Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/FnY4DXEUub0yC9V4iBytzM94lyQ.roa
File:                     FnY4DXEUub0yC9V4iBytzM94lyQ.roa (raw, json)
Hash identifier:          Fu1gbfBQyFWg+8JDmrP0GdZfV1gEKyr/lPNokVqZ7LI=
Subject key identifier:   16:76:38:0D:71:14:B9:BD:32:0B:D5:78:88:1C:AD:CC:CF:78:97:24
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       0C
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/FnY4DXEUub0yC9V4iBytzM94lyQ.roa
Signing time:             Fri 18 Sep 2026 06:05:43 +0000
ROA not before:           Fri 18 Sep 2026 06:05:43 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        203.132.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 18 06:05:43 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=1676380D7114B9BD320BD578881CADCCCF789724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:83:d5:d1:37:96:17:73:34:7f:b4:3b:d1:
                    f8:85:ce:8a:85:b0:17:3d:19:93:b8:f4:8b:e9:11:
                    ef:f9:e0:e7:5c:8c:8e:b5:f1:c6:95:be:db:c6:58:
                    c6:12:42:de:f2:2d:6a:b7:0d:7e:81:6c:07:0d:91:
                    fb:71:cb:d4:5e:d7:f9:8d:90:1a:0f:f1:e0:0f:0c:
                    54:3a:bb:e2:dd:5e:1f:9c:bf:42:d2:32:a8:73:2b:
                    d1:8c:cb:7a:08:82:68:4f:22:5d:ea:b4:37:46:6b:
                    a8:6d:00:05:24:56:83:65:72:c9:f7:01:ed:77:91:
                    c4:9e:9a:09:88:0f:82:47:be:87:ac:fd:bd:f1:7a:
                    2e:50:02:ad:6a:b4:58:7f:c9:e9:95:fa:a8:e3:95:
                    7a:3e:f7:ae:2f:c3:69:4d:74:4e:98:85:41:e1:58:
                    46:99:d9:3c:4f:93:e3:3b:d5:1f:68:d0:f2:c6:1a:
                    0a:40:9e:0e:bd:d2:47:08:b3:10:65:dc:45:bc:78:
                    bb:c3:86:a3:e1:b0:80:a9:ad:9e:e1:b2:1b:6f:25:
                    bf:93:ed:16:f2:ef:05:9c:56:df:36:c1:d3:e7:c2:
                    d4:09:7b:9e:f9:16:bc:02:71:80:2d:cd:f7:47:4f:
                    7c:78:53:8d:87:1a:c9:14:dc:81:41:3a:df:9d:88:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:76:38:0D:71:14:B9:BD:32:0B:D5:78:88:1C:AD:CC:CF:78:97:24
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/FnY4DXEUub0yC9V4iBytzM94lyQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.132.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:df:0a:bd:d0:f6:b5:ea:97:b2:e6:fd:0d:e4:b5:b4:3d:19:
         fd:40:59:4c:f5:f8:35:46:13:29:7f:e3:92:b6:f7:3d:99:bd:
         cc:00:25:39:ad:c5:2c:49:0c:97:4d:ac:78:74:43:1e:bb:79:
         5b:e8:a4:5a:20:b8:84:28:bc:27:c4:25:f7:d0:80:0a:9f:7e:
         57:f2:57:de:07:f0:c6:64:98:df:3a:df:e4:24:e6:29:86:2c:
         37:c3:f9:26:4a:19:80:fe:0d:15:74:c4:ea:53:80:7a:a6:9f:
         b8:1e:bd:95:e7:21:84:dc:42:41:aa:5e:f9:d2:51:e0:96:7f:
         51:c0:14:c0:10:02:ba:66:46:ff:7d:2a:8f:ba:88:5e:d3:59:
         fd:fc:40:28:3c:a4:6d:b1:b1:be:c0:9e:5b:a5:99:85:d3:5e:
         b7:dd:08:49:05:4d:69:21:49:cb:b8:6a:3d:d6:ed:e9:9d:f1:
         a4:3e:fc:d6:04:21:2f:89:01:83:61:e9:b0:b0:78:12:a4:ed:
         f1:e8:65:c8:24:4f:31:fd:2f:3f:74:9b:2d:d6:2e:d6:d1:66:
         d2:b1:f7:b6:b8:fc:ed:28:9d:2b:eb:db:09:6b:f6:dc:3b:cd:
         96:83:71:fb:fc:48:90:aa:16:c2:63:b5:fc:17:c4:bf:e4:ac:
         31:e7:41:59
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QTdC
MTYyQzExRTc0RUJGOEQ2QjQ5MTRENjcxQ0QyOUJBOTlBOUI5MB4XDTI2MDkxODA2
MDU0M1oXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMTY3NjM4MEQ3MTE0QjlC
RDMyMEJENTc4ODgxQ0FEQ0NDRjc4OTcyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOXgg9XRN5YXczR/tDvR+IXOioWwFz0Zk7j0i+kR7/ng51yMjrXx
xpW+28ZYxhJC3vItarcNfoFsBw2R+3HL1F7X+Y2QGg/x4A8MVDq74t1eH5y/QtIy
qHMr0YzLegiCaE8iXeq0N0ZrqG0ABSRWg2VyyfcB7XeRxJ6aCYgPgke+h6z9vfF6
LlACrWq0WH/J6ZX6qOOVej73ri/DaU10TpiFQeFYRpnZPE+T4zvVH2jQ8sYaCkCe
Dr3SRwizEGXcRbx4u8OGo+GwgKmtnuGyG28lv5PtFvLvBZxW3zbB0+fC1Al7nvkW
vAJxgC3N90dPfHhTjYcayRTcgUE6352I/skCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQWdjgNcRS5vTIL1XiIHK3Mz3iXJDAfBgNVHSMEGDAWgBR6exYsEedOv41rSRTW
cc0pupmpuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjIwL2Vuc1dMQkhuVHItTmEwa1UxbkhOS2JxWnFiay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2Vuc1dMQkhuVHItTmEwa1UxbkhOS2Jx
WnFiay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MjAvRm5ZNERYRVV1YjB5QzlWNGlCeXR6TTk0bHlRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcuEYDANBgkqhkiG9w0BAQsFAAOCAQEA
Zt8KvdD2teqXsub9DeS1tD0Z/UBZTPX4NUYTKX/jkrb3PZm9zAAlOa3FLEkMl02s
eHRDHrt5W+ikWiC4hCi8J8Ql99CACp9+V/JX3gfwxmSY3zrf5CTmKYYsN8P5JkoZ
gP4NFXTE6lOAeqafuB69lechhNxCQape+dJR4JZ/UcAUwBACumZG/30qj7qIXtNZ
/fxAKDykbbGxvsCeW6WZhdNet90ISQVNaSFJy7hqPdbt6Z3xpD781gQhL4kBg2Hp
sLB4EqTt8ehlyCRPMf0vP3SbLdYu1tFm0rH3trj87SidK+vbCWv23DvNloNx+/xI
kKoWwmO1/BfEv+SsMedBWQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:40 2026 by rpki-client