Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/rf_BdsFG_-9acib5hvrjN1zpMxc.roa
File:                     rf_BdsFG_-9acib5hvrjN1zpMxc.roa (raw, json)
Hash identifier:          lppsqaMPcGXFmkKpPTO8l5WKlWYML5M+H1HCcHqasrQ=
Subject key identifier:   AD:FF:C1:76:C1:46:FF:EF:5A:72:26:F9:86:FA:E3:37:5C:E9:33:17
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0268
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/rf_BdsFG_-9acib5hvrjN1zpMxc.roa
Signing time:             Sun 01 Feb 2026 01:38:20 +0000
ROA not before:           Sun 01 Feb 2026 01:38:20 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        125.172.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:38:20 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=ADFFC176C146FFEF5A7226F986FAE3375CE93317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:8a:e1:76:3d:f2:fd:9b:7f:09:9e:75:76:
                    1d:94:9c:e0:fb:42:fd:61:e5:49:7f:5e:26:83:ed:
                    5e:3b:0d:32:97:98:be:5e:a8:ba:bf:fa:82:7f:57:
                    61:da:6b:92:f3:90:e5:1d:68:c8:58:4c:cc:b0:ff:
                    3e:4c:09:aa:fd:3c:ba:2e:41:40:8c:69:97:79:ae:
                    d7:e0:38:f2:74:71:ca:79:3e:b8:da:be:b3:46:46:
                    b5:d5:1b:9c:55:11:f6:56:f7:34:ce:13:a0:9c:a6:
                    c6:de:cd:b5:38:ef:74:b1:37:7f:2e:76:e4:08:27:
                    08:e1:8e:a9:0f:07:a6:67:e1:28:6b:ec:68:93:f9:
                    9b:e2:c6:36:5d:11:46:d4:a9:ee:4d:55:16:4a:a4:
                    36:49:e9:c9:8f:19:d7:8f:c6:8f:1c:e6:fd:d7:3b:
                    c7:c1:70:c2:fe:7e:81:aa:25:47:ed:12:39:f3:fe:
                    d1:ef:2c:12:55:82:85:c6:24:89:34:0a:d8:42:94:
                    5e:30:2e:82:d0:d6:ec:7f:b9:eb:d5:59:25:65:8e:
                    54:48:7c:d2:ef:58:03:69:65:3c:8e:2e:b5:66:8e:
                    b7:ff:be:5f:cb:a8:f0:6a:e5:50:f5:57:57:bc:6b:
                    e9:13:d0:d3:37:31:c9:17:2c:7d:f1:36:9e:e1:92:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FF:C1:76:C1:46:FF:EF:5A:72:26:F9:86:FA:E3:37:5C:E9:33:17
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/rf_BdsFG_-9acib5hvrjN1zpMxc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:4f:90:90:ab:cb:54:9b:77:df:44:4f:a9:91:42:66:6b:
         a2:a4:62:74:0c:c3:c1:1c:81:69:dd:e6:62:7c:bd:01:53:ed:
         9c:3e:2a:e5:81:b0:ec:6d:1b:e0:bd:db:8b:39:8c:ca:95:b1:
         d2:c0:62:51:43:03:da:78:47:3e:a8:82:cf:59:1d:13:6e:c1:
         42:91:c6:42:08:f9:ea:b1:d2:dc:9a:2c:1f:aa:c7:a4:84:b1:
         de:90:e6:28:7e:04:43:24:60:fd:f3:8b:8b:34:fb:02:ff:3c:
         cf:a5:45:16:b0:5c:9a:a2:41:4b:94:d6:3b:ae:5d:2c:74:5a:
         0e:af:f2:26:4c:28:f5:99:15:19:ca:3d:7d:fa:d2:4a:9b:13:
         ad:b6:37:97:6b:95:b7:eb:27:3d:c5:10:65:47:66:4b:c7:8a:
         7b:07:2a:d0:05:a5:5a:05:93:74:b4:0d:cc:fd:1e:66:5e:26:
         3f:65:33:c3:8d:a9:b0:21:ef:73:4c:09:80:ed:41:92:fa:a4:
         23:01:5d:40:b0:a4:01:ab:4b:21:3b:a5:34:e9:d8:65:b8:f9:
         1f:8f:61:03:3d:81:ed:e3:8e:ab:62:6d:30:af:4e:7a:0d:e6:
         53:76:98:ed:00:e6:bd:6e:c0:7a:50:e2:77:27:eb:74:21:28:
         10:e7:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:16 2026 by rpki-client