Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/x6yzGZoH6F74ldK-hHa-vfve9Wc.roa
File:                     x6yzGZoH6F74ldK-hHa-vfve9Wc.roa (raw, json)
Hash identifier:          PVZEuzUlyBuzZadK0WjfHOybXsx7IPOpy7oKeUZ7+g0=
Subject key identifier:   C7:AC:B3:19:9A:07:E8:5E:F8:95:D2:BE:84:76:BE:BD:FB:DE:F5:67
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       026A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/x6yzGZoH6F74ldK-hHa-vfve9Wc.roa
Signing time:             Sun 01 Feb 2026 01:38:21 +0000
ROA not before:           Sun 01 Feb 2026 01:38:21 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        153.128.0.0/10 maxlen: 10
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:38:21 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=C7ACB3199A07E85EF895D2BE8476BEBDFBDEF567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:39:65:c2:e0:37:e9:5e:ed:e9:a0:1f:c2:
                    5b:13:47:2f:8c:3b:12:90:f3:9e:0c:cd:50:2c:b0:
                    15:de:58:aa:13:29:f5:e1:27:2d:8d:77:84:fd:ba:
                    b4:f5:3c:c7:fc:ae:ce:fe:69:ff:c8:36:1b:b2:01:
                    01:9e:48:6b:80:b6:2d:7f:28:0e:b0:d8:f2:cf:cf:
                    c7:26:5f:c6:f5:f5:47:6c:3e:93:b5:0f:2e:05:5b:
                    5b:cc:37:2b:4b:ec:f5:03:b3:54:8d:ec:a0:3e:3e:
                    1a:3d:3f:eb:f9:a7:d4:b4:37:36:8f:1e:97:54:e2:
                    1a:4b:84:73:e7:6f:62:99:f3:ce:08:e0:fe:39:df:
                    2e:95:5c:16:74:ff:62:32:96:41:83:04:2d:55:f8:
                    ec:ed:d4:68:bf:91:e4:73:37:75:d5:28:e7:75:5e:
                    e5:25:c1:90:c5:12:a5:f3:c9:01:65:5a:bb:6d:3d:
                    b1:91:3a:17:42:2c:0b:01:22:19:34:4d:96:c5:bb:
                    b0:0e:a9:27:0c:0e:43:f8:d6:54:53:26:81:f3:e8:
                    92:c0:df:c6:45:20:c3:39:d2:d8:2e:c6:a4:4e:7d:
                    23:07:0a:d8:ec:8a:c7:b6:71:5e:30:7d:5b:dd:d2:
                    19:b2:53:af:a4:5d:ad:fe:6c:f0:0a:be:ed:90:73:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:B3:19:9A:07:E8:5E:F8:95:D2:BE:84:76:BE:BD:FB:DE:F5:67
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/x6yzGZoH6F74ldK-hHa-vfve9Wc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.128.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:0d:0f:27:8c:a5:1b:8e:f0:4e:2a:07:96:87:7b:a4:50:
         ed:cb:6e:96:eb:38:a4:d6:fc:01:15:f3:63:52:f0:f7:08:13:
         a9:e2:07:80:70:99:e7:81:c4:0a:c8:b8:6b:e5:09:9c:79:b3:
         df:54:ce:a6:3c:b7:01:f2:7f:67:86:7c:49:83:91:9d:1b:97:
         60:89:3d:67:ca:65:08:39:d7:61:e4:67:e2:a6:94:46:bc:7d:
         cd:6a:f6:47:b0:cc:11:ec:fc:f2:61:74:03:66:b6:9f:5e:4b:
         4d:12:ce:d7:b4:ab:e5:46:dd:5d:1a:be:d3:37:d9:d9:7d:96:
         84:37:24:4d:61:96:48:79:0c:d0:91:e1:59:3b:9a:40:bf:a0:
         c8:35:ba:a2:8b:94:17:19:71:23:47:3e:90:12:41:9d:c3:91:
         f2:c7:4a:f4:f8:07:21:cb:d0:46:d2:41:f3:5d:c7:4a:bf:e2:
         7d:16:d4:16:4b:4c:6f:5a:69:af:88:73:4f:7f:41:49:e3:8e:
         ca:80:55:54:ed:f6:4b:e2:02:5c:79:63:d9:f2:43:28:2a:95:
         82:f1:c8:4f:50:e6:e8:49:ae:ac:7c:6b:e3:0a:bd:cb:fb:13:
         49:77:9e:28:13:48:bd:22:95:79:40:05:75:84:06:9e:52:a8:
         bd:0b:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:19 2026 by rpki-client