Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa
File:                     xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa (raw, json)
Hash identifier:          c4qIVRj7g9SV1+8rP29HhdHDBxkhpzyfZJYR1EEjNss=
Subject key identifier:   C4:DD:0D:6E:D9:39:87:2F:15:AB:36:1F:95:7F:7F:F0:33:33:8C:39
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0258
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa
Signing time:             Sun 01 Feb 2026 01:31:41 +0000
ROA not before:           Sun 01 Feb 2026 01:31:41 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        61.199.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:31:41 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=C4DD0D6ED939872F15AB361F957F7FF033338C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:a4:5b:7d:cb:b7:43:65:9f:9f:0e:f2:8a:
                    f5:19:5b:35:c0:d5:b2:44:f6:38:d8:4d:66:0e:80:
                    77:d5:de:71:a3:61:7a:54:37:46:8b:93:be:dd:89:
                    1f:e2:da:f2:a7:42:2f:cd:f8:13:3a:90:0d:1f:34:
                    3f:ff:38:1c:db:fe:07:2f:ee:bc:71:01:b0:9c:5a:
                    ab:d6:12:a8:e2:cf:7e:1d:db:3f:78:14:4c:a8:5e:
                    81:26:b9:9d:00:9d:08:a1:91:4e:a0:74:dd:d1:8d:
                    9a:b5:38:70:31:63:35:70:00:f2:29:b9:91:54:a4:
                    36:0a:01:ee:8e:99:f0:78:ee:3f:f1:b5:ce:70:01:
                    7e:7c:5f:fc:bb:70:9e:d7:18:2e:cd:53:63:49:d2:
                    19:77:a0:05:44:d3:24:ad:ca:a8:5b:d2:11:c3:f4:
                    a7:d8:ea:22:d8:cf:9c:b3:cb:1a:17:8c:d6:1c:87:
                    44:02:64:26:34:8a:50:87:63:18:bd:6f:7f:fe:2f:
                    0f:39:3f:02:db:b6:b3:02:b4:95:92:a9:77:dc:25:
                    35:dd:a6:f0:3f:5f:8e:0d:2f:77:c7:ff:8a:fb:a8:
                    b1:c6:8c:97:7d:ab:0c:a7:92:53:bf:43:17:0a:1a:
                    fa:51:a4:56:7e:ce:ce:bd:43:de:5f:5b:7d:cf:e6:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DD:0D:6E:D9:39:87:2F:15:AB:36:1F:95:7F:7F:F0:33:33:8C:39
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:9c:b0:6d:3d:c9:5a:55:48:f4:98:88:0a:bd:b4:06:f6:
         c2:71:1e:93:03:c4:4b:8c:fe:14:35:74:5c:96:57:d6:69:cf:
         27:9a:af:5c:cd:df:73:28:f1:e6:38:b0:70:79:cb:54:c7:34:
         c3:d8:5a:cb:44:5a:e3:94:40:1d:15:90:e6:17:b2:1b:18:aa:
         26:33:39:db:0f:ea:f7:6c:50:67:26:99:b7:38:66:9f:8a:e3:
         33:86:2a:a8:a5:a3:9e:72:86:6a:d0:27:0f:48:60:be:8c:ec:
         2e:10:0b:ac:d3:db:20:84:d5:77:1b:d0:fc:d5:a0:a7:fe:7d:
         7c:ce:67:dc:3e:c3:46:51:65:0e:7a:d6:62:94:b5:aa:5a:57:
         ed:ae:cd:31:9e:a7:32:d5:8f:13:83:2a:35:c9:72:f7:4c:50:
         52:61:c0:3e:49:2d:8b:64:7e:eb:ea:9e:5f:22:25:fc:7d:15:
         9d:0d:18:06:49:27:31:cf:8b:a0:9a:1d:13:12:53:e1:bb:cb:
         f6:5f:d5:1d:ea:90:74:e0:24:18:ed:a7:a3:47:93:1b:e2:76:
         84:5b:ce:4c:ee:1e:1b:0f:59:28:b4:55:52:01:6b:48:a7:f7:
         dd:da:fa:93:cb:9e:4b:34:65:19:b9:02:ab:67:39:3b:56:f4:
         69:0e:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:09 2026 by rpki-client