Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/FcK96AjIUNHNrQucl42d5AF1jnY.roa
File:                     FcK96AjIUNHNrQucl42d5AF1jnY.roa (raw, json)
Hash identifier:          NZBc7sIJR8YSlL97XtfQ5L5J2TX+1FjdOspzwympsDw=
Subject key identifier:   15:C2:BD:E8:08:C8:50:D1:CD:AD:0B:9C:97:8D:9D:E4:01:75:8E:76
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       31
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/FcK96AjIUNHNrQucl42d5AF1jnY.roa
Signing time:             Sun 01 Mar 2026 01:36:14 +0000
ROA not before:           Sun 01 Mar 2026 01:36:14 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17931
IP address blocks:        203.191.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Mar  1 01:36:14 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=15C2BDE808C850D1CDAD0B9C978D9DE401758E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:9a:df:60:89:65:57:03:31:3c:2f:d2:d5:
                    f3:fe:4b:68:c5:40:52:7b:8d:db:9f:b3:c1:2c:b4:
                    f0:d1:6c:05:1f:b2:90:f7:b3:bb:03:55:1f:f8:cc:
                    f0:0c:64:f6:b7:e8:3f:6c:2b:49:2c:ab:4d:c4:7d:
                    17:0f:42:bf:c4:78:69:74:5c:8a:da:20:22:0b:7e:
                    46:fd:7a:dd:e9:c5:e6:b4:95:c6:ab:d9:cc:46:82:
                    b9:98:79:8f:50:59:81:8f:b6:08:53:c0:94:a5:23:
                    c7:95:19:f6:07:b7:5e:d2:0c:31:8c:95:48:a6:b0:
                    d5:fb:aa:14:9f:c8:9e:02:bb:07:f1:9c:b9:40:41:
                    92:38:bb:54:c3:20:83:d6:f0:66:a8:4d:91:ca:0a:
                    52:0c:ef:9b:74:d6:3e:29:0a:4c:57:e0:eb:0e:1b:
                    ce:0e:e3:93:fd:5b:91:0b:3a:ae:21:73:3e:2b:0e:
                    05:27:96:75:f8:c6:11:61:12:bb:2a:6d:00:10:48:
                    14:eb:5b:46:aa:29:8e:3b:87:18:a1:bd:80:93:61:
                    f4:3a:8b:37:8c:ed:26:e4:ff:ab:a5:51:b0:5a:fe:
                    f9:78:08:fe:6e:9c:07:2c:6c:bd:4a:02:d8:19:ff:
                    61:6a:bd:1a:db:59:a1:c1:d7:f4:0b:75:83:ac:15:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C2:BD:E8:08:C8:50:D1:CD:AD:0B:9C:97:8D:9D:E4:01:75:8E:76
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/FcK96AjIUNHNrQucl42d5AF1jnY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:36:a1:ee:8d:33:3d:47:97:a8:7d:32:e9:01:f7:46:cb:32:
         5a:58:99:48:de:91:20:21:c0:d7:9d:5c:87:02:ab:b8:54:f7:
         07:02:f4:fa:88:f7:c0:7e:b7:1e:c4:ca:2f:b6:0b:30:1d:92:
         8f:69:39:9e:d7:15:1d:7d:64:ee:42:f6:a6:17:50:33:7e:aa:
         30:78:97:17:58:6a:59:87:f0:5d:29:3e:02:85:64:86:24:e5:
         a0:b4:2a:03:e1:fd:e1:ed:f8:ac:51:61:ca:f3:e3:ec:46:9b:
         fa:ee:80:e7:62:e3:7b:56:03:ca:79:ac:6e:46:a8:e5:a2:89:
         54:d2:e4:b5:b5:03:30:ab:da:36:56:59:6a:61:8d:ef:74:3a:
         f9:46:8a:d1:75:0e:6b:42:99:71:3d:7b:77:0e:95:50:90:bd:
         a6:e3:6a:83:50:b2:82:11:c5:1d:af:01:67:f0:70:ae:1f:77:
         37:62:85:4c:93:a1:81:ce:25:7c:fd:21:e8:1e:60:30:0f:7d:
         a5:7b:bc:04:37:db:63:e1:8b:c0:9b:5d:2b:57:18:98:99:7e:
         71:f6:a0:6b:2b:f3:76:eb:36:44:3f:7e:e7:3e:3a:d6:80:15:
         d0:23:71:b3:ea:13:eb:11:66:f7:2e:2d:9b:b4:6b:11:94:7b:
         9f:1b:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:56 2026 by rpki-client