Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/526/FyXXJukVcriZorKe1GW8a4AVbbQ.roa
File:                     FyXXJukVcriZorKe1GW8a4AVbbQ.roa (raw, json)
Hash identifier:          gr+Fw/J8LoYE8mw1ZbO36aN4ZkYirNhHg5Gfv2at3sA=
Subject key identifier:   17:25:D7:26:E9:15:72:B8:99:A2:B2:9E:D4:65:BC:6B:80:15:6D:B4
Certificate issuer:       /CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
Certificate serial:       0F
Authority key identifier: 8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/FyXXJukVcriZorKe1GW8a4AVbbQ.roa
Signing time:             Tue 31 Mar 2026 08:47:19 +0000
ROA not before:           Tue 31 Mar 2026 08:47:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     215029
IP address blocks:        119.15.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
        Validity
            Not Before: Mar 31 08:47:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1725D726E91572B899A2B29ED465BC6B80156DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:68:00:ad:f1:58:a4:72:90:3b:14:80:e2:
                    64:0f:8e:c5:99:9e:e0:db:f9:3a:24:4d:4d:57:0d:
                    86:05:a1:e8:99:7b:6d:07:fb:5e:f1:9d:dd:d5:0b:
                    0e:34:74:44:e6:44:3b:cb:9f:87:fb:f2:21:9d:c6:
                    34:b9:e0:80:8d:4d:8a:a4:c2:0d:95:83:31:f4:3b:
                    d0:36:67:2b:c9:1f:8c:0d:ef:61:da:32:c4:36:bd:
                    ac:a0:6a:41:d4:83:b7:09:09:4b:44:f8:d3:10:b1:
                    63:fd:80:d0:a3:51:02:6d:63:bb:13:35:50:32:75:
                    1b:87:50:4d:55:ae:79:7d:f4:11:73:08:df:5b:01:
                    46:66:1d:60:b5:e4:dc:32:ca:42:65:1e:93:07:bd:
                    25:b8:ad:f6:8d:37:cf:f8:7a:49:49:96:ee:97:fc:
                    38:33:00:6e:aa:5e:54:ef:be:d6:2f:08:3a:4e:cc:
                    f2:c2:c6:eb:d8:ed:61:a1:99:31:0f:f6:3b:26:9c:
                    86:64:5f:8c:ff:78:01:1c:17:19:ac:21:39:59:60:
                    73:43:d5:39:f8:76:ec:23:38:37:98:1a:62:48:f4:
                    fb:2a:64:f5:46:17:6c:ea:1f:75:1a:9e:7e:46:fa:
                    67:8e:c5:dc:59:38:c2:cd:57:65:26:81:f1:b8:a7:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:25:D7:26:E9:15:72:B8:99:A2:B2:9E:D4:65:BC:6B:80:15:6D:B4
            X509v3 Authority Key Identifier:
                keyid:8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/FyXXJukVcriZorKe1GW8a4AVbbQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:cf:02:e1:49:fe:e8:7a:85:91:f4:2e:d1:56:f0:af:ba:
         a3:1d:06:51:a9:ba:f0:ca:2c:11:da:f9:6d:4d:72:c5:bc:43:
         2e:51:36:89:12:de:51:92:59:68:81:6c:c8:1d:ff:10:cb:61:
         76:e4:94:90:92:7b:ec:4c:b1:ef:63:f5:48:41:68:d3:3a:4f:
         dc:a9:96:d9:cb:b4:6f:70:4f:54:f5:28:d6:a6:48:6c:4d:74:
         27:dc:e6:92:21:6c:15:c3:0a:a6:32:a3:cc:f2:8b:9c:41:9f:
         47:79:70:60:12:72:14:13:3a:f3:87:89:df:d4:2d:31:52:a4:
         68:02:52:a9:3f:e3:31:38:09:ea:6f:d8:72:a6:1f:1f:f0:d3:
         50:64:6d:94:df:31:50:1a:c8:01:41:5f:c4:65:84:a2:83:92:
         53:fa:ae:a7:95:9d:69:60:fa:aa:a6:43:79:3b:31:10:52:23:
         87:02:ce:15:74:c4:a2:c0:7a:d0:9a:4c:c3:97:2f:31:20:58:
         42:66:1a:a3:b3:4f:94:d7:6f:b1:d5:55:68:e4:3b:23:16:3d:
         4a:e8:dd:b3:c7:99:80:da:8e:88:6f:95:87:b5:47:d9:79:45:
         e7:ac:da:db:e8:61:5b:10:f4:72:d6:cb:bf:02:ca:c1:40:40:
         05:c8:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:08 2026 by rpki-client