Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/Fsu_f9oevvhOHiNZ4e0vrGAiRTY.roa
File:                     Fsu_f9oevvhOHiNZ4e0vrGAiRTY.roa (raw, json)
Hash identifier:          RPVNXzjMpap5jo0Dbg+YXA8eOzPDVEw8JynuuIlaDfI=
Subject key identifier:   16:CB:BF:7F:DA:1E:BE:F8:4E:1E:23:59:E1:ED:2F:AC:60:22:45:36
Certificate issuer:       /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial:       4F
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/Fsu_f9oevvhOHiNZ4e0vrGAiRTY.roa
Signing time:             Tue 31 Mar 2026 08:14:29 +0000
ROA not before:           Tue 31 Mar 2026 08:14:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        240f:100::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
        Validity
            Not Before: Mar 31 08:14:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=16CBBF7FDA1EBEF84E1E2359E1ED2FAC60224536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:6a:1e:22:7d:53:56:b6:b7:20:2b:d3:74:
                    a7:89:06:cc:9b:d9:6b:e1:b2:b5:9c:a8:86:93:90:
                    ea:24:ff:66:08:e0:db:6d:00:e6:63:eb:b4:16:3a:
                    af:ac:29:71:4b:5c:92:1f:51:b2:db:ef:e0:7d:70:
                    14:be:7d:39:77:4a:1f:8b:05:a7:ce:a1:c1:fa:f1:
                    57:90:2c:bc:1d:f1:b5:a8:84:0c:cd:04:19:3e:5d:
                    f8:34:09:35:f4:a1:bc:7d:fd:9a:ec:f1:cd:3f:cf:
                    13:13:c1:20:b2:03:a1:2b:15:be:0e:d4:d9:43:42:
                    88:1a:5c:27:a7:43:a5:f2:76:47:72:ef:df:aa:3e:
                    5e:3b:5c:e5:04:c8:d0:5b:06:47:8b:bf:c4:f6:24:
                    e0:1e:d7:32:66:96:6b:89:31:70:5e:41:35:02:9c:
                    c1:38:50:a6:5a:75:68:c6:d6:68:06:57:a8:00:ea:
                    d6:10:31:47:7c:fe:f5:b2:6a:bb:43:21:64:04:79:
                    0c:65:ee:71:23:d5:0d:ee:34:d1:c6:a5:fc:2c:71:
                    d3:5f:d0:2f:0a:49:58:27:57:34:b5:f9:e7:28:49:
                    5c:a9:f1:81:20:cc:0c:ed:86:48:7b:90:84:17:1a:
                    1c:b6:91:c3:3f:12:81:e9:0c:be:61:fb:0b:8d:cd:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CB:BF:7F:DA:1E:BE:F8:4E:1E:23:59:E1:ED:2F:AC:60:22:45:36
            X509v3 Authority Key Identifier:
                keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/Fsu_f9oevvhOHiNZ4e0vrGAiRTY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:100::/24

    Signature Algorithm: sha256WithRSAEncryption
         06:32:cd:67:f9:ff:a0:4c:e1:7e:85:68:f1:b2:a9:6f:c2:58:
         e2:17:d0:e0:22:5d:02:64:43:e9:69:aa:4c:ad:86:41:73:eb:
         c2:b7:cd:cc:03:48:8e:87:24:4a:f7:2b:ef:2f:e7:01:fc:38:
         60:ab:a1:14:1e:25:45:90:38:48:ac:22:46:28:7b:8d:bf:ca:
         ee:13:76:e4:05:e5:ec:a0:ec:c2:92:0b:9e:21:01:5d:55:fb:
         ff:bd:e8:a6:a6:ba:60:c5:e7:ef:ff:8e:65:e9:38:b5:34:e6:
         0e:dd:55:19:b4:2b:15:d6:93:fa:62:a8:11:96:78:9a:4d:d1:
         ba:25:fe:dd:44:41:9d:88:a1:9c:6f:10:d5:2b:31:be:0c:5e:
         a0:5c:ef:3d:38:ea:ab:ae:d1:6b:ae:28:38:62:41:b4:f9:02:
         b4:2e:a2:67:c1:09:1e:1b:b7:be:01:2d:fb:f8:bc:0a:32:91:
         61:0e:1f:bd:a0:5c:62:2e:e7:a4:fa:22:72:a1:59:ff:fd:70:
         e1:67:bf:73:08:d2:dc:91:7c:7f:e9:29:46:82:a2:ef:c1:4c:
         aa:b2:be:5a:dc:de:d5:87:79:bc:e8:d0:1f:62:f1:d6:24:5d:
         cf:6c:83:f4:59:14:8a:8b:51:49:64:b0:b9:51:fd:cf:ac:f2:
         8f:5b:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:32 2026 by rpki-client