Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/FGMSW9sY86S5CDQ8tI26uqgQfNU.roa
File:                     FGMSW9sY86S5CDQ8tI26uqgQfNU.roa (raw, json)
Hash identifier:          r4BAXZ4XXvgfQtiRc6ohdZQeESYnRfivLy0kvi7w+xs=
Subject key identifier:   14:63:12:5B:DB:18:F3:A4:B9:08:34:3C:B4:8D:BA:BA:A8:10:7C:D5
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       52
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/FGMSW9sY86S5CDQ8tI26uqgQfNU.roa
Signing time:             Sun 01 Feb 2026 01:34:53 +0000
ROA not before:           Sun 01 Feb 2026 01:34:53 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     24271
IP address blocks:        202.177.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: Feb  1 01:34:53 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=1463125BDB18F3A4B908343CB48DBABAA8107CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:c4:a1:75:ec:62:95:b8:54:19:a4:8e:76:
                    e8:fd:9f:d8:3d:05:cb:fd:cd:28:09:e4:55:9d:5e:
                    4a:74:a3:e2:40:cc:e1:b6:d8:cd:59:b6:08:99:bb:
                    bd:97:1f:e0:47:ef:3b:4e:50:d7:0b:fc:5d:11:92:
                    3f:06:8e:59:cf:5c:48:f7:6c:c8:33:cd:f7:e5:ee:
                    cf:2d:e0:bd:fc:7d:d6:55:79:53:56:21:85:85:83:
                    6d:c2:60:a2:2c:77:61:6d:60:9c:dd:8f:3b:cf:74:
                    35:9a:0f:6c:06:e7:55:7c:76:44:a8:38:43:be:16:
                    be:71:3f:c0:79:bb:82:70:9a:58:79:07:17:a1:ed:
                    42:ff:35:ef:93:f9:8c:c4:7b:7e:50:e6:53:5c:1a:
                    ca:a2:95:f8:a9:7f:48:78:00:d2:7a:69:07:c2:db:
                    02:9f:11:4f:b8:8d:db:da:34:e5:40:1b:68:5f:28:
                    a1:33:c0:88:e6:58:f3:73:8d:86:9a:fb:f4:87:b7:
                    b2:e0:72:92:9d:e2:f6:e8:32:05:8d:12:c6:a6:4d:
                    56:4d:53:b7:86:e2:c4:aa:33:d5:7f:ed:7a:11:2a:
                    fd:6d:7e:8b:bb:72:80:e1:ab:c8:de:a5:ca:b0:bc:
                    c4:11:7f:99:36:67:83:42:34:a1:13:8c:a2:3a:97:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:63:12:5B:DB:18:F3:A4:B9:08:34:3C:B4:8D:BA:BA:A8:10:7C:D5
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/FGMSW9sY86S5CDQ8tI26uqgQfNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:a9:71:de:b6:24:fb:33:65:db:eb:e4:64:d7:a9:cf:4b:58:
         c0:9d:ae:92:78:1d:4d:30:87:1b:50:34:4d:c0:f6:71:f7:d1:
         8f:c3:6a:65:e3:3c:24:c3:c1:97:54:db:80:7f:fc:c8:78:5e:
         bd:44:ff:08:67:6c:51:32:de:89:a0:b9:52:40:7b:23:0a:32:
         28:55:51:19:54:01:b3:fb:83:78:78:5b:fc:89:84:a8:56:84:
         b2:a4:c8:78:fd:d4:5f:d7:04:f7:4d:f0:77:1c:19:2c:7b:28:
         04:df:a0:e9:31:28:07:cd:e6:f8:6c:12:0d:b0:47:d2:b8:0f:
         eb:69:c6:da:c7:4c:fe:60:99:ba:65:21:4e:8e:fc:02:09:3c:
         56:85:02:2b:32:55:28:42:af:b8:38:a1:aa:6c:6a:7f:a3:a4:
         92:c2:c1:f3:86:07:06:54:a2:2d:b4:1d:b9:d6:6d:66:d5:dd:
         96:d7:b9:7a:14:2b:aa:15:0e:a8:9f:43:94:4a:54:49:c6:5e:
         27:94:6a:4d:8a:d4:2e:a4:f7:77:23:86:d1:c5:a6:c2:e0:d8:
         49:30:50:a7:44:8f:5a:c9:d4:53:88:bb:dc:61:13:10:b1:8b:
         ce:1f:39:26:a9:2f:ee:f5:4b:aa:e9:6c:66:2d:0a:67:a0:0d:
         7e:98:45:f2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5
NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI2MDIwMTAx
MzQ1M1oXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMTQ2MzEyNUJEQjE4RjNB
NEI5MDgzNDNDQjQ4REJBQkFBODEwN0NENTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM94xKF17GKVuFQZpI526P2f2D0Fy/3NKAnkVZ1eSnSj4kDM4bbY
zVm2CJm7vZcf4EfvO05Q1wv8XRGSPwaOWc9cSPdsyDPN9+Xuzy3gvfx91lV5U1Yh
hYWDbcJgoix3YW1gnN2PO890NZoPbAbnVXx2RKg4Q74WvnE/wHm7gnCaWHkHF6Ht
Qv8175P5jMR7flDmU1wayqKV+Kl/SHgA0nppB8LbAp8RT7iN29o05UAbaF8ooTPA
iOZY83ONhpr79Ie3suBykp3i9ugyBY0SxqZNVk1Tt4bixKoz1X/tehEq/W1+i7ty
gOGryN6lyrC8xBF/mTZng0I0oROMojqXX4kCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQUYxJb2xjzpLkINDy0jbq6qBB81TAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw
Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0
RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NjgvRkdNU1c5c1k4NlM1Q0RROHRJMjZ1cWdRZk5VLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqxUDANBgkqhkiG9w0BAQsFAAOCAQEANKlx3rYk+zNl2+vkZNepz0tYwJ2u
kngdTTCHG1A0TcD2cffRj8NqZeM8JMPBl1TbgH/8yHhevUT/CGdsUTLeiaC5UkB7
IwoyKFVRGVQBs/uDeHhb/ImEqFaEsqTIeP3UX9cE903wdxwZLHsoBN+g6TEoB83m
+GwSDbBH0rgP62nG2sdM/mCZumUhTo78Agk8VoUCKzJVKEKvuDihqmxqf6OkksLB
84YHBlSiLbQdudZtZtXdlte5ehQrqhUOqJ9DlEpUScZeJ5RqTYrULqT3dyOG0cWm
wuDYSTBQp0SPWsnUU4i73GETELGLzh85Jqkv7vVLqulsZi0KZ6ANfphF8g==
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:59 2026 by rpki-client