Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20168/FjI-5KG5Ri6e9ZQqEYrMuqkS3lg.roa
File:                     FjI-5KG5Ri6e9ZQqEYrMuqkS3lg.roa (raw, json)
Hash identifier:          UObz/EsJ7Rl/GYPbbB2HMRLrSm+DtsxLzvjQFoFHBI4=
Subject key identifier:   16:32:3E:E4:A1:B9:46:2E:9E:F5:94:2A:11:8A:CC:BA:A9:12:DE:58
Certificate issuer:       /CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286
Certificate serial:       2F
Authority key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/FjI-5KG5Ri6e9ZQqEYrMuqkS3lg.roa
Signing time:             Mon 26 Oct 2026 05:10:40 +0000
ROA not before:           Mon 26 Oct 2026 05:10:40 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     146969
IP address blocks:        220.39.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286
        Validity
            Not Before: Oct 26 05:10:40 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=16323EE4A1B9462E9EF5942A118ACCBAA912DE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:35:3e:a0:5a:0e:2f:36:e0:1d:3f:2f:9a:
                    3b:43:6d:0e:ac:d9:d8:db:03:be:13:1a:e4:37:53:
                    65:15:aa:a3:ee:14:b5:97:92:5d:c0:1b:a1:41:73:
                    b6:42:a5:fa:17:24:54:9a:b0:8d:f8:88:12:2c:fe:
                    aa:03:55:74:0f:b1:33:db:64:8f:79:e9:ab:d9:16:
                    e7:d0:a4:8f:c3:d5:68:e3:48:93:cf:4d:33:2f:77:
                    aa:25:a0:84:9b:a9:5c:c1:8d:1e:ed:0d:26:0a:f3:
                    e6:a6:b2:e8:d3:fb:fd:4c:b3:8b:5e:a5:7d:57:76:
                    a8:03:98:46:40:a8:cd:a2:f6:ae:50:09:b8:e5:c0:
                    c4:37:5c:e4:e1:47:e3:98:b9:6f:05:97:e7:e3:38:
                    61:d3:0f:f7:5a:52:55:a6:17:1b:7d:41:bf:d3:05:
                    6f:1f:fe:97:ac:8f:e1:76:56:c7:89:e4:35:59:89:
                    45:7b:80:32:cd:72:d6:9c:dc:0b:e7:cb:31:f1:6a:
                    11:49:5a:4a:60:4e:7e:b2:72:72:9a:3d:a1:22:12:
                    d6:ab:54:4f:92:c1:8e:e2:97:87:13:29:dd:99:c6:
                    93:0b:32:01:81:72:58:a0:85:86:b2:e8:35:62:aa:
                    bb:97:d0:06:1e:55:18:89:da:80:36:4a:f6:8a:de:
                    c5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:32:3E:E4:A1:B9:46:2E:9E:F5:94:2A:11:8A:CC:BA:A9:12:DE:58
            X509v3 Authority Key Identifier:
                keyid:81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/FjI-5KG5Ri6e9ZQqEYrMuqkS3lg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.39.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:87:0e:37:ca:c5:f8:7a:c2:9c:3e:01:c8:08:c1:6f:b4:
         1b:e2:5c:17:8e:2c:70:74:0c:38:83:4c:3c:a2:60:90:96:e6:
         b4:2b:48:8b:30:4a:23:14:39:bb:e9:65:c4:99:93:a5:aa:cc:
         9d:b3:b3:a4:67:e1:05:a1:7e:34:fc:e9:1a:92:c7:0a:e9:a9:
         25:e1:14:45:80:c6:54:2a:af:16:c5:09:d4:b3:c8:a9:08:f2:
         37:d1:e7:cc:99:2a:94:a8:2a:06:e4:bc:90:34:0c:dd:09:de:
         6b:37:07:8d:a3:7a:b9:a6:cc:78:74:83:03:54:c8:36:a5:12:
         a2:e4:21:89:52:f5:fa:a3:bc:36:2b:53:c3:73:aa:da:92:c3:
         8d:e1:c6:9b:4f:52:7f:2b:02:83:02:98:d5:f8:7f:9c:68:b3:
         c8:8d:90:bb:96:d6:4a:f7:77:60:dd:2d:b3:de:9d:71:db:17:
         4b:67:ef:74:ee:ae:3e:7c:a1:83:eb:b7:9f:68:3a:98:4c:db:
         e6:fb:99:3f:f9:66:2c:4c:52:11:01:76:d6:55:d0:59:f4:d1:
         d1:c1:f5:33:8e:5a:74:13:d3:4c:75:dd:0b:e8:cf:3f:35:ef:
         89:e4:19:95:4f:d3:43:47:73:ec:43:61:ea:07:b4:8f:90:96:
         29:eb:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:00:48 2026 by rpki-client