Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/nfbHD2CUb061xTLoNv_4jXJMyZU.roa
File:                     nfbHD2CUb061xTLoNv_4jXJMyZU.roa (raw, json)
Hash identifier:          x0f6w1BDsOFE/YBi+1wl4Wcu8KkWCTkdtHmvOJZYeq0=
Subject key identifier:   9D:F6:C7:0F:60:94:6F:4E:B5:C5:32:E8:36:FF:F8:8D:72:4C:C9:95
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       76
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/nfbHD2CUb061xTLoNv_4jXJMyZU.roa
Signing time:             Tue 31 Mar 2026 07:27:07 +0000
ROA not before:           Tue 31 Mar 2026 07:27:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38639
IP address blocks:        115.69.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: Mar 31 07:27:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9DF6C70F60946F4EB5C532E836FFF88D724CC995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:5a:32:af:7a:fd:a2:3f:83:ba:05:fa:8a:
                    9b:be:9a:e3:5b:5b:5c:60:85:41:c9:24:6b:7c:59:
                    6e:ae:5a:44:16:b0:c1:26:91:27:67:cc:44:2b:0a:
                    26:f6:c6:40:e6:94:8d:bd:6f:02:ac:fe:35:25:84:
                    07:7b:23:76:4b:d1:a7:5f:80:d1:d9:fa:82:55:93:
                    6d:3a:46:f0:51:67:dc:af:28:e2:2c:1e:35:98:bf:
                    51:9c:4c:35:81:cf:29:02:ce:33:d6:c1:92:45:49:
                    f2:43:44:0a:d5:a4:03:f7:75:32:82:a1:5c:fb:cc:
                    12:65:06:90:64:86:dd:56:fe:02:80:75:52:b3:fa:
                    29:95:fa:0d:3f:32:52:86:ef:63:3d:78:40:21:ed:
                    ec:36:b3:69:0e:84:fe:bf:14:2b:f2:cf:ef:5a:d4:
                    e8:47:1a:45:ff:66:5c:ee:e9:59:4a:d8:86:1e:fd:
                    8f:ff:cd:87:31:b5:a2:96:62:01:4f:b6:01:35:9d:
                    38:88:85:84:87:84:79:e8:03:9f:87:1c:9e:83:61:
                    d1:e8:76:26:0d:1d:4e:12:a7:eb:f4:00:d6:f0:43:
                    bb:49:1b:49:84:44:f4:9e:45:ac:31:b2:e1:7c:05:
                    73:8f:f6:40:b0:2d:be:e9:84:76:5a:9e:9f:57:09:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:C7:0F:60:94:6F:4E:B5:C5:32:E8:36:FF:F8:8D:72:4C:C9:95
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/nfbHD2CUb061xTLoNv_4jXJMyZU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:3d:45:ed:0c:8a:78:54:e4:d9:15:9a:b3:14:af:9b:7e:
         33:16:03:04:50:83:ab:71:0b:73:ca:fd:e7:01:10:2f:06:95:
         a9:06:8d:6a:85:0d:86:63:b9:7b:aa:e6:da:ac:a2:d9:f0:d4:
         70:7f:34:aa:84:44:04:d3:e9:1c:52:04:67:a7:c8:1c:86:04:
         e1:d5:63:8c:6f:59:b1:4b:01:1b:57:82:b8:26:c7:55:ca:e6:
         c0:47:cd:7f:d7:8a:63:05:af:03:18:36:14:86:b2:cc:30:14:
         63:8e:14:9a:3b:74:62:f6:4c:3b:4a:f0:47:ab:ef:da:a5:fc:
         ac:6c:0e:ed:96:39:66:10:cc:b0:49:38:d2:ba:82:5a:9b:76:
         04:47:2a:ff:d6:90:5e:7d:83:1d:a3:42:41:b0:ca:c7:6d:d6:
         75:44:a0:91:2e:db:63:b6:fd:46:15:e1:c2:c7:4a:52:b6:69:
         dd:67:4d:47:27:53:51:53:9e:2b:ed:5a:aa:59:29:fe:c0:a1:
         e5:b0:60:3c:ab:71:dc:6b:f2:5a:57:5a:9f:93:ea:c4:81:72:
         c5:d9:c9:ac:1a:db:a9:c2:ac:96:f3:29:36:72:e4:e4:69:55:
         cf:9d:b4:96:32:5b:22:ca:46:02:b9:af:ad:75:13:8f:1d:9c:
         b0:f9:72:4a
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDEz
RDgyMkE0REQ3QkEwNTA3OEY5RTYwMDI1RjhCRkYxMUJFRjgyMB4XDTI2MDMzMTA3
MjcwN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOURGNkM3MEY2MDk0NkY0
RUI1QzUzMkU4MzZGRkY4OEQ3MjRDQzk5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMtkWjKvev2iP4O6BfqKm76a41tbXGCFQckka3xZbq5aRBawwSaR
J2fMRCsKJvbGQOaUjb1vAqz+NSWEB3sjdkvRp1+A0dn6glWTbTpG8FFn3K8o4iwe
NZi/UZxMNYHPKQLOM9bBkkVJ8kNECtWkA/d1MoKhXPvMEmUGkGSG3Vb+AoB1UrP6
KZX6DT8yUobvYz14QCHt7DazaQ6E/r8UK/LP71rU6EcaRf9mXO7pWUrYhh79j//N
hzG1opZiAU+2ATWdOIiFhIeEeegDn4ccnoNh0eh2Jg0dThKn6/QA1vBDu0kbSYRE
9J5FrDGy4XwFc4/2QLAtvumEdlqen1cJsq8CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSd9scPYJRvTrXFMug2//iNckzJlTAfBgNVHSMEGDAWgBT9E9gipN17oFB4+eYA
Jfi/8RvvgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxMzEvX1JQWUlxVGRlNkJRZVBubUFDWDR2X0ViNzRJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX1JQWUlxVGRlNkJRZVBubUFDWDR2
X0ViNzRJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEzMTMxL25mYkhEMkNVYjA2MXhUTG9Odl80alhKTXlaVS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANzReAwDQYJKoZIhvcNAQELBQAD
ggEBAIT1PUXtDIp4VOTZFZqzFK+bfjMWAwRQg6txC3PK/ecBEC8GlakGjWqFDYZj
uXuq5tqsotnw1HB/NKqERATT6RxSBGenyByGBOHVY4xvWbFLARtXgrgmx1XK5sBH
zX/XimMFrwMYNhSGsswwFGOOFJo7dGL2TDtK8Eer79ql/KxsDu2WOWYQzLBJONK6
glqbdgRHKv/WkF59gx2jQkGwysdt1nVEoJEu22O2/UYV4cLHSlK2ad1nTUcnU1FT
nivtWqpZKf7AoeWwYDyrcdxr8lpXWp+T6sSBcsXZyawa26nCrJbzKTZy5ORpVc+d
tJYyWyLKRgK5r611E48dnLD5cko=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:53 2026 by rpki-client