Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/i4FHFrRIik2EFjTfexaYTAymX4Q.roa
File:                     i4FHFrRIik2EFjTfexaYTAymX4Q.roa (raw, json)
Hash identifier:          rV+j7n+sO2iCxTntOahIz6/p29FfFrGGsYAHhg0W+I0=
Subject key identifier:   8B:81:47:16:B4:48:8A:4D:84:16:34:DF:7B:16:98:4C:0C:A6:5F:84
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       025F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/i4FHFrRIik2EFjTfexaYTAymX4Q.roa
Signing time:             Sun 01 Feb 2026 01:31:47 +0000
ROA not before:           Sun 01 Feb 2026 01:31:47 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        118.16.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:31:47 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=8B814716B4488A4D841634DF7B16984C0CA65F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:34:89:76:72:86:52:cd:ff:c5:b4:12:4f:
                    b6:e9:b5:cd:b8:a6:9b:22:bf:59:25:1e:85:c8:42:
                    4c:d0:e6:dc:43:74:d2:35:6e:e0:d3:09:66:1d:73:
                    24:65:11:6e:c5:c0:cb:ad:0b:ac:a3:9a:c1:46:33:
                    cc:cc:17:d8:a8:f1:3b:9e:2f:73:dd:bb:0d:7b:fa:
                    4f:08:34:8d:27:3f:dd:01:7d:4f:7a:63:3d:fd:98:
                    a8:93:00:80:95:33:42:48:0a:2c:3a:13:29:3e:75:
                    a9:23:ee:de:48:b3:b0:5d:e6:cc:22:36:d3:b3:c2:
                    b1:30:3a:fe:b4:ce:b3:c2:90:7c:4c:65:8d:c7:cd:
                    93:0e:26:23:23:5f:c0:b0:03:f4:f5:59:37:78:1c:
                    dd:d5:3f:e0:33:3c:bd:62:26:f8:f4:f3:22:6d:f1:
                    a2:73:20:19:b6:8e:e0:1f:ab:b9:93:f9:5c:67:3f:
                    7b:dc:49:2d:dd:c5:97:90:82:86:e9:39:fe:bf:32:
                    f1:43:86:3c:3d:a0:ce:d3:ad:f4:d2:e3:f3:f5:1d:
                    5a:ca:1b:de:e0:3a:76:69:2d:2d:b5:cc:f1:ef:06:
                    f0:82:d0:62:b5:d2:98:cc:52:b0:c6:53:79:13:0d:
                    88:ac:22:32:25:54:28:b7:ac:57:82:32:e4:74:1c:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:81:47:16:B4:48:8A:4D:84:16:34:DF:7B:16:98:4C:0C:A6:5F:84
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/i4FHFrRIik2EFjTfexaYTAymX4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.16.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:80:3c:c1:67:9b:03:21:b1:53:ad:b4:be:cd:35:bc:7c:
         42:26:61:8b:64:f3:f9:49:f6:b2:30:b4:97:59:8f:a5:c4:30:
         16:aa:ff:26:19:76:60:e7:bc:07:13:6b:c1:ed:4e:85:8e:09:
         6d:2a:05:a2:c2:63:2a:55:9a:79:f4:6c:7f:05:b9:64:dc:44:
         d1:cf:03:82:31:2c:69:e8:73:3d:32:b6:8d:97:b3:ce:91:fc:
         ba:9c:fc:8a:b5:9e:b5:c1:e4:bb:84:90:aa:e0:74:fa:f4:05:
         3f:9d:98:bb:99:aa:e6:8d:42:d5:62:7b:fe:81:1d:69:f1:12:
         cc:65:4b:de:dd:08:41:1b:bb:33:8e:fd:71:50:d4:db:d4:79:
         d5:fb:24:24:dd:1e:ff:24:b8:3d:ca:71:f3:c2:de:7c:17:dd:
         7c:64:c9:53:be:1b:1b:ae:83:3e:20:c0:49:f7:f9:db:ab:9e:
         86:7a:71:85:fa:08:51:a9:f1:22:5f:c7:c6:36:49:74:53:2d:
         fa:06:69:71:00:1d:8d:e2:e8:14:c6:25:30:a6:80:fc:1a:92:
         09:06:38:cb:28:9f:d9:d9:cd:07:49:de:df:65:c6:3d:6e:37:
         b8:fe:0c:85:0d:04:1d:09:79:21:53:a4:23:f0:48:aa:b9:e3:
         be:0f:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:06 2026 by rpki-client