Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/fHmKWKP6NXQD740pvQX2V4sZABo.roa
File:                     fHmKWKP6NXQD740pvQX2V4sZABo.roa (raw, json)
Hash identifier:          86MeHdu2DteJjhxFP1ZjhAJiV9c72OTB0rh1xLefBfI=
Subject key identifier:   7C:79:8A:58:A3:FA:35:74:03:EF:8D:29:BD:05:F6:57:8B:19:00:1A
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       53
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/fHmKWKP6NXQD740pvQX2V4sZABo.roa
Signing time:             Sun 01 Mar 2026 01:32:02 +0000
ROA not before:           Sun 01 Mar 2026 01:32:02 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17958
IP address blocks:        219.103.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Mar  1 01:32:02 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=7C798A58A3FA357403EF8D29BD05F6578B19001A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:94:84:54:e1:a7:f0:46:10:50:23:1d:8a:
                    72:41:a7:84:71:ca:dd:13:77:8f:ab:5a:1d:f0:af:
                    5e:86:cc:0a:3c:f3:c8:62:42:8d:f2:74:21:f9:63:
                    34:89:92:dd:0a:53:ab:4b:27:43:ec:d8:1f:7f:58:
                    95:02:12:61:85:6b:e4:dc:02:b0:64:4b:d8:7f:41:
                    92:ee:00:67:95:05:52:00:ba:8d:d1:a0:0c:43:78:
                    59:3d:ea:c8:30:07:39:07:71:3a:fb:70:cd:2d:4c:
                    2f:a8:4d:be:2f:d0:5f:ef:d1:76:b0:67:bd:46:58:
                    64:77:d1:2d:15:1b:8d:b1:a2:90:7b:43:f0:18:cb:
                    85:31:b9:4d:c1:27:02:7d:91:c6:7c:cc:ce:a5:4a:
                    99:32:f6:76:52:f3:80:45:ff:5a:fc:0e:0e:24:a5:
                    e1:60:c5:57:89:41:2f:55:6c:62:52:cf:ba:7f:a2:
                    e0:70:a7:32:01:e0:42:28:65:0c:ac:a2:df:6b:76:
                    9e:22:f7:09:2d:39:f8:53:00:60:e7:17:2c:eb:93:
                    78:40:37:71:ed:2c:e6:34:72:a7:47:30:0a:4b:d1:
                    48:c5:88:7d:38:92:96:a9:a2:43:3c:fd:03:e9:df:
                    da:07:06:2a:ec:37:65:af:4b:cb:a9:43:6e:57:81:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:79:8A:58:A3:FA:35:74:03:EF:8D:29:BD:05:F6:57:8B:19:00:1A
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/fHmKWKP6NXQD740pvQX2V4sZABo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.103.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:92:59:e6:99:b4:f7:b8:cd:c5:f8:42:68:f9:fe:79:46:18:
         8a:b5:92:31:13:01:2f:20:cf:34:de:17:c1:e4:8a:3e:2b:a1:
         bc:2f:91:51:23:01:e6:4d:d3:56:0e:c8:be:4f:bd:f4:23:cb:
         30:c1:7d:7b:32:39:ec:7c:38:8b:90:21:bb:4f:3d:cc:52:c4:
         e0:73:b1:fe:87:8e:0e:68:17:2d:68:e3:4a:f6:7e:77:68:89:
         c1:7e:a9:8f:47:ea:7c:67:ad:11:1b:eb:56:6b:0c:4c:2a:c2:
         3f:b3:27:89:82:5f:8e:ee:f0:0f:bb:43:43:86:69:07:50:7e:
         a7:9a:06:94:87:3e:3b:b3:96:00:34:2e:1b:1c:cb:4d:de:48:
         fa:be:3f:c6:79:9b:1a:6e:b9:ac:43:ad:5f:0d:4c:fc:94:4a:
         8a:b2:d7:b8:89:3d:5e:df:44:04:0d:bf:e4:ca:03:f5:eb:52:
         b9:fc:e5:c7:63:1a:7d:3c:53:a1:1d:e8:35:fa:52:39:25:3d:
         40:16:6e:9c:46:17:0a:0a:d1:f0:c9:6c:74:c8:00:d1:aa:76:
         b6:85:61:eb:e0:16:99:b5:4b:19:b1:7d:ec:53:91:01:4c:5e:
         1a:98:a6:0f:91:43:71:76:a6:a2:4f:d0:37:cc:39:be:49:cf:
         e7:89:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:40 2026 by rpki-client