Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/_Xyqjuv0hGuiVFlagUbE9J8Mg58.roa
File:                     _Xyqjuv0hGuiVFlagUbE9J8Mg58.roa (raw, json)
Hash identifier:          olRRiBY1gzrqq4LhTEOg342cHmW1cKJDLbRxW72uw0Y=
Subject key identifier:   FD:7C:AA:8E:EB:F4:84:6B:A2:54:59:5A:81:46:C4:F4:9F:0C:83:9F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       025C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_Xyqjuv0hGuiVFlagUbE9J8Mg58.roa
Signing time:             Sun 01 Feb 2026 01:31:44 +0000
ROA not before:           Sun 01 Feb 2026 01:31:44 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        114.144.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:31:44 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=FD7CAA8EEBF4846BA254595A8146C4F49F0C839F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:a3:db:96:cb:d4:69:26:e2:91:73:f6:e2:
                    c5:44:c8:ef:e8:58:f7:ea:ee:99:2d:f2:23:eb:4c:
                    17:e4:f4:09:60:59:9a:1c:2e:43:76:ff:91:e5:87:
                    ba:c5:cf:3a:5a:a8:1f:95:99:7e:2f:97:5b:cd:54:
                    9b:c6:4f:f5:69:35:e6:87:02:5f:31:1b:cf:3b:0b:
                    1c:ee:e8:3d:8f:c9:da:7f:d4:e5:33:1c:7e:6c:16:
                    45:05:57:9b:6b:b1:f6:e3:7d:0e:4d:c0:ad:9c:62:
                    25:68:0a:0e:cf:c2:e2:5e:61:63:e4:cf:29:b1:2b:
                    4b:09:ef:15:a0:63:a1:a6:6b:bf:e9:d7:87:d0:7c:
                    f5:f5:a1:93:c3:db:dd:90:cf:bf:9d:0e:b8:ca:f2:
                    0b:26:37:26:64:b3:1e:d4:55:fb:8e:42:b9:49:70:
                    57:04:d3:58:38:50:d9:d0:9c:34:d6:9f:0d:bc:b9:
                    f2:66:be:6c:cf:50:fb:03:e1:b0:4b:a9:dd:fa:c0:
                    82:c3:ee:4b:28:41:8f:76:e7:5b:42:b6:ee:47:80:
                    c4:e2:ff:ff:91:94:a4:a9:2a:86:07:4c:6a:d5:d5:
                    9d:69:0b:47:ce:f9:f0:e9:eb:65:92:34:a8:7f:ea:
                    12:0b:4b:88:5a:0a:27:09:15:a3:1b:6d:ce:db:07:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7C:AA:8E:EB:F4:84:6B:A2:54:59:5A:81:46:C4:F4:9F:0C:83:9F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_Xyqjuv0hGuiVFlagUbE9J8Mg58.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:71:2a:56:c3:1f:a8:48:9f:f8:e5:73:53:23:df:22:64:
         4a:29:51:73:97:b9:5e:18:50:0b:08:95:8f:62:f3:d8:76:3e:
         8b:5e:89:d4:19:7a:19:e0:d3:f0:de:d4:4f:95:31:78:f7:5d:
         9d:20:34:04:4f:dd:3f:ef:bd:9b:db:a8:2d:2a:ae:89:03:9d:
         56:2d:54:71:01:e7:0f:7e:49:c9:f1:8a:4c:56:97:46:73:1c:
         10:25:00:15:b8:3c:7e:e0:0f:d7:38:2c:e9:09:75:dc:0f:61:
         13:8e:7d:0f:91:91:ff:f6:f9:69:f1:52:09:2d:33:b6:ef:6d:
         2f:c3:f4:43:71:a0:6c:e3:ca:06:7c:81:75:95:c3:7a:06:60:
         c1:a3:39:b0:36:bb:92:a8:bd:b0:8f:d3:e9:d5:cb:85:bd:e5:
         18:6e:97:60:bc:0b:de:b0:24:e8:d6:a1:70:e9:bf:69:1d:9b:
         c1:4d:73:3a:8a:1b:8a:d8:7f:b5:fa:df:58:e6:16:33:45:dc:
         64:03:2f:f4:25:05:7f:12:05:54:ce:ea:98:95:d7:3f:66:59:
         57:6b:1a:cc:70:f4:40:47:34:03:36:aa:cd:b2:33:4d:7e:9f:
         64:d1:ab:fb:01:63:32:03:65:dc:3f:d8:d2:e7:6f:6d:26:e6:
         59:13:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:17 2026 by rpki-client