Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XnFSg_YJJctXHQZOg8884luK7M4.roa
File:                     XnFSg_YJJctXHQZOg8884luK7M4.roa (raw, json)
Hash identifier:          OID3ljebJ3tE1nbHNAjsEouvkPXpHgwvnOmFwWfT7jU=
Subject key identifier:   5E:71:52:83:F6:09:25:CB:57:1D:06:4E:83:CF:3C:E2:5B:8A:EC:CE
Certificate issuer:       /CN=FD640F920FB630F59CE577B5640918AD72D8E933
Certificate serial:       02
Authority key identifier: FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XnFSg_YJJctXHQZOg8884luK7M4.roa
Signing time:             Wed 04 Nov 2026 03:20:59 +0000
ROA not before:           Wed 04 Nov 2026 03:20:59 +0000
ROA not after:            Thu 04 Nov 2027 03:08:29 +0000
asID:                     58791
IP address blocks:        157.7.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD640F920FB630F59CE577B5640918AD72D8E933
        Validity
            Not Before: Nov  4 03:20:59 2026 GMT
            Not After : Nov  4 03:08:29 2027 GMT
        Subject: CN=5E715283F60925CB571D064E83CF3CE25B8AECCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8f:50:f9:b4:5e:17:10:1b:8a:e4:40:3a:5b:
                    67:f9:2f:1e:e3:06:23:bb:66:4e:ce:71:b2:4b:4e:
                    81:f0:21:5c:54:1e:7d:2f:9a:56:65:80:d4:18:6a:
                    da:7b:67:2c:b3:9f:4b:e2:7d:ae:72:be:0f:48:65:
                    a5:33:2a:19:f1:63:6d:69:6f:7f:9c:00:c4:bf:58:
                    85:01:ca:77:9a:a7:b4:65:9a:c0:52:44:2f:ee:19:
                    59:61:ae:79:00:54:88:2f:02:fc:a3:84:f3:b7:02:
                    66:88:54:26:12:cf:e2:20:91:6b:39:1b:22:59:3f:
                    0c:8e:bd:2e:d1:c9:43:6e:f1:9e:2f:c0:33:6f:ab:
                    b6:93:e6:0b:f6:61:f7:c5:eb:c1:47:ed:34:87:d3:
                    57:86:45:6e:6e:6d:75:30:c1:a2:ea:f8:69:92:d4:
                    40:5e:29:a5:c8:aa:8c:43:90:70:28:fd:90:2d:7c:
                    7d:a8:a8:99:d0:c7:0a:60:9f:84:46:30:d5:28:a2:
                    c8:3d:3c:0e:3c:13:33:f9:1d:ca:8a:16:a2:6b:55:
                    e7:21:61:a9:b5:e9:c4:a5:3f:ef:55:54:d3:0b:ee:
                    b6:39:07:82:cf:33:cd:5a:04:ee:74:f7:43:c4:49:
                    83:e1:a1:a3:62:72:b4:6c:01:d0:25:c5:99:73:06:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:52:83:F6:09:25:CB:57:1D:06:4E:83:CF:3C:E2:5B:8A:EC:CE
            X509v3 Authority Key Identifier:
                keyid:FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XnFSg_YJJctXHQZOg8884luK7M4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.7.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:e4:37:63:9f:67:80:2d:f1:97:ba:40:70:57:71:9f:08:7e:
         f6:b0:bc:38:1f:29:ec:d4:c1:4a:07:f4:04:88:29:6f:02:0e:
         9e:1f:c9:b5:fe:13:4d:3a:36:14:9e:ba:74:cc:5a:b7:5a:87:
         8c:cd:d7:59:8e:55:cd:09:9c:2b:de:63:55:a2:c8:0a:3a:73:
         6a:a6:9b:7b:09:e4:d8:df:4d:01:ef:ce:7b:0b:a8:ad:68:d6:
         1d:dc:c6:6e:30:b3:75:1f:63:96:25:d7:c1:2a:bb:4a:e4:9a:
         82:d9:cd:3b:7e:40:56:83:7b:12:13:f5:e9:a4:50:00:54:d1:
         e2:51:bb:e2:37:ec:a1:a1:32:9f:06:ab:b5:30:79:af:e0:ef:
         87:e6:88:1c:8d:19:3e:10:a4:c6:19:24:83:c4:c2:65:f7:ab:
         f4:69:2e:8f:b0:25:fe:9b:2f:83:fa:0c:db:e7:63:ba:78:66:
         06:cf:c6:e2:af:aa:1a:f6:ad:0f:7e:1a:9a:95:38:28:0a:ee:
         9c:91:03:42:83:f5:25:9a:b5:39:25:78:dc:fe:5d:30:50:3c:
         39:5d:82:af:30:4e:47:34:ea:48:aa:bf:16:60:34:a5:ce:d0:
         5a:41:26:f9:66:e5:d2:67:4e:05:47:93:68:5f:49:16:a5:4e:
         f7:6b:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:04 2026 by rpki-client