Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/FOxDBr-TQ6QWOzw-gR14vRstn90.roa
File:                     FOxDBr-TQ6QWOzw-gR14vRstn90.roa (raw, json)
Hash identifier:          l8pHHjRKce7QOaVJrPmT+ZGgzULkoDBCeYgvkHkT7Vg=
Subject key identifier:   14:EC:43:06:BF:93:43:A4:16:3B:3C:3E:81:1D:78:BD:1B:2D:9F:DD
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       AB
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/FOxDBr-TQ6QWOzw-gR14vRstn90.roa
Signing time:             Wed 29 Jul 2026 06:51:47 +0000
ROA not before:           Wed 29 Jul 2026 06:51:47 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     17506
IP address blocks:        125.100.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 06:51:47 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=14EC4306BF9343A4163B3C3E811D78BD1B2D9FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:63:f8:ba:ae:c5:56:47:69:4a:fe:0b:86:
                    71:be:54:97:7e:61:45:aa:41:14:6f:44:76:28:0b:
                    0b:28:60:ea:a2:32:49:0b:5d:5e:62:22:dd:2d:25:
                    63:0c:82:0a:42:4d:9c:22:f3:b8:f6:80:65:c7:82:
                    ba:c3:d1:e0:17:e3:58:45:bd:3b:bc:04:ba:14:69:
                    36:f2:a8:08:05:10:58:04:a2:6f:09:aa:3a:6b:a6:
                    f7:11:de:9b:ba:cd:e1:57:75:ae:9f:52:cc:b6:90:
                    0d:94:df:4e:46:44:d2:c8:6d:c2:eb:9a:7a:e7:87:
                    06:65:47:86:4f:68:a8:de:b1:ee:79:ce:68:f2:7e:
                    ac:6d:b8:31:f6:d6:ed:3f:dc:6a:58:c4:07:95:e0:
                    99:80:c3:e5:df:82:53:d1:12:4c:0c:ec:3d:90:f6:
                    51:2a:39:4f:60:7b:8d:af:0d:70:fb:f4:88:53:6f:
                    28:16:29:d6:e1:9c:55:81:f4:53:c2:00:e4:18:35:
                    74:40:97:ad:22:aa:7e:0b:f9:c7:29:59:8a:1a:01:
                    9e:41:0a:0c:3b:4a:9e:16:63:1a:68:53:7a:f1:73:
                    90:19:f7:ee:df:58:94:f8:08:8a:64:60:8c:83:32:
                    1a:61:e9:0b:ec:a7:db:78:82:fc:f5:3b:a3:e1:a4:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:43:06:BF:93:43:A4:16:3B:3C:3E:81:1D:78:BD:1B:2D:9F:DD
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/FOxDBr-TQ6QWOzw-gR14vRstn90.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.100.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:e8:c5:f1:1a:0f:33:c2:45:e9:a0:b6:3b:df:71:cb:9f:
         1b:20:94:4f:82:f3:9d:eb:8d:77:b0:ab:7a:36:79:78:73:22:
         2e:6c:01:11:0c:a9:35:09:70:62:78:b3:2f:9d:fe:55:09:a2:
         43:e1:5f:3b:6c:84:7b:cd:44:6a:34:f5:d4:82:de:3c:79:dd:
         fc:4a:76:e0:df:5b:26:44:3b:bc:1a:0e:4a:80:4a:4c:97:30:
         84:98:1b:11:35:86:c9:84:33:a7:2b:ce:4b:65:58:17:5b:1c:
         8f:41:87:f3:3e:7e:61:7b:45:61:a4:5e:8c:5e:c3:4a:0d:b4:
         1c:ba:99:2b:61:38:8f:92:ab:e0:15:d9:4f:af:8e:3d:58:ee:
         f1:6c:79:e1:9d:25:c1:d9:3b:c8:72:5b:74:7e:7a:55:32:7d:
         86:fe:37:38:41:84:cf:36:d2:df:52:a0:d6:30:95:eb:f1:ea:
         d3:e1:47:11:9e:e9:c6:b5:ab:3e:23:32:0d:60:f2:25:bd:96:
         b5:0b:40:3e:33:e9:f1:de:d5:8d:a3:3c:2e:4a:84:5c:e8:6b:
         4c:bf:92:d4:f4:c7:a5:b7:3d:10:e6:7a:6e:a0:55:c7:56:04:
         b1:d9:4a:fe:ce:ec:71:d1:ca:1e:d9:66:91:a4:a8:b6:64:34:
         12:3a:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:34:38 2026 by rpki-client