Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/FsjWFoocuU26_WNJcvkA3RRoYNo.roa
File:                     FsjWFoocuU26_WNJcvkA3RRoYNo.roa (raw, json)
Hash identifier:          Tz0hzaGasyExWIx0D+kekx2dLrH/e1xnkpJzNLkCckA=
Subject key identifier:   16:C8:D6:16:8A:1C:B9:4D:BA:FD:63:49:72:F9:00:DD:14:68:60:DA
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       56
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/FsjWFoocuU26_WNJcvkA3RRoYNo.roa
Signing time:             Tue 31 Mar 2026 08:31:52 +0000
ROA not before:           Tue 31 Mar 2026 08:31:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37899
IP address blocks:        240b:250::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Mar 31 08:31:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=16C8D6168A1CB94DBAFD634972F900DD146860DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:c4:6b:02:73:a7:60:3a:43:3f:06:5b:a3:
                    6e:ad:5b:93:b1:d3:26:2e:d9:88:08:25:9c:25:3b:
                    dd:9f:6c:b6:a9:09:8e:f9:ed:61:d3:12:82:8d:67:
                    ea:70:0d:fe:8a:7d:54:bf:66:d5:27:66:1a:9a:df:
                    ef:a3:7c:f2:af:70:5f:fe:43:57:7e:ce:fd:b5:3e:
                    75:6a:03:30:3e:30:2c:95:d9:1b:2f:db:a2:ea:e1:
                    60:33:c7:d4:26:5d:53:ab:ce:e3:1c:1d:ef:61:a2:
                    c5:ac:71:24:a8:6d:d2:4b:d1:91:3e:fe:1b:72:76:
                    b0:a4:ee:cf:bf:fe:19:a0:72:36:fd:40:74:8a:7b:
                    b6:68:3d:82:44:71:20:5a:89:2f:24:b9:2e:bb:92:
                    28:9b:f9:14:9a:8a:95:16:25:f6:12:88:8e:7d:c4:
                    e9:62:7c:e8:28:32:14:dc:21:d5:be:3c:45:fb:bf:
                    7b:0c:00:be:8d:25:11:c2:37:4d:be:95:74:c7:61:
                    74:32:8e:2e:ec:37:07:5c:90:17:87:e7:26:18:72:
                    08:dd:af:50:27:59:95:9b:b0:b3:03:f4:36:64:6a:
                    a9:49:27:25:a9:2c:b2:83:1b:9e:d3:46:24:9e:59:
                    64:ba:5d:6c:95:71:8d:10:e7:e9:b0:63:9e:5c:91:
                    5a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C8:D6:16:8A:1C:B9:4D:BA:FD:63:49:72:F9:00:DD:14:68:60:DA
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/FsjWFoocuU26_WNJcvkA3RRoYNo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:de:3e:51:d3:37:62:c7:21:f7:6d:13:51:e1:05:59:23:af:
         db:2b:59:62:00:c3:75:84:39:17:d1:27:85:bb:c5:70:6f:0f:
         87:af:e4:39:a2:21:18:d3:34:37:a8:e8:3c:ac:d0:01:46:4d:
         fe:ac:7e:af:4c:ee:09:83:f8:f7:a0:72:56:41:1b:6d:e4:09:
         f5:4a:4c:5a:73:ab:57:a5:1b:8a:ae:2c:74:58:66:5e:d6:64:
         82:62:5b:7e:8c:c0:28:0a:41:ed:cc:58:03:2d:e3:0f:f2:bd:
         bc:b9:b4:ff:08:c9:99:ad:35:71:93:fd:74:4d:6d:6f:a3:8b:
         ae:24:90:22:14:64:80:7e:2f:4b:60:0d:8f:cc:d1:19:2e:d1:
         8b:e2:60:99:58:e4:e0:b4:c8:1b:8c:a5:8b:06:8b:e8:a2:ac:
         70:96:8b:12:89:53:c0:04:30:a0:2f:7f:97:0c:5b:5f:57:2b:
         62:62:b0:ea:77:72:d2:93:a2:ee:96:21:b8:ea:28:62:6c:f9:
         8b:96:fb:6b:6e:82:ad:6d:d7:9d:0d:52:5b:1c:1f:dc:51:d2:
         b2:27:7e:7b:b9:a9:44:1b:8f:60:bd:eb:e4:1e:5c:f7:66:a4:
         57:d1:c8:66:61:b4:85:64:68:56:3d:ec:e5:5f:99:eb:ab:40:
         9d:87:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:50 2026 by rpki-client