Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/FIVODyDU1gB71vkiN0DC_FYI3XQ.roa
File:                     FIVODyDU1gB71vkiN0DC_FYI3XQ.roa (raw, json)
Hash identifier:          asVHZnYvn1pHTp4ti0QZrUdXE0AljoQDD5wtGWZJ6zU=
Subject key identifier:   14:85:4E:0F:20:D4:D6:00:7B:D6:F9:22:37:40:C2:FC:56:08:DD:74
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       7F
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/FIVODyDU1gB71vkiN0DC_FYI3XQ.roa
Signing time:             Tue 31 Mar 2026 07:49:20 +0000
ROA not before:           Tue 31 Mar 2026 07:49:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23816
IP address blocks:        203.95.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Mar 31 07:49:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=14854E0F20D4D6007BD6F9223740C2FC5608DD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:df:eb:fc:d2:67:b7:26:46:96:16:39:55:
                    58:4f:f3:b9:46:75:49:c9:50:27:57:c2:31:31:f6:
                    27:8b:7a:f1:a2:71:b8:39:15:fc:1b:9a:c1:72:62:
                    ce:99:a4:a0:31:0f:d7:a2:59:8d:aa:71:31:59:c0:
                    c4:e1:47:c3:fd:b7:55:bd:3d:3b:b8:dd:14:ae:8e:
                    25:00:4d:88:1c:4f:28:8f:4f:79:11:1d:0c:57:b4:
                    f9:a5:70:fc:f7:80:5a:47:b8:6e:ee:3b:08:ac:27:
                    98:b4:af:de:90:4c:e0:2e:46:12:ea:14:28:de:72:
                    63:b8:e5:e5:eb:bb:d1:a8:1f:5f:8e:8b:2a:78:a7:
                    a1:ce:53:ee:ae:37:76:a6:8e:6c:33:95:09:b2:00:
                    b2:4f:a0:01:83:e8:7c:9e:81:f7:43:78:4a:d8:ab:
                    40:c7:5d:96:6e:a2:2b:e0:5b:66:3b:53:06:51:42:
                    87:52:07:c4:08:9a:e6:90:54:a6:cd:2e:48:48:58:
                    f0:18:35:bf:33:e0:d2:d6:47:9e:a8:63:ad:2e:5e:
                    bb:71:03:68:cd:73:02:1a:06:44:11:d2:7c:b2:a9:
                    32:d9:d9:d8:42:f5:74:5c:ee:9b:c5:a3:84:2f:42:
                    d3:2c:50:c9:6c:fc:9a:26:85:df:38:8c:3f:b3:e9:
                    b1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:85:4E:0F:20:D4:D6:00:7B:D6:F9:22:37:40:C2:FC:56:08:DD:74
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/FIVODyDU1gB71vkiN0DC_FYI3XQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:23:36:36:fa:14:91:81:00:90:e9:cf:c4:0c:c5:c6:4e:76:
         f1:12:d6:59:98:65:16:09:c0:87:af:9e:d8:4b:9b:5f:58:71:
         f6:e1:4f:31:43:5d:35:70:1d:43:ac:fa:f7:8b:87:c9:c0:dc:
         7e:f7:23:b0:d9:c8:a2:d4:52:c3:d4:3c:71:d2:ef:70:ea:c3:
         82:06:fb:ea:0a:37:5f:77:9d:41:a7:da:77:d9:a2:04:d1:31:
         09:67:69:47:39:e6:d5:35:ca:0a:07:5f:af:76:42:07:6c:e5:
         ce:35:47:e3:5d:87:24:e1:15:19:2b:91:3a:94:dd:44:1a:72:
         56:29:65:f3:e5:ab:a9:79:49:8f:a6:9e:da:1b:35:85:09:55:
         dd:20:90:41:71:7c:f3:a9:b9:ea:5d:f8:b3:2c:83:97:d1:bf:
         b4:9a:01:32:60:3d:bf:76:41:ae:0f:78:e5:1f:69:db:f3:82:
         b4:d8:a5:78:bb:ec:d1:08:47:18:34:fb:8d:c6:11:e7:fb:1b:
         51:f9:49:7a:28:2d:4b:6d:e6:cf:9d:03:48:5a:ce:d4:fb:79:
         ba:13:e1:4e:6f:d2:71:15:af:42:5e:ad:f0:2c:65:c4:e0:60:
         1b:79:ce:1a:ae:2b:dd:e4:f6:94:25:ea:3a:2b:04:e0:f3:d7:
         09:3f:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 19:44:46 2026 by rpki-client