Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/FpaEL39Ml7BAHteVw2CEpzwTHBU.roa
File:                     FpaEL39Ml7BAHteVw2CEpzwTHBU.roa (raw, json)
Hash identifier:          E/CViGl8OoHKsJmsh+WepNkcf21Z6adDzqFtjKnzgdg=
Subject key identifier:   16:96:84:2F:7F:4C:97:B0:40:1E:D7:95:C3:60:84:A7:3C:13:1C:15
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       A7
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/FpaEL39Ml7BAHteVw2CEpzwTHBU.roa
Signing time:             Wed 29 Jul 2026 06:33:30 +0000
ROA not before:           Wed 29 Jul 2026 06:33:30 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        124.110.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 06:33:30 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=1696842F7F4C97B0401ED795C36084A73C131C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:fe:44:0c:c2:79:d0:98:87:84:13:e3:c2:
                    f5:4f:a3:5f:19:c4:ae:16:52:fe:f2:97:13:f4:43:
                    10:cb:d3:8e:b0:a3:63:2e:ce:cd:80:ef:e1:93:e6:
                    26:d9:e8:f1:61:3e:0e:a5:77:58:7b:12:c4:e1:3b:
                    02:0d:45:ed:80:ec:3a:4c:87:ce:aa:93:94:74:af:
                    ea:b5:cf:f6:5f:e9:d3:02:76:7b:24:01:8b:77:32:
                    aa:b8:11:33:88:82:9b:9b:e1:ba:3a:6c:d0:24:83:
                    fd:96:47:a9:fc:a1:c1:b9:31:fa:7e:2d:ac:a5:cc:
                    d6:4e:62:ec:d8:dd:01:65:b9:cf:de:2e:46:19:ff:
                    a1:9c:b1:a0:06:11:61:11:e4:51:f4:64:f6:05:fa:
                    17:31:af:6a:32:51:bf:c4:2d:45:8b:85:3b:bb:bb:
                    5b:1e:23:45:87:34:e2:fc:1e:ba:c5:ac:28:7a:26:
                    c7:58:7a:2c:f6:8e:bf:3b:20:3b:9c:9c:62:9c:22:
                    22:37:18:93:04:be:a0:6b:4d:cf:18:e3:10:20:d4:
                    34:ec:7b:52:4c:6f:e3:2a:58:53:5d:47:73:43:e9:
                    bd:cf:4a:50:e6:95:e7:d0:9d:0f:cd:d5:e7:9d:5c:
                    39:df:d5:9d:a9:6c:7a:98:63:95:3a:ea:a7:36:85:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:84:2F:7F:4C:97:B0:40:1E:D7:95:C3:60:84:A7:3C:13:1C:15
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/FpaEL39Ml7BAHteVw2CEpzwTHBU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:39:be:58:57:0d:ee:91:de:4a:2c:0e:17:a2:09:b5:f7:c2:
         b0:09:8c:c4:65:6c:fd:51:38:14:5d:a1:83:f5:69:f5:b1:eb:
         94:08:49:eb:65:44:6e:c5:da:83:fa:89:f6:32:a0:f3:72:40:
         34:f5:82:52:a4:89:a6:32:47:db:c9:24:9e:5a:b5:7c:77:4d:
         43:3a:5a:80:32:45:7b:37:94:94:16:cf:43:30:00:b0:eb:90:
         5e:0d:36:aa:7f:7c:7a:97:9b:73:48:a3:c2:27:dc:d4:fa:52:
         bb:68:74:88:e0:5d:1b:80:0d:f1:f3:f3:01:9c:60:dc:0c:e6:
         16:6a:18:99:76:24:55:69:da:86:dd:24:50:ab:e3:ba:e8:3a:
         2e:ad:0f:cc:44:12:79:6f:cb:69:b9:e1:72:1c:5b:1c:82:83:
         ce:78:2a:05:1e:52:c7:cb:31:4c:7a:ab:56:d3:ca:b4:98:58:
         38:ac:b2:1d:8a:98:a4:72:78:16:85:1d:5e:7b:1c:ad:a7:a9:
         ca:8a:a8:f8:e0:25:3f:07:7a:46:de:ef:60:83:1d:01:3c:09:
         89:75:09:9d:43:ae:e5:1a:79:e8:64:54:72:fb:f3:be:14:cb:
         2d:77:fb:37:1e:d1:e5:3f:f6:18:6b:ed:20:8b:26:ea:ed:08:
         d2:07:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:16 2026 by rpki-client