Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/FSQMaFmW9wUGQizp9kiPi47lfbU.roa
File:                     FSQMaFmW9wUGQizp9kiPi47lfbU.roa (raw, json)
Hash identifier:          MqFWQKzoR5r+/gsD2EmZ3t/N++OthIR6w57INAJxgdY=
Subject key identifier:   15:24:0C:68:59:96:F7:05:06:42:2C:E9:F6:48:8F:8B:8E:E5:7D:B5
Certificate issuer:       /CN=7EECCB87C1EAB7372BC31505E682DC581055A52F
Certificate serial:       2D
Authority key identifier: 7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/FSQMaFmW9wUGQizp9kiPi47lfbU.roa
Signing time:             Tue 31 Mar 2026 08:33:45 +0000
ROA not before:           Tue 31 Mar 2026 08:33:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24259
IP address blocks:        157.120.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EECCB87C1EAB7372BC31505E682DC581055A52F
        Validity
            Not Before: Mar 31 08:33:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=15240C685996F70506422CE9F6488F8B8EE57DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:49:e9:1b:28:52:04:7a:46:f8:cf:6f:39:
                    60:d7:7b:39:a6:e3:47:15:49:6d:dc:69:be:c2:03:
                    c2:08:c5:fa:4c:12:09:82:2a:57:e7:26:d0:c6:ef:
                    11:9a:08:d6:6d:75:ae:70:ad:48:23:23:ca:db:80:
                    01:91:2a:15:26:20:7f:b4:2f:41:b8:56:de:5c:6d:
                    ad:32:a9:be:c6:10:d4:f5:7e:09:62:e1:cb:85:ad:
                    a2:8a:ae:93:d6:55:ab:bb:4e:2c:66:b8:bc:c8:99:
                    4f:06:08:19:f6:be:f3:27:9a:0e:1b:9e:c4:7f:97:
                    24:01:0b:25:8e:71:ff:bf:c4:56:02:c7:c1:8e:5a:
                    54:10:95:08:d5:58:90:c2:89:3a:d1:d9:2d:f5:d7:
                    7e:d0:41:0d:fa:c8:57:30:82:cd:8a:4c:9b:88:3b:
                    ea:17:fb:e2:3d:88:df:25:b5:ba:e9:5f:0b:08:a5:
                    38:b3:4b:a0:e7:d8:ac:76:f4:3e:ff:cc:f4:af:ea:
                    6f:f7:a9:bd:09:e7:d7:ba:18:dc:55:0b:5c:14:d7:
                    f3:31:30:c0:ab:f5:0a:b5:51:61:01:0e:24:d9:b7:
                    bd:02:2c:16:d6:c4:62:bb:fb:11:31:34:de:2b:1f:
                    b1:0d:b6:94:2a:0f:c3:43:68:83:bb:b2:a4:59:10:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:24:0C:68:59:96:F7:05:06:42:2C:E9:F6:48:8F:8B:8E:E5:7D:B5
            X509v3 Authority Key Identifier:
                keyid:7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/FSQMaFmW9wUGQizp9kiPi47lfbU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:c7:92:c5:b2:0e:db:ce:b1:a7:a7:6b:29:c5:f7:ac:bf:
         08:73:26:b5:29:dd:82:68:e8:41:b8:d4:7d:c7:8d:19:50:ec:
         bf:48:b9:23:e3:b0:cf:54:dc:10:f8:c7:83:5f:d6:11:95:14:
         0b:28:77:32:ee:73:6f:8f:a4:ce:c1:d5:f0:63:db:c0:d8:70:
         2f:8f:ff:09:5e:4e:3e:94:79:8d:c4:cf:06:68:d4:a4:84:f8:
         14:a0:11:98:94:b7:6f:84:bc:7a:39:cc:dc:18:aa:73:62:3b:
         22:e4:6a:64:6d:31:c4:9a:e1:7e:b8:d5:d8:86:20:f4:44:9d:
         a9:fd:95:9f:7b:33:95:bc:ff:94:e8:a2:d0:55:7e:c6:b7:19:
         d5:54:bb:31:88:b4:c4:71:26:f5:0a:61:7a:f1:b3:34:5a:55:
         ac:b5:34:50:46:60:05:75:23:9a:ff:55:e8:14:fe:79:b5:d7:
         ae:a5:6f:49:32:a8:23:8d:7d:8d:c0:8a:c3:7a:98:5e:b1:14:
         86:08:32:ef:f6:c8:af:28:10:1c:c2:82:a5:f6:5b:90:3c:ed:
         46:02:15:c5:4b:19:7f:21:5a:50:30:a3:8d:c6:95:b2:28:cf:
         97:55:52:aa:f7:d1:58:55:56:0e:3f:30:87:d2:b8:c3:d5:e9:
         55:1d:8b:55
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3RUVD
Q0I4N0MxRUFCNzM3MkJDMzE1MDVFNjgyREM1ODEwNTVBNTJGMB4XDTI2MDMzMTA4
MzM0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTUyNDBDNjg1OTk2Rjcw
NTA2NDIyQ0U5RjY0ODhGOEI4RUU1N0RCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMIPSekbKFIEekb4z285YNd7OabjRxVJbdxpvsIDwgjF+kwSCYIq
V+cm0MbvEZoI1m11rnCtSCMjytuAAZEqFSYgf7QvQbhW3lxtrTKpvsYQ1PV+CWLh
y4Wtooquk9ZVq7tOLGa4vMiZTwYIGfa+8yeaDhuexH+XJAELJY5x/7/EVgLHwY5a
VBCVCNVYkMKJOtHZLfXXftBBDfrIVzCCzYpMm4g76hf74j2I3yW1uulfCwilOLNL
oOfYrHb0Pv/M9K/qb/epvQnn17oY3FULXBTX8zEwwKv1CrVRYQEOJNm3vQIsFtbE
Yrv7ETE03isfsQ22lCoPw0Nog7uypFkQhs0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQVJAxoWZb3BQZCLOn2SI+LjuV9tTAfBgNVHSMEGDAWgBR+7MuHweq3NyvDFQXm
gtxYEFWlLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA2L2Z1ekxoOEhxdHpjcnd4VUY1b0xjV0JCVnBTOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2Z1ekxoOEhxdHpjcnd4VUY1b0xjV0JC
VnBTOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MDYvRlNRTWFGbVc5d1VHUWl6cDlraVBpNDdsZmJVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp14eDANBgkqhkiG9w0BAQsFAAOCAQEA
o0DHksWyDtvOsaenaynF96y/CHMmtSndgmjoQbjUfceNGVDsv0i5I+Owz1TcEPjH
g1/WEZUUCyh3Mu5zb4+kzsHV8GPbwNhwL4//CV5OPpR5jcTPBmjUpIT4FKARmJS3
b4S8ejnM3Biqc2I7IuRqZG0xxJrhfrjV2IYg9ESdqf2Vn3szlbz/lOii0FV+xrcZ
1VS7MYi0xHEm9QphevGzNFpVrLU0UEZgBXUjmv9V6BT+ebXXrqVvSTKoI419jcCK
w3qYXrEUhggy7/bIrygQHMKCpfZbkDztRgIVxUsZfyFaUDCjjcaVsijPl1VSqvfR
WFVWDj8wh9K4w9XpVR2LVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:17 2026 by rpki-client