Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20219/FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa
File:                     FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa (raw, json)
Hash identifier:          ELGMqruWmJyCfU3eydkM9gsal1fOqtVWTMc95I1ZScA=
Subject key identifier:   14:71:0A:17:65:10:91:7F:85:E6:E5:FB:22:CB:AC:A7:EC:CA:CC:04
Certificate issuer:       /CN=2F6DF65BA24733C4B4EBC3FCD1D7F45AC2AB64AC
Certificate serial:       0A
Authority key identifier: 2F:6D:F6:5B:A2:47:33:C4:B4:EB:C3:FC:D1:D7:F4:5A:C2:AB:64:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa
Signing time:             Tue 31 Mar 2026 08:32:33 +0000
ROA not before:           Tue 31 Mar 2026 08:32:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63801
IP address blocks:        192.50.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6DF65BA24733C4B4EBC3FCD1D7F45AC2AB64AC
        Validity
            Not Before: Mar 31 08:32:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=14710A176510917F85E6E5FB22CBACA7ECCACC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:dc:f5:fb:be:c6:e6:95:68:f5:0e:b9:e4:
                    ce:65:11:bf:51:85:5c:b3:64:91:71:f7:19:1d:2f:
                    9e:b8:f2:a0:52:ee:d5:5b:60:da:0c:c8:cb:82:6d:
                    9f:4b:b6:b5:12:26:8e:4a:e6:d2:9e:32:3c:b8:8f:
                    c9:c2:80:d2:0d:f9:e8:c1:8c:f6:44:11:1e:e5:d6:
                    bf:cb:12:be:0f:bb:33:5b:91:6c:4e:ec:22:60:e3:
                    24:5c:1c:ef:8e:d9:c3:f4:9b:4c:62:1d:89:c1:e3:
                    6b:ad:39:0d:f6:4b:ee:72:2e:1b:03:65:92:17:13:
                    60:30:92:bc:3d:2a:ea:d7:8a:1d:84:06:53:e9:96:
                    76:77:74:ce:7a:94:2e:56:4a:b4:a3:9e:16:1f:eb:
                    c9:f0:13:c9:e0:11:34:20:21:7b:2b:cd:9e:62:63:
                    95:52:e2:c2:04:58:a8:60:4e:5d:30:47:3c:92:37:
                    25:a8:c8:42:aa:0c:10:7f:6d:b7:5b:c3:f3:13:af:
                    6f:4c:6b:a3:6e:52:76:8b:6d:0b:e6:1f:eb:8a:1d:
                    c6:cc:c8:df:6e:20:be:e1:59:2f:99:e1:90:db:16:
                    6b:0c:66:e0:6c:d1:98:da:18:07:0b:01:09:8d:e8:
                    91:51:e8:42:66:54:12:66:40:74:fd:8f:33:58:f1:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:71:0A:17:65:10:91:7F:85:E6:E5:FB:22:CB:AC:A7:EC:CA:CC:04
            X509v3 Authority Key Identifier:
                keyid:2F:6D:F6:5B:A2:47:33:C4:B4:EB:C3:FC:D1:D7:F4:5A:C2:AB:64:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:fb:7a:fb:12:f6:cb:28:4d:a8:0a:c4:6a:55:13:51:36:
         df:55:ba:5b:69:49:03:d6:82:86:09:6f:c0:27:11:d5:b2:2b:
         59:6b:48:dc:14:51:ce:74:9e:60:52:84:09:b1:56:8e:7e:8d:
         91:7f:90:06:a9:2c:4f:ef:00:53:58:d1:0d:73:90:16:db:d1:
         96:fd:6f:fd:f1:00:d2:e1:e9:d7:08:ec:1a:9e:df:48:23:a7:
         75:bf:8b:77:fe:8d:4b:2a:65:f3:b2:7b:7a:9c:d8:4f:47:88:
         fb:75:39:c5:4e:14:f2:0e:2a:bc:5d:2a:af:e1:6d:95:62:b2:
         e9:4b:1d:33:f4:88:74:77:0a:4b:a2:3e:c5:23:3f:51:da:82:
         a4:fb:58:b9:1e:64:b6:2e:66:56:c2:38:c2:0d:76:a4:d3:10:
         66:34:52:58:24:2e:18:cb:ce:c1:51:6d:e4:4e:a4:21:92:6c:
         e0:cd:21:51:1b:fb:92:4e:30:ac:f1:a0:4a:9f:f5:ff:71:65:
         31:9a:7a:4c:7a:51:fa:64:19:72:e5:70:f5:cf:47:5c:89:73:
         75:af:c1:a8:1d:7a:26:36:c2:b4:2a:79:94:da:f5:03:53:62:
         56:9d:3c:f8:22:5f:47:2e:6c:35:ff:f3:28:c2:6e:b4:35:b1:
         60:07:8a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:59 2026 by rpki-client