Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/fXffhm8WAedkabxmtEOHZufgMmw.roa
File:                     fXffhm8WAedkabxmtEOHZufgMmw.roa (raw, json)
Hash identifier:          21y2bDcvauhtrr7j0xoOKwTLigxHsNGb4m/izbWtlwo=
Subject key identifier:   7D:77:DF:86:6F:16:01:E7:64:69:BC:66:B4:43:87:66:E7:E0:32:6C
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       30
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/fXffhm8WAedkabxmtEOHZufgMmw.roa
Signing time:             Thu 29 Jan 2026 07:47:20 +0000
ROA not before:           Thu 29 Jan 2026 07:47:20 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     18283
IP address blocks:        101.50.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: Jan 29 07:47:20 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=7D77DF866F1601E76469BC66B4438766E7E0326C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:c6:88:eb:ce:e6:4e:9d:3a:e7:d6:1c:34:
                    b3:4f:69:ae:6f:ae:9f:c7:2b:aa:94:fd:93:d9:86:
                    25:bd:00:86:22:30:5e:98:66:17:e3:d4:d1:6a:e6:
                    0a:92:32:d0:2f:84:a6:80:16:a7:f0:80:04:c5:44:
                    c6:19:e6:b8:f1:02:d7:5e:34:90:db:2c:4a:67:c2:
                    8e:b7:10:21:23:a3:56:5a:86:4f:c3:65:6e:c0:2b:
                    5e:ee:df:06:02:90:4c:8c:e9:71:90:ff:b0:6d:34:
                    d1:9e:90:3e:33:c6:fb:77:fe:ea:42:68:68:71:62:
                    00:d4:b3:44:d6:51:71:65:69:99:89:7d:db:7a:1e:
                    ae:27:9b:16:9b:b7:fc:f5:b4:31:7b:f3:42:2a:72:
                    bc:4c:1e:e8:f3:29:37:62:d2:44:76:14:d6:a0:ae:
                    2b:c8:b7:30:44:19:a5:5b:4d:66:44:a0:5e:10:78:
                    99:ff:b8:2f:bc:6a:dc:53:9b:56:27:86:a5:f8:c5:
                    8f:0b:cb:fc:ac:6c:2b:a9:61:ac:28:46:3f:a1:9b:
                    0e:53:06:7d:7e:96:d3:48:e4:5d:5b:31:4d:0d:cb:
                    14:84:50:c5:7a:ab:cd:e9:77:68:b4:86:93:b4:e2:
                    15:b7:f7:b5:fc:a4:92:59:37:47:f1:ad:22:ad:94:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:77:DF:86:6F:16:01:E7:64:69:BC:66:B4:43:87:66:E7:E0:32:6C
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/fXffhm8WAedkabxmtEOHZufgMmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:b3:ed:0a:67:e1:f6:dc:e1:50:b2:23:dd:e5:cb:a7:1f:
         37:7e:0d:79:01:a1:3c:d1:cb:a9:71:1e:4f:4d:31:0c:82:fb:
         5b:78:b0:b6:34:d7:f3:db:c2:42:77:15:0d:f5:63:e3:cc:bd:
         d0:bb:a7:ba:9a:75:98:59:19:31:6b:a7:54:d9:aa:73:f3:15:
         05:8f:31:57:71:3f:7d:f4:af:b8:5c:3b:01:5b:6d:45:76:ba:
         ce:59:8a:d6:aa:25:64:78:6d:1c:0e:c6:58:bb:da:bf:66:fd:
         84:7a:32:90:91:da:a7:fc:56:a1:8b:ec:94:a0:fa:a2:a4:95:
         35:44:94:e5:9d:eb:7b:d9:3f:73:a1:d0:3f:c7:ef:7d:12:0d:
         74:59:b4:83:e4:7e:06:da:d7:af:f1:bd:5c:3e:35:7e:96:09:
         88:d7:9a:56:1c:ae:d3:ea:96:87:d2:ab:2a:ed:41:d5:30:56:
         78:8b:8f:d7:8e:2f:a4:6b:b0:f1:f4:36:9d:a8:ce:84:78:8f:
         e2:7d:bb:98:19:ab:95:a7:af:a2:6b:d3:4f:d8:e4:d8:d1:6a:
         d7:f7:d4:eb:81:d6:68:07:15:b3:64:c0:53:58:24:0e:e6:6d:
         c6:9c:dd:2f:80:d4:2f:b5:20:af:8f:e2:de:8e:c6:b5:24:12:
         b1:35:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:00 2026 by rpki-client