c2:70:97:47:d0:dd:96:be:cc:
         d6:c3:6f:8a:ef:88:4b:b3:e6:6f:ff:d2:ce:1c:7f:f5:9c:cf:
         c1:2c:c5:83:da:26:12:ee:1b:89:00:bb:ed:e1:30:98:6e:1e:
         45:2a:9b:89:fa:73:0b:67:65:e9:b4:73:2b:03:8f:02:0a:74:
         a5:51:10:cf:03:a5:e1:69:3b:95:91:ea:26:bf:9c:8c:09:23:
         64:94:3a:0a:ea:6d:e9:ce:f7:63:e0:50:f9:e9:39:db:be:d0:
         79:53:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:42 2026 by rpki-client