Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/fiOuom36xeCfcxEhRjzoFaXQH1c.roa
File:                     fiOuom36xeCfcxEhRjzoFaXQH1c.roa (raw, json)
Hash identifier:          JC7lkj9i86w+4pbYAvp7hqrUk9m9bCaRDq9wmNQdXX0=
Subject key identifier:   7E:23:AE:A2:6D:FA:C5:E0:9F:73:11:21:46:3C:E8:15:A5:D0:1F:57
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       5F
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/fiOuom36xeCfcxEhRjzoFaXQH1c.roa
Signing time:             Tue 31 Mar 2026 08:34:08 +0000
ROA not before:           Tue 31 Mar 2026 08:34:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        110.50.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7E23AEA26DFAC5E09F731121463CE815A5D01F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:b9:f0:8e:93:80:9a:86:91:9b:4c:57:74:
                    5c:b9:94:f9:f2:93:e1:24:e1:80:d1:2f:0f:77:b8:
                    af:7e:fe:23:75:c8:ce:e2:7f:53:02:59:24:b8:b0:
                    28:c7:0d:ac:a8:75:d0:f9:b5:9e:d3:f5:2e:d4:7e:
                    63:03:a1:2c:69:37:88:91:17:f4:af:a1:ee:39:cb:
                    d6:09:b0:53:0a:81:d7:84:3c:b0:67:0c:2c:bd:30:
                    76:b5:a9:ff:89:2a:08:c4:58:81:44:c7:87:7c:b5:
                    64:1c:00:e5:7b:c6:fb:9e:ed:aa:fa:02:fa:6b:71:
                    bd:7e:e1:bc:15:0f:df:ae:61:46:4b:e6:2f:ba:91:
                    61:31:ab:c8:90:4a:4e:47:c7:93:a2:38:47:d0:05:
                    06:66:7a:6b:bc:26:9d:f5:c4:71:8d:e8:90:55:96:
                    56:50:f6:e5:bf:a6:54:68:e4:9b:b1:87:64:be:1a:
                    57:17:cf:9d:82:02:c4:16:d6:a7:5c:c5:43:3f:76:
                    5e:86:31:9b:6f:8b:73:46:83:f6:13:6f:91:a8:a2:
                    37:08:17:4b:d5:49:03:fa:95:fa:db:e1:8b:3f:cd:
                    ef:b4:2a:1b:7d:55:2c:4d:bf:ac:8c:a3:4b:b5:53:
                    db:22:ce:ea:a2:9a:5e:37:51:59:92:04:9a:dc:25:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:AE:A2:6D:FA:C5:E0:9F:73:11:21:46:3C:E8:15:A5:D0:1F:57
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/fiOuom36xeCfcxEhRjzoFaXQH1c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:ff:9b:fb:99:59:d9:19:9f:2a:9c:39:00:a6:a5:f4:14:
         56:81:c7:88:54:77:b4:ed:aa:15:74:5c:b7:70:b9:a8:03:fb:
         c4:63:9c:b1:36:e4:ea:1c:d3:c9:42:32:d0:9e:04:24:39:9d:
         97:82:fd:8b:3e:31:3c:75:63:63:16:3a:b0:ba:d9:29:0a:ec:
         ec:9c:08:0b:c9:94:b2:2f:19:07:5b:96:30:6f:70:b8:41:2a:
         38:b9:78:21:f6:5c:e6:6e:ff:97:3f:cb:05:8f:49:61:69:b6:
         ff:cc:a1:d7:dc:a5:0f:09:80:6c:8e:3f:16:a5:e7:6f:e4:4d:
         bf:69:73:2e:8d:09:e6:3c:b7:3e:40:e6:96:f1:81:f9:59:c4:
         29:52:06:51:58:00:b3:f2:df:21:02:37:9d:34:bc:8f:b9:d3:
         a5:4a:e9:fd:5b:a4:63:fc:a1:e3:35:96:79:d5:60:55:7a:3e:
         32:ab:35:65:6a:6d:a7:38:14:ff:e0:eb:d5:a8:fd:f8:7f:24:
         a8:8c:2b:92:59:0e:e6:5d:ca:fb:cb:3a:67:93:1b:61:9b:cf:
         36:b0:ba:d7:c7:5a:2d:7b:19:ba:da:43:67:39:ca:c2:f4:bb:
         e7:08:8c:0d:6c:c0:3f:1e:b0:04:cd:79:75:54:c7:61:51:6f:
         4d:51:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:00 2026 by rpki-client