Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/FPsOqt9Hquyu93RTz0PgmnavSJI.roa
File:                     FPsOqt9Hquyu93RTz0PgmnavSJI.roa (raw, json)
Hash identifier:          kz+wsanD5p30sk6xTLBwDJ+JQ36/yWJINIA88JXpEY0=
Subject key identifier:   14:FB:0E:AA:DF:47:AA:EC:AE:F7:74:53:CF:43:E0:9A:76:AF:48:92
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       56
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/FPsOqt9Hquyu93RTz0PgmnavSJI.roa
Signing time:             Tue 31 Mar 2026 07:49:47 +0000
ROA not before:           Tue 31 Mar 2026 07:49:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131969
IP address blocks:        133.88.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Mar 31 07:49:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=14FB0EAADF47AAECAEF77453CF43E09A76AF4892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:52:be:89:6d:51:c7:91:49:95:4b:32:11:46:
                    f0:4e:76:ea:2a:08:c0:24:b3:1d:0e:16:bf:48:cd:
                    e8:ee:f8:af:b1:b7:ca:70:aa:e4:d0:06:86:65:73:
                    85:45:44:e1:d3:f4:b3:aa:1a:c4:12:79:fe:4e:cc:
                    04:b1:23:d0:09:83:45:8f:a1:a1:d9:25:e1:79:c5:
                    ad:c2:c6:b0:ca:45:ba:fa:77:87:34:ac:65:fe:9d:
                    6e:ab:4f:c4:cb:fa:9b:6c:11:d0:4f:00:d4:5d:9a:
                    e1:46:e2:e0:27:c5:78:4d:fb:3b:39:ec:2b:b7:32:
                    e9:4c:85:14:18:2d:b0:28:18:e2:95:63:63:01:1b:
                    ee:d2:0e:4f:53:8b:25:ec:0a:6f:cd:d9:df:ef:91:
                    bc:f0:d1:b0:4d:2c:8d:ec:d1:6c:32:5c:8c:98:69:
                    95:59:ec:e3:4e:bf:cc:99:a9:a1:5e:37:f4:03:16:
                    de:2a:6a:40:5d:bc:11:82:85:d5:84:67:8e:cf:e5:
                    2f:54:19:f1:44:b4:12:5a:dc:15:22:c0:41:55:3c:
                    bd:6e:6b:d8:a7:a4:92:2d:77:2c:89:13:92:cc:d4:
                    f5:c7:95:79:50:79:ab:03:ef:d3:55:3f:6b:ec:75:
                    c8:93:68:83:a1:26:20:52:41:78:aa:02:e7:57:15:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FB:0E:AA:DF:47:AA:EC:AE:F7:74:53:CF:43:E0:9A:76:AF:48:92
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/FPsOqt9Hquyu93RTz0PgmnavSJI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:49:5c:a6:15:ef:3c:74:e1:dc:b3:d2:3f:5d:3d:fb:52:b3:
         6a:17:72:1a:bb:57:c0:eb:c2:d2:39:b9:31:89:3e:fd:3b:76:
         d7:63:ca:18:06:5e:d9:f7:c8:af:de:aa:d1:2e:2c:48:5a:6f:
         10:bf:7e:17:5c:82:19:1e:86:27:40:2b:13:13:d7:29:4c:c5:
         83:15:55:06:c1:3d:2c:26:de:42:53:1d:a6:5d:66:b0:06:be:
         f2:3c:47:9b:dc:11:40:a8:cb:55:be:31:d0:87:ca:f7:b5:ac:
         f3:b0:a6:53:07:e1:f2:5f:1e:7a:17:00:67:e8:42:fe:ac:22:
         03:c6:59:20:1a:ca:7b:8c:aa:ca:71:81:20:4e:c2:20:52:88:
         68:8e:f1:65:da:94:3d:46:de:f6:2e:98:b5:3e:c2:a7:76:16:
         96:33:26:82:17:87:74:5a:5c:83:63:1f:62:d6:a7:ac:aa:a3:
         2b:5f:77:49:d4:94:68:a3:56:00:cf:f7:ef:d3:c2:59:45:a2:
         6b:1d:2a:3c:2f:fc:b1:74:bd:bc:fa:0e:93:85:28:96:00:32:
         eb:fd:cb:dc:26:bd:6a:fd:1c:83:a2:b7:52:50:69:f9:4b:c2:
         b6:bd:d9:c7:2d:68:0b:11:91:fa:33:a6:5a:59:8e:83:12:de:
         ce:41:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:48 2026 by rpki-client