Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/fCMe7u0FJKfVQqTa-1sy3Uxk8pc.roa
File:                     fCMe7u0FJKfVQqTa-1sy3Uxk8pc.roa (raw, json)
Hash identifier:          7OJ+NKxhXM1Y15k2zI/MB+pfon4RwHhMWnC7J4qOxwY=
Subject key identifier:   7C:23:1E:EE:ED:05:24:A7:D5:42:A4:DA:FB:5B:32:DD:4C:64:F2:97
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01DA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/fCMe7u0FJKfVQqTa-1sy3Uxk8pc.roa
Signing time:             Tue 31 Mar 2026 07:39:50 +0000
ROA not before:           Tue 31 Mar 2026 07:39:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        110.66.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7C231EEEED0524A7D542A4DAFB5B32DD4C64F297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:d3:3c:14:0d:73:23:d8:b0:59:50:0c:95:
                    7f:0c:00:18:a9:3b:65:b9:6d:6a:3e:ef:ae:bb:6e:
                    3c:ab:0e:0c:a1:84:de:22:b7:69:f0:6f:de:e9:91:
                    bf:f4:97:9b:33:ba:2c:71:bc:6f:e1:be:0e:f4:81:
                    14:8a:66:63:6d:98:0e:2c:35:30:b5:17:3b:ed:bd:
                    26:46:74:31:38:5d:3c:35:e6:f4:d4:7e:b6:99:43:
                    a2:08:22:ce:53:86:52:33:0d:14:ac:1b:ce:4f:d2:
                    30:d9:15:3f:c9:3b:ed:d1:bd:a8:11:0d:3f:d9:ac:
                    6d:29:18:23:47:4c:3c:e0:9f:82:38:88:ae:a8:03:
                    1b:57:60:30:37:94:57:6c:44:5b:41:a5:8e:a8:3f:
                    b6:c1:df:fc:e9:e5:46:1b:2b:8b:b6:bb:05:8b:ec:
                    76:ca:59:34:32:43:72:e6:0b:e2:b6:e5:32:e9:37:
                    c1:3e:06:cc:58:4e:51:f7:8c:ba:e1:44:80:40:06:
                    9c:4d:4a:3d:31:86:bc:bc:42:b8:a2:ac:55:9f:1a:
                    0f:f9:10:b0:56:01:f6:49:e5:b5:1d:a0:58:9b:77:
                    a4:e1:db:38:ff:f2:d4:3a:28:d8:d1:09:99:53:f4:
                    b7:a1:53:d4:57:1b:ea:e7:75:b5:b2:d4:6f:cf:56:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:1E:EE:ED:05:24:A7:D5:42:A4:DA:FB:5B:32:DD:4C:64:F2:97
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/fCMe7u0FJKfVQqTa-1sy3Uxk8pc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.66.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:9b:15:81:c1:42:4a:68:4f:ee:89:22:b8:29:cb:0c:0d:
         93:ec:e2:57:8b:d0:87:d1:4a:67:71:80:af:e5:af:00:d3:ea:
         fe:0b:cf:35:d7:35:d1:fd:80:2d:38:16:e7:30:f6:6d:c4:ec:
         75:c1:c7:d4:d0:69:5e:3c:6a:3c:ec:d4:43:be:17:fb:80:b9:
         ec:e1:37:94:75:cc:2c:fc:4a:91:dd:7c:af:24:b9:bc:8a:72:
         39:0a:39:7b:ff:33:f9:38:b0:4b:17:5f:0b:c6:43:50:7b:bd:
         0f:1b:25:f4:89:69:72:55:11:b7:b5:78:57:f9:8e:3d:f3:d2:
         3c:7e:95:7f:88:b1:f0:45:66:68:98:c0:b2:91:8b:44:57:34:
         64:f3:6a:25:be:a7:3b:e6:12:ab:e9:ae:b2:5f:42:48:99:59:
         fd:7f:c6:68:56:65:24:48:6e:14:5c:ec:2b:70:1a:cc:7d:3d:
         89:04:a2:b3:e3:ef:ad:96:c7:f4:da:ba:2f:30:79:c8:76:a9:
         b0:7a:a6:cf:b9:f4:3c:6a:43:5d:09:ee:30:37:b7:f5:bb:4f:
         d3:aa:3c:8a:f0:7d:43:7c:36:8f:d3:2f:3e:e0:a6:3c:76:23:
         37:5b:08:b5:a7:db:17:35:fb:51:6a:c2:72:6e:91:6d:9e:a1:
         09:2d:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:10 2026 by rpki-client