Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/xLzfI9MfFJvXluJpG3zaUf88oOU.roa
File:                     xLzfI9MfFJvXluJpG3zaUf88oOU.roa (raw, json)
Hash identifier:          Swl0fLPZy8ptOthOe56jwN+rC4RhnZcWwB3HBih1kjs=
Subject key identifier:   C4:BC:DF:23:D3:1F:14:9B:D7:96:E2:69:1B:7C:DA:51:FF:3C:A0:E5
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       3D
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/xLzfI9MfFJvXluJpG3zaUf88oOU.roa
Signing time:             Tue 14 Apr 2026 08:51:40 +0000
ROA not before:           Tue 14 Apr 2026 08:51:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24255
IP address blocks:        61.245.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Apr 14 08:51:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C4BCDF23D31F149BD796E2691B7CDA51FF3CA0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:14:8a:cc:dd:9e:b6:d4:3a:a6:f0:97:8e:
                    d1:f5:e3:49:75:b5:74:ec:f7:57:b1:5d:26:75:b0:
                    6f:df:2a:02:6a:8b:ae:e2:47:0f:47:50:3e:cb:c6:
                    13:03:7d:b0:07:bc:e6:cb:1d:86:71:81:1e:28:a7:
                    af:70:4d:ff:c5:76:3a:5a:4a:3d:fa:04:f6:b1:f8:
                    8b:bf:2e:0b:fb:38:1a:38:ca:b4:04:76:a4:59:eb:
                    b6:ae:eb:df:07:5e:69:86:09:5a:4a:b2:61:e9:fc:
                    d9:a8:5c:71:70:a2:28:40:1c:91:34:4a:c5:b7:63:
                    7f:64:81:86:41:2f:ca:20:63:26:ed:e4:cd:61:1e:
                    bf:4c:47:23:31:3c:fb:da:b1:d4:b2:23:ff:75:7a:
                    39:22:d9:70:f4:3d:9a:88:b1:14:48:18:ad:8f:99:
                    d6:c9:0a:72:5f:77:b8:5d:22:83:69:79:8d:00:ff:
                    cc:37:ac:1b:5d:7c:70:22:d8:78:30:82:dd:1e:30:
                    09:03:6b:75:37:c2:b1:12:3a:9f:d8:5d:97:e9:e7:
                    c0:19:14:7c:14:90:5e:99:18:3d:bb:5f:48:c4:1c:
                    f2:1c:47:24:34:1e:a5:e8:a9:94:4e:f0:48:31:29:
                    af:f5:85:eb:ca:de:28:20:ec:1f:8d:27:af:7e:ff:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BC:DF:23:D3:1F:14:9B:D7:96:E2:69:1B:7C:DA:51:FF:3C:A0:E5
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/xLzfI9MfFJvXluJpG3zaUf88oOU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:89:bc:b8:d3:f0:3b:90:64:ea:fd:38:1d:e5:7b:8d:41:6d:
         bb:5a:15:66:47:f1:77:cc:05:25:01:84:1c:c6:4a:7c:96:95:
         d4:51:fc:03:c1:81:49:7c:3a:c2:b8:a7:df:bf:3c:52:f6:3e:
         dd:7b:ec:44:05:30:4e:c8:9a:3c:5c:f7:e2:42:fe:c4:d1:35:
         ce:32:dc:9a:ae:65:f2:ad:91:84:87:7a:ee:40:b9:a9:c6:7d:
         2c:3f:6c:e4:47:95:46:c1:55:9c:e6:50:5c:31:0a:9e:78:0d:
         dd:cd:44:f0:4e:58:49:09:13:79:bf:29:79:9a:00:0f:f7:73:
         00:6a:30:86:e1:a4:9e:69:96:ed:2e:0f:a1:e2:c9:a7:bd:ac:
         d0:41:d6:31:d1:56:7d:0d:e8:49:f0:91:ed:21:98:cd:d1:cb:
         7e:60:eb:8c:17:8a:2b:36:b2:40:eb:38:4b:0a:da:53:c6:60:
         a9:d6:b4:aa:f9:6d:5c:a9:85:c4:52:1a:7a:a8:58:82:30:96:
         7d:d1:7c:09:af:76:94:8b:c0:e9:0b:1a:53:ee:82:d7:15:4a:
         86:19:d8:36:44:0d:55:9e:23:1e:41:0a:cb:11:24:69:54:c0:
         1e:d6:ca:d8:22:9b:86:52:f1:6d:14:21:0c:44:f0:02:ea:30:
         98:a1:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:46 2026 by rpki-client