Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/FeTW_CC74ZwLzJqPpsHhgExt5ls.roa
File:                     FeTW_CC74ZwLzJqPpsHhgExt5ls.roa (raw, json)
Hash identifier:          XoyX+DZLKIhTAmbeEiMfMDn/8hXhPGO6eBbvSxtQcX4=
Subject key identifier:   15:E4:D6:FC:20:BB:E1:9C:0B:CC:9A:8F:A6:C1:E1:80:4C:6D:E6:5B
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       018E
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/FeTW_CC74ZwLzJqPpsHhgExt5ls.roa
Signing time:             Tue 31 Mar 2026 07:38:17 +0000
ROA not before:           Tue 31 Mar 2026 07:38:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10021
IP address blocks:        110.50.76.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar 31 07:38:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=15E4D6FC20BBE19C0BCC9A8FA6C1E1804C6DE65B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:5a:a9:ac:09:8a:69:42:20:af:29:1e:7a:
                    2d:e8:ea:15:f6:51:36:c0:0f:3d:15:c2:34:5e:94:
                    8e:b0:15:79:48:4c:47:a1:90:b1:e8:c3:b7:c3:0c:
                    c5:eb:cb:91:ea:2f:5e:5a:dc:f4:63:69:15:1a:b4:
                    85:4d:cb:cc:e8:10:aa:bf:e3:2f:08:77:ec:ea:f4:
                    51:82:42:f1:3f:fc:69:86:87:c0:90:1a:6d:e6:0d:
                    21:ce:d4:38:75:e1:d9:50:bb:bb:56:c8:be:e6:95:
                    28:4c:0a:0d:94:f8:af:73:0e:a3:4d:9b:38:c8:32:
                    a7:10:a0:38:f2:59:c6:fd:06:ce:14:e2:ba:e2:64:
                    4a:b6:8b:b2:9c:e1:02:36:03:9e:7f:3e:b7:b9:b8:
                    90:1c:17:dd:9b:a5:ab:4a:36:79:85:94:ae:6c:85:
                    c2:87:99:18:b3:a1:99:0e:b2:f0:8b:47:fc:31:70:
                    b4:f2:77:66:5a:dc:11:a9:83:ce:c2:2d:0d:7d:85:
                    7e:8a:d8:b6:64:c9:01:cb:65:77:e3:a6:73:7f:2e:
                    99:79:94:1b:a2:b6:19:c3:4c:bd:42:44:d3:47:a8:
                    78:bb:2e:f8:57:48:54:d8:6d:d0:47:72:d4:9b:82:
                    91:3f:ea:fa:4d:cf:12:90:d5:65:ad:68:fc:85:b3:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:D6:FC:20:BB:E1:9C:0B:CC:9A:8F:A6:C1:E1:80:4C:6D:E6:5B
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/FeTW_CC74ZwLzJqPpsHhgExt5ls.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:5a:47:db:64:b5:29:82:b3:72:3e:de:16:91:64:a6:4b:95:
         a2:25:90:03:fa:f8:f2:e3:c4:05:c7:94:53:9f:ea:b5:30:3d:
         dd:4d:30:15:13:a8:4d:52:16:18:70:a0:73:05:c0:df:16:b0:
         a1:d0:0e:55:9e:a1:14:f8:2e:ac:9a:6e:40:8c:10:6b:eb:84:
         1b:da:21:c5:bc:3a:d8:69:88:38:af:2d:9c:4b:3b:a1:1d:6e:
         28:94:8a:db:e4:70:b9:93:3d:06:46:45:d4:a7:c4:39:4b:87:
         7f:93:6d:88:ba:51:af:34:d3:fd:f8:b3:d5:e2:83:7d:69:7e:
         4e:4c:b3:74:2b:96:2e:2e:58:1a:3c:65:b4:5d:67:c1:f3:91:
         e8:ff:14:1c:7a:f6:50:94:ce:3d:13:de:cf:71:d7:70:06:5a:
         12:26:77:92:fe:89:0b:89:79:ce:ba:57:62:f2:e4:c2:c6:50:
         da:16:04:02:77:13:2a:32:6c:12:3e:17:4c:fc:71:6b:54:7c:
         36:00:ce:50:00:4b:69:6b:56:d4:d4:9c:82:6d:af:96:7f:4f:
         60:b7:28:47:c0:58:0b:f4:2e:65:53:60:8f:d4:b0:e2:03:ac:
         45:41:be:e6:db:9e:66:91:0e:32:be:b7:30:57:1b:2a:32:e5:
         89:59:94:ba
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNjAzMzEw
NzM4MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1RTRENkZDMjBCQkUx
OUMwQkNDOUE4RkE2QzFFMTgwNEM2REU2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoVVqprAmKaUIgrykeei3o6hX2UTbADz0VwjRelI6wFXlITEeh
kLHow7fDDMXry5HqL15a3PRjaRUatIVNy8zoEKq/4y8Id+zq9FGCQvE//GmGh8CQ
Gm3mDSHO1Dh14dlQu7tWyL7mlShMCg2U+K9zDqNNmzjIMqcQoDjyWcb9Bs4U4rri
ZEq2i7Kc4QI2A55/Pre5uJAcF92bpatKNnmFlK5shcKHmRizoZkOsvCLR/wxcLTy
d2Za3BGpg87CLQ19hX6K2LZkyQHLZXfjpnN/Lpl5lBuithnDTL1CRNNHqHi7LvhX
SFTYbdBHctSbgpE/6vpNzxKQ1WWtaPyFs3QvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUFeTW/CC74ZwLzJqPpsHhgExt5lswHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDY5L0ZlVFdfQ0M3NFp3THpKcVBwc0hoZ0V4dDVscy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFuMkwwDQYJKoZIhvcNAQELBQADggEB
AEBaR9tktSmCs3I+3haRZKZLlaIlkAP6+PLjxAXHlFOf6rUwPd1NMBUTqE1SFhhw
oHMFwN8WsKHQDlWeoRT4LqyabkCMEGvrhBvaIcW8OthpiDivLZxLO6EdbiiUitvk
cLmTPQZGRdSnxDlLh3+TbYi6Ua800/34s9Xig31pfk5Ms3Qrli4uWBo8ZbRdZ8Hz
kej/FBx69lCUzj0T3s9x13AGWhImd5L+iQuJec66V2Ly5MLGUNoWBAJ3EyoybBI+
F0z8cWtUfDYAzlAAS2lrVtTUnIJtr5Z/T2C3KEfAWAv0LmVTYI/UsOIDrEVBvubb
nmaRDjK+tzBXGyoy5YlZlLo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:34 2026 by rpki-client