Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/FV3DzycBEG5GHRBhc9ZJ1MDS6cM.roa
File:                     FV3DzycBEG5GHRBhc9ZJ1MDS6cM.roa (raw, json)
Hash identifier:          /lJO3aMWN/rIq1XLnFJC8ZJHFeOAw3fUNXy7WPaadtw=
Subject key identifier:   15:5D:C3:CF:27:01:10:6E:46:1D:10:61:73:D6:49:D4:C0:D2:E9:C3
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       C8
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FV3DzycBEG5GHRBhc9ZJ1MDS6cM.roa
Signing time:             Tue 31 Mar 2026 07:39:42 +0000
ROA not before:           Tue 31 Mar 2026 07:39:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        66.11.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Mar 31 07:39:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=155DC3CF2701106E461D106173D649D4C0D2E9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:0a:19:6b:45:18:e8:ad:1d:b6:a5:c3:56:
                    7d:fb:a0:48:8e:74:de:d9:f0:41:7d:ae:4a:3a:5b:
                    da:c1:bc:07:db:d6:c6:db:86:28:2d:35:0b:ab:7a:
                    71:05:35:84:6e:23:1c:fd:54:38:fc:fb:1d:b6:65:
                    e4:40:ee:54:fd:b1:58:43:52:cc:ed:62:5d:bc:e8:
                    e0:66:06:9a:31:80:6a:4a:c6:75:65:23:7f:ee:93:
                    27:c3:b8:8f:99:ff:f7:0c:ab:b7:ea:e2:0a:68:8d:
                    10:11:2f:65:06:6a:ea:13:6c:93:62:1c:7c:be:43:
                    3c:30:75:1c:fd:55:25:f5:9f:dd:71:56:e7:46:c5:
                    ed:bc:54:19:1f:a2:d1:88:83:95:4b:79:1b:47:8f:
                    16:2e:36:e9:56:e3:c5:d9:0b:dd:b8:af:4e:86:dd:
                    cb:ef:22:a4:b0:c7:eb:3b:85:f1:df:c4:37:1a:da:
                    47:c9:c8:26:b3:46:7e:fb:ba:c8:f5:76:12:2b:c9:
                    50:fb:7b:fd:7a:85:d5:3c:f2:d8:c4:d8:88:38:cd:
                    65:19:64:ae:1d:86:ab:1f:ee:5a:d0:1f:30:d3:55:
                    a8:06:e2:47:43:77:61:30:68:c2:3b:7b:71:d8:b9:
                    f5:a2:43:a4:37:e8:24:1c:ad:97:df:06:ae:ab:02:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5D:C3:CF:27:01:10:6E:46:1D:10:61:73:D6:49:D4:C0:D2:E9:C3
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FV3DzycBEG5GHRBhc9ZJ1MDS6cM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:fa:9f:81:0f:13:6e:2f:c0:6c:fe:05:fd:d0:f1:e9:6c:7b:
         de:bb:e2:89:c4:eb:55:43:fd:e8:d2:21:61:1f:13:c6:1c:34:
         f2:ca:14:db:ee:7f:53:e1:65:b7:f7:3b:be:da:06:8f:26:71:
         27:b0:51:16:06:36:81:58:6b:34:c0:67:7d:16:f7:6c:4a:48:
         6b:8f:84:6a:44:00:a3:58:93:18:3e:55:36:bf:14:a1:54:f4:
         7e:f0:6b:cb:e1:e4:04:53:58:3f:2d:dd:ba:ad:57:47:b4:f4:
         30:d6:88:ed:23:05:85:05:67:72:b9:81:be:cc:f9:50:30:c7:
         25:9c:79:0e:a6:9e:bd:62:8e:df:b1:2f:78:7b:1e:be:1c:4a:
         fa:7c:34:e8:95:b1:9d:a0:5c:f4:80:33:95:c7:0b:98:a4:60:
         a0:a4:bd:5a:b1:dc:2d:34:a2:4d:08:43:6e:8a:51:15:e9:75:
         3f:7e:96:45:de:6c:6b:5d:91:ef:c0:e9:9d:04:c7:ae:da:50:
         c9:d6:f6:b9:3e:80:40:2a:49:86:9b:fb:21:66:4f:64:ee:94:
         69:27:69:40:72:b1:87:63:14:82:b9:fa:4d:cd:89:cc:67:4e:
         92:a9:02:7b:5b:36:b3:9b:2d:81:30:f4:6d:a2:f8:04:f9:a5:
         1a:18:57:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:15 2026 by rpki-client