Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30402/FoZhTqQVqQLxtt6srKB6p34YF2s.roa
File:                     FoZhTqQVqQLxtt6srKB6p34YF2s.roa (raw, json)
Hash identifier:          Xgb2GnX203hatsTQ/olks2UDa2MfDCg0M9ix1zqPNbI=
Subject key identifier:   16:86:61:4E:A4:15:A9:02:F1:B6:DE:AC:AC:A0:7A:A7:7E:18:17:6B
Certificate issuer:       /CN=B04B9FDC5C1B348E706EE39991E553F915381613
Certificate serial:       02
Authority key identifier: B0:4B:9F:DC:5C:1B:34:8E:70:6E:E3:99:91:E5:53:F9:15:38:16:13
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sEuf3FwbNI5wbuOZkeVT-RU4FhM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30402/FoZhTqQVqQLxtt6srKB6p34YF2s.roa
Signing time:             Fri 15 May 2026 18:19:10 +0000
ROA not before:           Fri 15 May 2026 18:19:10 +0000
ROA not after:            Sat 15 May 2027 17:45:58 +0000
asID:                     63794
IP address blocks:        2400:7d20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30402/sEuf3FwbNI5wbuOZkeVT-RU4FhM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30402/sEuf3FwbNI5wbuOZkeVT-RU4FhM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sEuf3FwbNI5wbuOZkeVT-RU4FhM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04B9FDC5C1B348E706EE39991E553F915381613
        Validity
            Not Before: May 15 18:19:10 2026 GMT
            Not After : May 15 17:45:58 2027 GMT
        Subject: CN=1686614EA415A902F1B6DEACACA07AA77E18176B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:ab:30:e2:fd:12:6d:30:87:49:c8:4c:15:
                    fb:7d:3d:d1:cc:05:12:c6:38:dd:07:30:8e:7b:82:
                    a8:0c:3f:3c:20:08:db:d7:c2:ea:7d:a7:03:1f:c8:
                    1d:f1:1f:47:86:f5:33:c1:74:b3:c7:56:15:4b:b7:
                    2f:1f:1a:3c:cf:fc:c2:47:10:3a:6c:8d:8a:5a:58:
                    1e:6c:ad:6a:34:e1:ff:62:01:10:0a:ab:b6:4f:66:
                    c5:34:d6:92:13:bd:9f:4c:ef:26:17:f2:c5:57:4e:
                    a3:77:54:b0:9e:94:47:1a:f9:7e:d1:05:48:b1:fe:
                    7c:19:8d:09:fc:17:02:e2:8d:8d:a2:b8:79:8f:82:
                    7f:18:e7:07:40:47:88:9c:69:00:cf:bb:3a:20:f0:
                    89:74:fe:cf:d6:88:16:1e:4d:cb:2d:f3:2e:50:0a:
                    a1:4d:62:81:34:00:b4:33:8a:e5:35:44:03:f5:82:
                    f5:ad:a2:67:d9:8f:b5:d9:75:aa:8b:80:68:66:aa:
                    2d:34:37:0f:9f:02:37:6b:15:08:bc:e7:53:91:2b:
                    0d:86:2d:81:c8:ee:09:06:ec:8c:80:e5:9d:29:e9:
                    95:d3:2c:c2:d6:c3:12:42:1d:94:25:47:2c:83:b1:
                    c8:0d:ce:c2:32:5a:ea:14:d4:7b:6f:50:c7:f0:a2:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:86:61:4E:A4:15:A9:02:F1:B6:DE:AC:AC:A0:7A:A7:7E:18:17:6B
            X509v3 Authority Key Identifier:
                keyid:B0:4B:9F:DC:5C:1B:34:8E:70:6E:E3:99:91:E5:53:F9:15:38:16:13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30402/sEuf3FwbNI5wbuOZkeVT-RU4FhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sEuf3FwbNI5wbuOZkeVT-RU4FhM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30402/FoZhTqQVqQLxtt6srKB6p34YF2s.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:52:29:2b:cb:dd:c2:d2:b8:5b:49:a1:a2:9b:23:15:4a:
         6a:bc:94:a2:af:4c:80:53:a2:f2:30:c6:8e:47:5b:4c:b5:23:
         cb:03:55:9e:d6:4f:cc:57:51:1d:b1:b6:bb:1a:89:08:a2:6a:
         04:ce:cd:bb:a3:f6:4e:10:ef:55:3c:41:ed:26:26:03:1e:58:
         f5:11:31:ce:6c:03:a6:69:3b:91:5c:54:bf:27:d8:75:88:61:
         1c:c1:9d:59:18:01:cc:7d:7d:ed:f8:dd:6a:28:7f:05:6b:ea:
         9c:76:b6:6f:45:89:14:d9:40:18:fe:10:ac:84:e3:88:39:ff:
         55:04:50:9a:d4:9c:70:77:21:92:42:38:1d:2b:3a:ec:fc:d1:
         af:a8:a7:9c:d3:47:70:46:21:1d:bd:92:ff:3c:72:6b:4e:fe:
         d7:b0:a5:df:28:bf:18:f4:4d:58:fb:d7:05:d7:cc:3b:70:5e:
         72:fd:a1:d8:77:b4:1b:15:98:a7:89:9b:5f:9a:9e:bf:f9:5b:
         10:a4:92:40:ed:28:74:81:2a:50:23:78:40:f3:a9:7c:54:49:
         15:b2:d8:e1:c3:36:21:44:ba:e8:26:20:61:12:71:7f:56:fc:
         12:29:d1:bf:99:19:9a:f5:fe:31:42:35:4a:3e:2b:aa:b1:27:
         90:f4:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:23:40 2026 by rpki-client