Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/4_fypKNSm_v_MMnogcxDfdbn5CQ.roa
File:                     4_fypKNSm_v_MMnogcxDfdbn5CQ.roa (raw, json)
Hash identifier:          lcsjEsmdYVLyn6OT6QGUn7P0wT0ZkTcjoAWIaGM8dS8=
Subject key identifier:   E3:F7:F2:A4:A3:52:9B:FB:FF:30:C9:E8:81:CC:43:7D:D6:E7:E4:24
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       6E
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/4_fypKNSm_v_MMnogcxDfdbn5CQ.roa
Signing time:             Sun 01 Feb 2026 01:32:28 +0000
ROA not before:           Sun 01 Feb 2026 01:32:28 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     23637
IP address blocks:        202.9.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Feb  1 01:32:28 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=E3F7F2A4A3529BFBFF30C9E881CC437DD6E7E424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:8b:ba:67:1c:1c:ab:60:64:94:09:81:01:
                    c6:be:5b:07:0f:74:d9:14:38:d1:c6:3a:65:a5:28:
                    c4:9b:21:7d:5f:c4:d0:b5:98:e8:05:e0:66:43:53:
                    83:3d:ba:ac:aa:20:59:15:3d:39:9b:c4:9e:69:87:
                    59:e6:7e:a6:1c:b5:ac:f3:f3:ef:0a:78:b2:71:8b:
                    d0:64:f6:d9:87:1c:2f:74:0d:d8:54:bc:12:92:7a:
                    40:62:f2:9f:c3:11:1e:f3:a3:d2:cf:16:e1:db:e8:
                    ee:b1:ae:f2:34:04:50:92:e9:0d:55:52:af:fd:96:
                    c2:3b:e1:8c:44:0f:04:20:ac:9d:7d:8d:b8:e4:01:
                    c8:97:93:03:c8:3d:74:e2:75:1b:d1:e6:9f:3c:b9:
                    ab:74:fd:7f:e9:84:05:9c:0e:87:5c:64:eb:77:31:
                    82:5e:31:4d:b9:19:60:18:88:98:cc:8d:98:c3:b1:
                    4a:72:fc:10:3a:6f:8d:76:5e:a4:ca:3c:f3:7a:51:
                    dd:09:f5:a6:59:12:c4:75:fe:b7:a1:8b:55:83:38:
                    c2:30:e9:cf:d3:f1:30:fa:bb:c0:44:5e:c8:69:f7:
                    5a:7c:10:a2:fc:ba:fb:fb:0f:7c:d0:6d:47:a4:ba:
                    86:6a:05:6c:e9:a2:66:0e:6b:6f:8e:41:21:3b:08:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F7:F2:A4:A3:52:9B:FB:FF:30:C9:E8:81:CC:43:7D:D6:E7:E4:24
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/4_fypKNSm_v_MMnogcxDfdbn5CQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:a8:46:c5:07:2d:39:e3:10:ef:a8:d2:d1:18:ad:47:04:
         95:4c:7c:a9:47:15:e8:f5:1f:c9:d6:5a:59:f6:67:8a:84:ef:
         af:ba:da:89:4b:7a:36:54:ee:21:b1:57:85:f1:85:37:9d:68:
         ce:c6:1d:55:95:85:2b:2b:69:d5:62:82:d4:72:36:f5:ba:2d:
         0c:f3:c1:d4:c0:cc:10:5f:25:0b:1a:2e:67:a0:a5:25:d9:7e:
         d5:80:49:a2:cd:cc:1e:de:ae:68:ad:26:96:8e:fd:64:53:13:
         b8:a8:ef:4a:66:28:9d:18:f6:ba:e0:00:26:77:1e:20:e3:af:
         16:cf:cd:c6:eb:eb:c4:84:05:55:18:49:ba:a2:93:75:72:bf:
         13:ad:cd:9e:a5:3f:46:0b:d2:41:e7:ab:d8:b6:b6:f4:36:0e:
         ba:c2:3a:41:ea:f6:96:24:ea:ef:8b:13:44:52:e8:69:0b:8a:
         1b:dd:74:93:f4:47:25:c9:df:88:9a:5a:23:50:0e:7c:a1:75:
         74:f4:99:98:21:ec:cf:16:07:41:58:60:ab:f3:d1:f5:ab:ba:
         f1:b9:83:6a:37:0d:0f:fb:dd:4e:74:74:d1:73:fe:90:f9:bd:
         3f:3e:9b:ea:d6:7b:30:d9:77:54:f2:7e:e6:66:57:37:70:d8:
         32:0d:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:03 2026 by rpki-client