Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/99MsFkC1MSQ8-haUeLVLPCbf_DE.roa
File:                     99MsFkC1MSQ8-haUeLVLPCbf_DE.roa (raw, json)
Hash identifier:          rpgb4s2ur17TbhrqXLjQEcWosNg3RphTymy1J72EJHU=
Subject key identifier:   F7:D3:2C:16:40:B5:31:24:3C:FA:16:94:78:B5:4B:3C:26:DF:FC:31
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0256
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/99MsFkC1MSQ8-haUeLVLPCbf_DE.roa
Signing time:             Sun 01 Feb 2026 01:31:40 +0000
ROA not before:           Sun 01 Feb 2026 01:31:40 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        61.118.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:31:40 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=F7D32C1640B531243CFA169478B54B3C26DFFC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:f6:f3:c5:ca:08:81:93:7b:8c:3e:86:e8:
                    53:60:ba:c4:80:04:60:1b:fa:54:5b:96:48:f7:ad:
                    5c:1b:8c:f4:07:26:9d:6b:8d:b1:31:3b:29:cc:73:
                    ed:b2:70:0a:c0:5b:50:c6:c2:10:62:3a:42:21:dc:
                    93:bd:fb:d0:a7:09:45:b0:01:5c:d2:31:4b:63:b1:
                    15:05:52:db:56:e1:21:72:f7:ab:b3:99:ce:05:0b:
                    4a:ce:2d:11:d0:c1:79:5d:e4:48:cc:f0:44:6b:63:
                    f0:10:5d:ac:f4:1e:0f:5a:66:d3:80:8b:95:64:86:
                    d3:cf:83:64:a4:fb:fb:3e:72:cb:fb:40:11:27:2e:
                    80:66:04:94:1f:55:81:8a:26:94:66:3c:84:85:4f:
                    6e:3b:d8:47:54:1d:b5:5b:ad:ea:35:15:9b:8b:d5:
                    db:31:b0:87:07:be:75:26:89:28:9b:89:a9:ee:77:
                    9e:19:13:e2:1d:c0:16:28:7a:86:dd:e0:08:71:97:
                    ea:46:80:b0:1b:44:13:1a:19:98:93:6c:6a:8a:ac:
                    b4:96:43:ff:aa:3e:47:9c:e4:98:3c:65:e5:8f:a8:
                    78:b4:9e:a9:0f:18:58:3f:b1:b7:8f:ca:79:84:e6:
                    04:ed:69:93:8c:b0:74:4e:f4:a6:22:d4:9a:15:3b:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:2C:16:40:B5:31:24:3C:FA:16:94:78:B5:4B:3C:26:DF:FC:31
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/99MsFkC1MSQ8-haUeLVLPCbf_DE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.118.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:68:b8:c3:fc:36:e1:5b:71:4e:94:28:08:bd:49:92:b8:
         8e:a2:e1:ca:1a:71:ab:f9:ee:96:59:f4:90:b4:9c:b2:27:ba:
         fc:c7:56:db:bb:ca:97:67:42:b3:2f:68:97:ab:1a:51:db:c6:
         82:46:74:6d:d7:73:4c:44:b6:c3:72:14:ea:88:5a:3f:f9:e0:
         5e:b2:e5:a4:3e:60:6b:39:94:9f:30:38:60:37:d6:6d:dc:18:
         0a:c5:8e:85:80:34:84:07:cc:cb:d7:66:51:98:35:a1:50:da:
         53:b7:73:28:3d:81:c0:65:6d:55:3e:15:33:ed:b5:3f:7d:72:
         02:20:05:d8:c0:ae:53:93:06:56:eb:10:89:6e:58:3f:ff:42:
         dc:d7:be:db:47:6a:30:cf:e4:98:80:20:2c:97:8b:05:ca:2f:
         66:80:5c:26:24:6b:2b:70:95:74:13:d0:fc:53:6a:ac:17:7e:
         48:48:72:ac:15:1f:2b:04:97:a7:3a:9d:66:d5:db:f9:6b:c1:
         f8:ea:ba:f0:f0:1d:cb:ce:c2:46:f4:1b:ce:80:b5:ec:a2:64:
         82:38:cd:62:f6:3d:34:a1:2b:a9:d0:b0:6c:9b:6e:cb:30:bd:
         9f:c3:6f:f5:9e:f1:c4:d2:2f:63:ce:81:5b:f7:48:2f:88:42:
         0f:7a:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:07 2026 by rpki-client