Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/My_FFooF6FnoK2U1q9dipDLMPb8.roa
File:                     My_FFooF6FnoK2U1q9dipDLMPb8.roa (raw, json)
Hash identifier:          lzXhaTJkN8GmBuwxb2N2EaoHfFuWPuraXs7ow6Xufps=
Subject key identifier:   33:2F:C5:16:8A:05:E8:59:E8:2B:65:35:AB:D7:62:A4:32:CC:3D:BF
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       7E
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/My_FFooF6FnoK2U1q9dipDLMPb8.roa
Signing time:             Tue 31 Mar 2026 08:37:34 +0000
ROA not before:           Tue 31 Mar 2026 08:37:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        218.40.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 31 08:37:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=332FC5168A05E859E82B6535ABD762A432CC3DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:7c:30:26:62:5b:c3:6b:00:57:d9:ae:6a:
                    b6:bf:26:b3:63:62:66:b3:9d:22:b5:e4:0e:0d:b2:
                    7b:90:c0:6b:c2:40:0c:26:08:24:4b:42:fa:c4:ac:
                    46:c1:dd:de:39:b8:2d:ab:f3:3d:a3:17:3d:0e:fd:
                    12:69:8d:1c:ae:24:c9:4f:b4:53:cc:b7:82:b5:c9:
                    aa:ec:0c:38:5f:54:2d:e1:71:e3:64:01:9a:bd:81:
                    77:d5:3a:ca:75:1f:63:ba:81:bc:70:53:b3:a2:ce:
                    2b:ef:b9:79:44:b8:ce:1c:8a:a3:04:06:15:40:6c:
                    48:f5:ae:ef:24:69:b5:a5:f3:99:44:c3:73:2f:0e:
                    53:f2:10:7a:ba:d1:b3:03:66:79:e2:1a:d1:45:e4:
                    26:a3:24:fc:7d:ab:57:85:ef:26:f4:3f:2d:31:52:
                    12:fd:ff:19:a4:29:49:21:5d:76:0c:2b:da:e8:ca:
                    67:48:36:3e:e5:ae:a5:44:3f:ee:82:19:15:71:da:
                    80:52:0b:ca:74:7e:ee:93:b1:6d:e5:15:33:14:0f:
                    67:1d:98:45:50:a7:f3:78:eb:96:d9:b8:35:b3:cc:
                    3b:61:01:ba:69:c5:06:d7:07:ee:f0:ab:1e:b5:09:
                    0c:1e:5a:4f:d4:6e:55:4d:ce:0f:6b:47:a3:07:86:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2F:C5:16:8A:05:E8:59:E8:2B:65:35:AB:D7:62:A4:32:CC:3D:BF
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/My_FFooF6FnoK2U1q9dipDLMPb8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:50:03:b4:2f:ee:d3:15:96:8b:fa:de:d6:7b:c7:18:5a:29:
         69:c2:14:74:c8:29:7e:d4:67:82:eb:fd:e7:66:5e:3c:c7:a9:
         35:23:73:6e:e6:85:ab:33:17:52:31:99:ef:f0:0b:b5:52:15:
         f8:98:c2:21:db:25:6f:28:e8:41:81:a4:7a:a3:de:43:7f:1c:
         94:2b:33:2d:dd:bd:7a:34:fe:f6:f1:de:d9:a6:6a:22:8f:5c:
         b8:35:9a:4e:2b:b8:33:96:c3:a4:3b:75:ed:9b:cb:4f:a3:80:
         d9:6c:02:58:9f:08:f7:51:57:e0:fa:28:77:26:14:d9:bf:54:
         2e:84:c0:54:fe:c1:f3:57:c9:33:c2:8c:c2:77:15:e5:dd:15:
         c2:e6:a1:ea:b0:cb:63:a5:9f:18:c4:84:0d:bf:12:06:78:78:
         2d:ab:77:11:18:0b:7c:cd:00:e2:44:f8:07:f6:6c:ad:01:de:
         c1:7d:d4:3a:cb:d9:85:2b:f5:88:74:99:b7:d9:d9:89:32:d7:
         2d:26:ac:41:ac:6c:9c:c1:94:4b:79:ae:79:fd:d3:ca:65:7f:
         a6:af:23:c2:4f:fe:e0:76:5c:94:ea:07:4f:c4:b2:93:a8:1a:
         ce:81:5f:51:63:e6:87:3d:79:09:c9:17:b3:a9:ae:3d:ab:7e:
         22:e0:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client