Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/FIqgqsn4pvbebzkNOxLDH9Q90e0.roa
File:                     FIqgqsn4pvbebzkNOxLDH9Q90e0.roa (raw, json)
Hash identifier:          ODvvxwcpbrTItolyckzpktfm3HHi58XtEBjvDleyGrU=
Subject key identifier:   14:8A:A0:AA:C9:F8:A6:F6:DE:6F:39:0D:3B:12:C3:1F:D4:3D:D1:ED
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       91
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FIqgqsn4pvbebzkNOxLDH9Q90e0.roa
Signing time:             Tue 31 Mar 2026 07:35:30 +0000
ROA not before:           Tue 31 Mar 2026 07:35:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        157.65.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 03:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Mar 31 07:35:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=148AA0AAC9F8A6F6DE6F390D3B12C31FD43DD1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:88:71:12:7b:b3:65:2e:9f:d5:e6:55:17:1d:
                    ac:1d:6e:6f:71:f1:96:60:5c:21:63:51:05:8d:b6:
                    e0:ff:42:fc:3e:84:77:0a:24:2c:ad:93:54:6c:22:
                    2b:37:a9:5f:42:2f:ae:39:e7:1d:b2:ff:43:f8:36:
                    f5:39:5c:e5:16:5e:ee:31:cf:25:8d:db:61:13:b9:
                    27:31:dd:73:12:5c:5f:96:df:5c:8d:71:d8:f2:8f:
                    cd:af:b3:69:75:96:5b:20:36:8f:e2:da:51:35:b6:
                    9b:eb:09:f0:e9:83:b6:ff:0c:29:07:ae:8a:dd:36:
                    57:67:16:63:00:0d:cf:9d:64:19:38:8f:9e:1c:bd:
                    8f:34:28:06:0f:c9:35:b0:11:53:2f:50:3a:84:ef:
                    8b:7d:7b:65:54:aa:e7:19:47:5f:00:75:5c:88:5b:
                    31:30:93:48:b9:f3:9a:4a:29:fd:1f:af:8d:e4:4c:
                    19:84:9d:7d:52:48:5d:54:b8:bb:8e:a5:56:2e:e3:
                    41:3a:2f:b5:be:87:05:18:97:c6:6a:96:15:59:dd:
                    78:5d:af:fe:86:74:dd:dc:68:53:75:0f:06:da:91:
                    04:de:f8:71:bd:9c:25:49:a0:18:2c:15:d7:bd:17:
                    1a:2a:13:42:99:a6:52:88:51:7f:d3:05:a5:8a:84:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8A:A0:AA:C9:F8:A6:F6:DE:6F:39:0D:3B:12:C3:1F:D4:3D:D1:ED
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FIqgqsn4pvbebzkNOxLDH9Q90e0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:04:7d:0f:f1:a4:ab:2d:1b:b8:f9:12:18:f6:35:a3:26:
         2e:6c:8d:65:23:d9:28:bb:f5:79:dd:7c:99:33:38:47:ad:84:
         65:92:a1:4a:9e:6e:ea:d8:78:64:65:f5:ff:7b:ad:57:8c:a0:
         54:5c:1f:8b:dd:39:43:db:21:12:bf:24:8e:ef:db:3e:c6:45:
         07:81:57:e8:61:20:3f:95:45:79:e6:65:c4:2e:db:c6:ac:83:
         aa:88:90:ab:e5:f0:6c:da:06:d3:d9:af:6d:af:c1:02:4c:93:
         d3:8c:ae:61:e6:3e:ff:9c:b6:b5:6b:3c:8e:d3:6b:14:cc:3d:
         9c:81:dd:ab:c3:5c:a4:f8:17:31:3e:f2:75:6b:bf:f7:3f:bb:
         42:13:f8:60:40:a9:3c:ec:0a:d1:c5:f5:9c:33:37:3e:db:d5:
         f1:b9:21:f4:94:7c:d7:87:65:52:ed:d7:8b:fd:38:a5:c5:5c:
         93:eb:5e:6d:03:63:d9:f7:b0:b4:4c:17:f9:6e:c4:55:9a:77:
         5b:c4:4a:d5:ec:fe:83:61:80:5b:ce:ea:28:57:4f:4c:78:f8:
         36:30:cb:7d:21:4f:e1:49:f1:7e:38:b5:5f:7f:73:6d:09:df:
         ca:a0:21:67:29:af:7d:a6:ea:3a:d4:e9:78:4c:95:56:b9:8e:
         d6:87:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:51 2026 by rpki-client