Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/zBUwY5iFA0zeRpSfKPutw4fYcCM.roa
File:                     zBUwY5iFA0zeRpSfKPutw4fYcCM.roa (raw, json)
Hash identifier:          t+LP6ZLwhILmxt19MG2ip1e3WpTb2rG5EJuj5xry8kE=
Subject key identifier:   CC:15:30:63:98:85:03:4C:DE:46:94:9F:28:FB:AD:C3:87:D8:70:23
Certificate issuer:       /CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD
Certificate serial:       42
Authority key identifier: FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/zBUwY5iFA0zeRpSfKPutw4fYcCM.roa
Signing time:             Fri 17 Apr 2026 02:30:21 +0000
ROA not before:           Fri 17 Apr 2026 02:30:21 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        157.70.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD
        Validity
            Not Before: Apr 17 02:30:21 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=CC1530639885034CDE46949F28FBADC387D87023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5a:58:1a:e8:d9:da:ad:ba:88:83:99:6f:67:
                    5f:3f:63:83:57:3c:22:f5:fb:d0:4e:e0:df:d3:8a:
                    62:a8:ca:0e:05:d1:f1:a2:a7:cf:8f:d2:06:3d:ba:
                    2a:d8:55:a3:bd:b0:b1:ff:b6:58:4f:0d:26:84:09:
                    8b:f6:7f:96:2a:cd:1f:2f:1d:ce:82:7f:2f:fa:65:
                    37:66:f5:1f:88:c0:64:ab:86:0b:7e:ef:71:90:d3:
                    32:be:01:ad:c2:ea:82:17:5d:1b:e6:85:3f:f5:0c:
                    d8:d8:cd:a3:81:6a:9e:17:ac:35:aa:e7:b1:b7:be:
                    b1:32:aa:c2:9d:69:95:aa:1c:fd:79:18:22:f7:1f:
                    1d:b0:93:0f:ca:e7:0e:a1:6f:41:a5:29:b4:9a:89:
                    b1:fc:9f:60:c7:cb:c5:3f:4c:d2:78:40:d2:71:c8:
                    df:10:0f:9e:15:92:38:a7:7a:68:43:3c:29:86:a9:
                    46:32:dc:f3:9d:b7:55:99:9c:22:a0:75:4a:cf:a9:
                    9e:6a:1f:54:c1:a0:e8:52:d2:86:96:85:21:e8:a5:
                    ed:25:e7:02:04:81:07:9f:5c:f7:ee:f8:89:55:f7:
                    02:5f:3c:16:0d:f4:9a:6d:66:d4:64:01:06:5b:e4:
                    ee:ec:ff:e8:46:84:95:ab:ba:48:4a:23:50:e4:6a:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:30:63:98:85:03:4C:DE:46:94:9F:28:FB:AD:C3:87:D8:70:23
            X509v3 Authority Key Identifier:
                keyid:FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/zBUwY5iFA0zeRpSfKPutw4fYcCM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:32:c7:5a:94:8d:69:49:41:cb:26:f9:55:6c:6e:c0:05:5e:
         61:f5:f4:b0:42:49:2f:50:3d:dc:9f:ba:f2:3e:f3:5d:5d:a8:
         6a:ce:4e:93:65:f1:f6:f1:9b:40:13:af:d1:ce:6a:2f:19:93:
         18:4e:be:b3:95:8b:d3:b4:0b:28:95:fb:bc:19:da:4f:9b:c0:
         29:81:08:b2:f3:f5:d4:e1:c8:b6:aa:4f:d5:37:c9:93:b6:0c:
         ee:cd:06:2b:b1:28:4c:70:55:d4:a5:4b:ab:f7:d4:97:8a:7a:
         01:dc:f5:b9:b3:33:b1:a3:ee:ee:7a:9e:02:83:42:5e:54:9e:
         18:9d:a3:65:49:00:ba:73:7c:61:17:a4:43:53:3a:c0:87:32:
         f4:f1:3a:4d:6e:73:c3:62:56:6f:28:0b:f4:5d:a8:45:83:d6:
         dd:53:d0:00:f1:7f:2b:92:62:ff:03:df:82:78:74:c7:dd:b3:
         ea:76:e9:74:fb:54:84:dc:e7:16:1e:e9:b8:6b:37:58:b9:fa:
         41:88:b3:f2:2e:ff:70:7c:8e:33:08:ec:97:be:84:5c:24:cc:
         21:b9:bb:27:e3:a0:c5:cb:6b:ea:1b:38:84:89:dd:d2:97:d8:
         f8:45:32:53:6b:6f:b7:23:9c:67:09:f0:34:1b:2e:7c:6e:1f:
         bc:02:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:41 2026 by rpki-client