Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20301/P6dH1fe4WEKN6pSpsp5QPFDLl14.roa
File:                     P6dH1fe4WEKN6pSpsp5QPFDLl14.roa (raw, json)
Hash identifier:          CztLwSQefSfg5/cl3Vk8q2iGLlPz3cNX+XG3HJCM93M=
Subject key identifier:   3F:A7:47:D5:F7:B8:58:42:8D:EA:94:A9:B2:9E:50:3C:50:CB:97:5E
Certificate issuer:       /CN=FECE50F315199E743C9BEE35E9077A5A4BF04E3B
Certificate serial:       05
Authority key identifier: FE:CE:50:F3:15:19:9E:74:3C:9B:EE:35:E9:07:7A:5A:4B:F0:4E:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/P6dH1fe4WEKN6pSpsp5QPFDLl14.roa
Signing time:             Mon 20 Jul 2026 04:20:13 +0000
ROA not before:           Mon 20 Jul 2026 04:20:13 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     45691
IP address blocks:        160.236.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECE50F315199E743C9BEE35E9077A5A4BF04E3B
        Validity
            Not Before: Jul 20 04:20:13 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=3FA747D5F7B858428DEA94A9B29E503C50CB975E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:1d:e5:f4:e6:34:e1:aa:e0:a2:cc:b3:9a:
                    48:75:fd:ad:7e:23:3b:f5:7d:cc:f1:38:bc:60:56:
                    6a:b8:4c:d7:ec:48:ba:d1:e2:05:3b:ba:50:0a:8f:
                    ac:ed:87:17:43:e3:60:6e:9c:1a:0b:b7:a0:4f:4c:
                    f8:c6:a5:b6:a6:54:78:39:29:e3:d0:86:00:1a:4f:
                    93:98:c3:a8:2b:e7:73:49:12:e9:87:ab:51:57:95:
                    52:5c:15:5b:37:26:82:28:68:90:73:6e:2a:ae:63:
                    3a:19:13:be:79:96:d2:86:8c:77:97:f9:9a:bd:a0:
                    5b:37:7c:fb:c5:8c:d7:22:33:c5:dd:96:83:63:4c:
                    1b:61:2c:7c:72:01:de:d4:18:b3:54:02:5a:30:be:
                    9c:bd:26:f8:41:26:83:6d:9c:8a:36:69:00:8f:e6:
                    42:fc:01:0b:00:bb:0d:2a:a8:2e:e4:b3:48:b2:cf:
                    c7:6d:fa:f8:bf:ed:59:5d:6c:b9:d2:ea:21:ce:de:
                    86:2c:bb:f8:df:89:f2:f6:ee:8b:27:4c:2a:86:da:
                    e4:6d:66:00:a7:db:25:d5:5c:80:b7:e3:90:d0:98:
                    92:b4:79:95:6a:aa:03:9f:2d:f8:c0:0d:28:3f:d7:
                    ef:17:99:85:ab:f4:00:5e:45:27:1c:e0:12:d5:0a:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:47:D5:F7:B8:58:42:8D:EA:94:A9:B2:9E:50:3C:50:CB:97:5E
            X509v3 Authority Key Identifier:
                keyid:FE:CE:50:F3:15:19:9E:74:3C:9B:EE:35:E9:07:7A:5A:4B:F0:4E:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/P6dH1fe4WEKN6pSpsp5QPFDLl14.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:76:92:57:90:32:fe:5d:af:a9:27:78:77:57:f4:e3:ce:
         90:04:bf:59:f4:39:8b:d3:a8:d8:a3:b2:79:e4:ee:13:3e:65:
         ed:52:34:ad:a8:70:ef:64:b1:30:a1:54:3f:dc:e8:1d:4a:c1:
         2b:35:a2:bc:6b:d0:20:e7:f2:90:67:8e:bb:94:df:a2:a4:7a:
         be:a8:80:0b:3c:c3:b9:40:f7:c1:a8:da:18:af:8a:bf:10:c3:
         0f:8e:93:01:73:5b:cb:1e:4b:71:0e:c7:d7:1e:af:fc:3b:dc:
         a3:6d:44:d8:00:3c:cf:6b:24:4d:a9:5f:eb:a6:37:86:10:b3:
         45:90:d1:da:63:cc:54:16:0f:37:be:65:d2:24:3f:ca:cc:03:
         a9:14:fc:93:e0:93:21:c5:7e:6c:10:5a:e6:2d:46:90:f7:10:
         2b:d4:47:d2:2c:a3:ec:73:59:7d:12:3a:7a:17:84:9a:ec:1b:
         38:0c:3c:e3:b8:3d:b0:19:20:ef:49:94:a2:71:86:37:33:18:
         e5:1a:6e:f8:fb:c6:a2:14:cd:eb:07:04:b1:4d:6c:e2:ca:f2:
         96:79:49:25:ad:9d:0d:41:a5:82:90:76:ca:10:17:4b:67:d1:
         18:24:50:4e:2c:0b:98:54:5d:c7:81:d2:e5:42:77:ee:29:1b:
         37:12:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:39 2026 by rpki-client