Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/FerJk4hDTtE07om3ip_dM7r6TJ0.roa
File:                     FerJk4hDTtE07om3ip_dM7r6TJ0.roa (raw, json)
Hash identifier:          oqIuwV2NhHKlNm6yopA88PGobzsM/dHS/28QSVmkb1A=
Subject key identifier:   15:EA:C9:93:88:43:4E:D1:34:EE:89:B7:8A:9F:DD:33:BA:FA:4C:9D
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       8A
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/FerJk4hDTtE07om3ip_dM7r6TJ0.roa
Signing time:             Tue 31 Mar 2026 08:37:39 +0000
ROA not before:           Tue 31 Mar 2026 08:37:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        123.255.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 31 08:37:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=15EAC99388434ED134EE89B78A9FDD33BAFA4C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:95:01:bd:5b:fd:dd:b6:52:25:e5:24:99:
                    83:f6:8f:4c:8f:22:2b:22:84:ee:87:24:02:9a:7f:
                    40:cd:db:80:5a:cf:bd:42:a0:61:be:73:05:8e:04:
                    a2:7b:74:fb:e3:34:0a:6e:9b:a0:d4:c3:b9:5e:40:
                    1f:ca:05:43:a1:de:ec:9d:2d:7c:00:c7:41:70:67:
                    3b:37:8b:2c:9b:38:ec:42:51:90:5d:ff:10:5e:70:
                    e2:c6:67:b2:6a:c9:12:39:73:a6:98:a7:2d:0f:60:
                    8a:ee:6e:30:c3:70:a7:9e:5e:be:b8:50:db:bc:81:
                    0d:bb:92:8b:dc:9f:e8:5d:9a:92:fb:64:4b:e8:72:
                    29:8b:97:21:6b:e4:cf:06:18:d6:62:09:75:64:e3:
                    60:63:46:b8:75:76:1f:cb:da:e4:e9:a0:4b:47:86:
                    e4:7d:26:fe:b0:53:2c:9a:59:75:d8:ff:d9:3c:6b:
                    65:c3:d5:76:8f:d8:f7:db:a5:30:62:5f:ab:03:96:
                    6c:3b:85:91:ea:9d:f1:0c:65:11:cb:1b:14:ea:cb:
                    95:75:bc:a1:fa:6f:38:32:18:40:c2:c4:0c:ae:05:
                    63:3b:e8:9f:91:b3:d0:5d:e4:60:ca:35:bd:4f:3d:
                    44:84:86:c3:eb:c1:49:ff:bb:e6:88:9e:3a:55:83:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EA:C9:93:88:43:4E:D1:34:EE:89:B7:8A:9F:DD:33:BA:FA:4C:9D
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/FerJk4hDTtE07om3ip_dM7r6TJ0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.255.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:5c:10:6e:09:52:40:92:e2:62:d5:25:80:8b:9b:f8:87:47:
         1b:aa:9f:42:a8:af:db:f8:b1:d3:a1:ac:0c:96:25:87:8b:a7:
         06:ec:21:69:13:ae:82:ea:f0:8e:99:4d:c5:78:2a:00:da:04:
         56:34:52:0b:c1:47:08:23:bd:26:46:1c:77:34:65:ee:9c:c8:
         a4:e5:82:1c:0c:16:e8:4f:84:03:76:93:34:a3:38:7d:80:07:
         07:da:b3:04:7d:1a:35:b7:44:86:34:b4:05:7c:a1:3d:01:2a:
         fb:67:5e:58:7d:a2:3e:7a:2e:08:32:07:49:b5:e4:1d:c0:7d:
         5d:91:54:32:3e:be:c5:d1:cf:53:4f:bc:94:a7:b9:60:f3:fe:
         3d:c4:0b:d0:6a:b3:e8:dc:0e:f6:c4:5b:9c:6e:ea:c2:34:55:
         cf:85:90:3a:48:34:ff:de:bb:12:f1:ca:22:fc:09:91:6d:55:
         38:08:44:2b:d4:3a:eb:d3:35:ae:34:d1:1d:ce:fa:cc:7b:4b:
         f3:7b:83:42:37:ad:81:83:64:08:73:74:0f:43:c8:92:5a:07:
         8e:14:b7:aa:c4:3f:02:31:44:71:51:bd:e3:9b:6c:5c:a4:e4:
         8a:7a:2b:9e:b1:5c:b0:70:68:f8:cb:17:55:6c:29:46:74:15:
         9f:a5:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:06 2026 by rpki-client