Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/oaKob2BILAhQroPy6oWTqPFG9HE.roa
File:                     oaKob2BILAhQroPy6oWTqPFG9HE.roa (raw, json)
Hash identifier:          SynSWEAdznIhrVOReqYnULmsks/SLAtaFm9Q3Ii76LA=
Subject key identifier:   A1:A2:A8:6F:60:48:2C:08:50:AE:83:F2:EA:85:93:A8:F1:46:F4:71
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       85
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/oaKob2BILAhQroPy6oWTqPFG9HE.roa
Signing time:             Tue 31 Mar 2026 07:35:12 +0000
ROA not before:           Tue 31 Mar 2026 07:35:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        157.17.128.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Mar 31 07:35:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A1A2A86F60482C0850AE83F2EA8593A8F146F471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:70:a5:f2:21:e7:98:f4:ba:20:5f:80:22:
                    43:5c:89:5a:36:87:49:c4:1a:9c:4c:e2:cb:f8:0f:
                    96:44:0c:9a:a4:ad:4e:84:60:b4:3a:27:cd:65:83:
                    2e:31:37:41:a9:54:78:88:99:1c:dc:46:af:23:67:
                    16:dd:26:38:a5:2f:92:b1:22:e8:e5:c1:b3:e9:0c:
                    00:81:c4:3d:5d:b2:da:e2:a7:46:a3:65:d7:a9:55:
                    e2:d2:b0:f6:26:35:a4:c2:0c:50:a3:24:59:6f:88:
                    65:c9:e5:cf:df:da:a0:9b:91:b0:1e:2b:bd:81:b3:
                    99:de:42:77:23:1a:9f:60:02:19:95:dc:15:d2:6d:
                    d6:65:ae:f5:89:79:72:65:f3:aa:0f:48:22:bc:55:
                    e5:60:3e:d7:e1:4b:a6:76:7f:ef:4d:58:0f:4a:2a:
                    f4:84:bc:c4:a2:13:c8:28:a6:96:eb:d5:79:c7:fb:
                    04:7c:fb:5e:0f:44:65:21:bc:49:f9:6d:94:0d:15:
                    0f:b7:a2:d5:ea:ab:91:5f:7f:1d:fc:36:7e:56:4e:
                    87:60:ce:d2:5c:9f:ab:70:e0:a4:01:ad:c6:a5:2b:
                    d3:b4:b2:19:b8:bf:a9:12:ed:0a:fd:90:10:78:37:
                    d4:8b:16:18:4e:e0:ac:a6:1d:d0:4f:4e:59:d6:56:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A2:A8:6F:60:48:2C:08:50:AE:83:F2:EA:85:93:A8:F1:46:F4:71
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/oaKob2BILAhQroPy6oWTqPFG9HE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:0c:e6:25:2e:37:d4:fe:3e:23:4d:8b:64:df:9d:c9:3e:
         98:d0:56:62:25:6a:3b:c1:ee:7e:48:de:f1:74:fd:a1:e5:a3:
         e7:d0:47:f6:04:c5:3a:e4:4a:39:73:75:a9:7e:b9:0b:bb:c6:
         54:10:84:7a:9b:6b:5d:cc:79:41:90:e3:71:43:40:d9:c5:40:
         4d:90:51:47:10:f7:3a:16:ab:da:e4:aa:3a:ea:90:85:96:42:
         e2:31:f0:b4:70:71:9d:21:c4:4c:cc:3a:76:fb:08:14:b5:4c:
         59:dc:e2:57:e5:9b:a5:ef:26:b2:ef:75:f2:e8:cc:94:5a:14:
         9d:12:6a:ee:27:67:e3:8d:42:35:d0:cc:2b:a0:94:d8:fb:1f:
         26:ce:8e:e8:41:b5:2b:cc:cd:fb:45:27:9e:8f:38:55:f0:eb:
         8b:9e:5e:cc:0a:32:90:12:8d:2c:a0:4b:db:8d:79:c3:9f:e9:
         3c:5e:89:a9:ac:cb:58:fa:05:b2:0c:15:02:19:32:38:51:d0:
         bf:41:9c:82:7f:00:19:d2:7a:a4:e6:e4:a4:34:a2:d0:77:6e:
         7c:96:7b:33:89:10:0e:d6:33:1e:9c:13:f3:c4:68:3e:eb:bd:
         51:02:bb:3f:df:81:6e:e2:fb:84:cf:55:ed:fa:d6:f6:c0:97:
         60:6e:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client