Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20280/FGEUUTssn-9ZwWdZBxBas5_F34g.roa
File:                     FGEUUTssn-9ZwWdZBxBas5_F34g.roa (raw, json)
Hash identifier:          Lg8hFfx6Y9CkEflsviCdD2t3NPNZ5W7oheneu9sZBuU=
Subject key identifier:   14:61:14:51:3B:2C:9F:EF:59:C1:67:59:07:10:5A:B3:9F:C5:DF:88
Certificate issuer:       /CN=2480B90E3CDB301FFE16C1A7112B0279B54EF0D1
Certificate serial:       09
Authority key identifier: 24:80:B9:0E:3C:DB:30:1F:FE:16:C1:A7:11:2B:02:79:B5:4E:F0:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/FGEUUTssn-9ZwWdZBxBas5_F34g.roa
Signing time:             Tue 31 Mar 2026 08:47:40 +0000
ROA not before:           Tue 31 Mar 2026 08:47:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63806
IP address blocks:        43.228.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2480B90E3CDB301FFE16C1A7112B0279B54EF0D1
        Validity
            Not Before: Mar 31 08:47:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=146114513B2C9FEF59C1675907105AB39FC5DF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:62:4f:35:3a:a2:6d:88:6c:51:f0:53:2c:
                    21:4f:50:e0:e5:a1:cd:a2:3c:e2:96:49:c4:d6:f2:
                    f3:b1:dd:16:8c:74:e2:e9:d1:0e:08:24:e1:24:de:
                    32:15:6e:ae:b6:15:81:4b:fe:ae:19:9c:f4:9d:e3:
                    c6:83:ab:90:02:ca:80:f0:d6:6b:10:86:29:92:ab:
                    f0:27:67:7a:c5:f7:74:35:df:11:44:f3:44:f4:29:
                    91:65:04:dd:4d:b4:4e:15:09:9c:d2:83:4f:39:4b:
                    7b:a5:97:83:66:47:c2:c1:7b:a9:d1:ba:a5:bc:e9:
                    3a:b3:2b:af:30:f9:bd:0b:54:05:d0:e2:75:f9:a2:
                    0c:9c:87:59:09:82:ec:64:44:d9:e3:80:39:77:df:
                    ce:c1:e5:cb:ec:04:a2:d9:dc:16:90:ea:1c:2d:ed:
                    50:76:97:3b:df:74:e8:02:9d:58:0c:7f:db:73:86:
                    3d:52:f5:fe:72:bc:b4:70:9e:5f:af:bd:cd:73:3c:
                    e1:24:2b:20:7f:3d:9f:ae:4f:a0:04:ee:b8:11:eb:
                    07:9c:95:ec:77:b2:b7:40:fb:77:bf:95:b2:63:66:
                    b6:ad:1a:79:f3:ca:47:c1:06:7c:04:ca:cc:2d:de:
                    94:9a:39:47:6b:cb:d2:5a:da:0c:d4:88:4f:24:5e:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:14:51:3B:2C:9F:EF:59:C1:67:59:07:10:5A:B3:9F:C5:DF:88
            X509v3 Authority Key Identifier:
                keyid:24:80:B9:0E:3C:DB:30:1F:FE:16:C1:A7:11:2B:02:79:B5:4E:F0:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/FGEUUTssn-9ZwWdZBxBas5_F34g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ee:7d:f2:fd:a4:93:45:b3:77:bc:88:70:ca:0d:2a:03:21:
         fc:79:b9:98:89:f3:2f:44:ca:34:ff:16:35:cc:2e:72:9f:1a:
         f3:89:14:d2:bf:fb:d9:4d:35:c8:34:94:16:0f:08:48:9f:54:
         cd:39:7f:30:eb:0a:5c:5e:61:e3:d4:c7:4a:a1:16:1d:b7:fb:
         75:57:70:b9:9e:4d:30:41:2d:e4:86:80:d6:c9:33:4d:eb:b5:
         eb:70:b5:b6:53:82:a1:13:aa:c6:aa:27:1a:cf:0e:c3:5d:44:
         d2:1d:6e:18:eb:bc:f1:5b:ef:25:04:56:0d:a7:90:b2:67:67:
         5b:d3:5e:a4:dc:a0:e2:e6:8b:b7:cf:a2:06:65:4b:27:f4:8f:
         21:48:08:55:3c:5a:a5:c3:c3:dc:88:cf:ab:38:df:bc:c1:d6:
         df:f7:d8:f4:5a:f1:f3:5e:63:d2:c5:f7:bc:f0:d5:0c:52:3b:
         ff:8d:11:af:6c:9f:f5:88:0d:60:d1:c4:ba:ec:73:c1:bc:a5:
         f3:c2:c9:03:ab:d4:8b:e2:bc:36:32:e2:1a:91:a8:8d:ee:19:
         cc:a2:aa:dd:c6:e6:04:91:6c:94:51:19:1b:ec:ce:e6:66:7a:
         9b:94:1f:03:65:2e:8b:b5:82:82:6d:ac:07:ca:56:76:9d:c9:
         42:54:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client