Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/aOpaxq_5vuaSUYFUSTiqB1raJSs.roa
File:                     aOpaxq_5vuaSUYFUSTiqB1raJSs.roa (raw, json)
Hash identifier:          MJGs56eBeq73IAFU2wHT1c169CFJKAI6uvloybxpaII=
Subject key identifier:   68:EA:5A:C6:AF:F9:BE:E6:92:51:81:54:49:38:AA:07:5A:DA:25:2B
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0269
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aOpaxq_5vuaSUYFUSTiqB1raJSs.roa
Signing time:             Sun 01 Feb 2026 01:38:20 +0000
ROA not before:           Sun 01 Feb 2026 01:38:20 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        125.200.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:38:20 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=68EA5AC6AFF9BEE6925181544938AA075ADA252B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:e0:06:45:ba:ee:bf:37:a3:66:06:f7:de:
                    19:32:0c:d0:61:67:66:cc:bc:d5:f6:06:96:a9:0b:
                    73:e0:1e:46:3e:33:a8:31:cd:0c:2d:26:2f:b0:2c:
                    99:83:1f:d0:01:e9:97:7f:9b:f1:e6:70:89:b6:5f:
                    58:f1:7e:25:10:44:7e:3e:e8:3f:85:14:14:5e:d6:
                    3e:be:ea:9c:38:6a:7b:bc:e5:28:cd:a4:c9:3c:9b:
                    1a:bd:2f:bb:99:2a:4f:34:e1:d4:9a:f8:92:15:4b:
                    3e:01:27:3d:89:bd:79:ee:9f:b1:a4:27:30:5e:09:
                    c6:5a:41:e4:d6:d3:81:ea:82:49:f7:cd:ca:38:5b:
                    7a:40:d5:40:ec:86:9c:dc:ca:8a:95:32:2f:cc:aa:
                    88:0f:48:80:48:d5:1b:d4:ae:56:b7:d7:34:9d:1a:
                    12:17:32:aa:15:b6:07:79:36:43:6b:ea:c3:0f:64:
                    94:0c:b4:66:c9:3a:eb:d1:78:02:67:cf:66:cc:ef:
                    00:f6:6b:01:18:92:5c:ab:8c:66:60:3c:a3:35:06:
                    7b:21:cb:49:74:8d:a7:92:71:dd:d4:38:01:ac:e3:
                    a1:42:bf:b3:07:b6:f4:4e:74:83:ca:9e:06:4c:b1:
                    83:9b:ee:27:94:ab:09:20:e8:55:79:f9:6d:3d:e3:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EA:5A:C6:AF:F9:BE:E6:92:51:81:54:49:38:AA:07:5A:DA:25:2B
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aOpaxq_5vuaSUYFUSTiqB1raJSs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a4:61:5e:e4:2e:a4:28:8b:c1:21:96:a4:c8:d6:60:cf:a5:d5:
         3a:a7:6a:61:97:a7:0c:18:c6:8b:d3:b7:fa:b7:02:dc:e5:00:
         3f:0b:c0:25:2f:06:59:ce:47:50:1e:7d:a9:8a:00:79:40:b3:
         7f:32:69:ef:cc:62:ed:38:8a:bb:97:80:c7:26:2e:3a:d8:d5:
         7f:a8:a3:4e:4b:24:91:18:95:08:f2:ea:56:e1:8f:d6:25:f4:
         b5:50:b5:b5:56:05:64:fc:d2:4f:35:0d:53:d9:48:1a:74:9d:
         af:64:5a:2d:fa:f0:e9:ae:33:af:4c:3b:44:9b:ea:72:4d:d6:
         29:28:f4:55:a4:1d:4e:8e:85:e3:9c:65:05:f8:77:11:d7:53:
         fa:d7:9b:7b:47:d3:a4:96:74:7e:8a:3f:88:f5:59:3b:ae:87:
         87:d4:ed:1c:10:38:7c:d7:c7:a2:f1:8d:50:f5:ea:8d:8d:86:
         39:06:24:ff:22:58:55:0f:d7:f5:48:22:36:e4:81:b3:60:c2:
         8a:b7:43:ad:5c:1d:7f:62:fe:ed:fa:86:c3:75:dd:de:87:3d:
         12:93:e3:61:9d:3c:4c:a0:d1:60:7e:72:9e:86:7e:cd:38:1b:
         47:8f:ac:41:a8:a3:65:72:b8:6c:21:9a:d0:33:4c:7d:84:d0:
         4c:f7:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:03 2026 by rpki-client