Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20301/vP4jW4nUmPAUqsGh71R08-HkKIs.roa
File:                     vP4jW4nUmPAUqsGh71R08-HkKIs.roa (raw, json)
Hash identifier:          lDd0ioJyOQWiOW4EpqcLP5Fc1Uv8yJ6ba5ERFjPxu1A=
Subject key identifier:   BC:FE:23:5B:89:D4:98:F0:14:AA:C1:A1:EF:54:74:F3:E1:E4:28:8B
Certificate issuer:       /CN=FECE50F315199E743C9BEE35E9077A5A4BF04E3B
Certificate serial:       04
Authority key identifier: FE:CE:50:F3:15:19:9E:74:3C:9B:EE:35:E9:07:7A:5A:4B:F0:4E:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/vP4jW4nUmPAUqsGh71R08-HkKIs.roa
Signing time:             Sun 19 Jul 2026 08:59:32 +0000
ROA not before:           Sun 19 Jul 2026 08:59:32 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     49671
IP address blocks:        160.236.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECE50F315199E743C9BEE35E9077A5A4BF04E3B
        Validity
            Not Before: Jul 19 08:59:32 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=BCFE235B89D498F014AAC1A1EF5474F3E1E4288B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:41:69:bb:95:d6:5c:47:34:b5:6f:8d:dc:
                    c0:41:45:25:79:15:1b:e3:64:4e:8e:b6:05:60:56:
                    de:bb:d4:4e:9e:bd:c0:59:15:74:c4:12:39:b8:d7:
                    67:4c:37:3e:51:c1:f8:bc:92:e1:91:ae:98:dc:37:
                    7f:3a:b0:78:75:87:03:83:5e:a1:78:9e:01:f7:7c:
                    07:12:f0:75:0b:8b:a2:f0:de:53:3d:a4:16:77:13:
                    45:4d:53:52:18:f3:07:ce:47:9f:af:9f:16:95:88:
                    f8:a3:fe:a9:77:ae:12:9b:c0:8b:2f:f4:56:8f:c5:
                    05:d7:95:36:a4:cc:f8:50:b9:07:31:61:6b:c7:8a:
                    c1:a9:1a:69:0d:8c:0f:ea:7e:90:cc:3b:b6:76:f9:
                    c3:79:f0:d2:9c:17:7a:5c:bb:fd:b8:5d:4a:a4:06:
                    5a:30:1b:12:a6:d4:ef:d7:fc:f9:16:3e:b1:00:56:
                    61:db:6b:3f:9b:e8:4d:d1:98:6b:97:be:5a:6b:c9:
                    68:a0:26:8d:22:8e:a9:ab:5a:2f:c7:b6:24:85:59:
                    9d:c9:91:63:93:83:59:a4:45:f4:5a:f5:e1:18:ef:
                    8a:8a:2f:98:84:e7:8d:d2:a5:9c:10:c4:b4:d6:19:
                    7a:c8:4f:5d:17:b4:2d:59:35:72:37:5b:48:16:f4:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:23:5B:89:D4:98:F0:14:AA:C1:A1:EF:54:74:F3:E1:E4:28:8B
            X509v3 Authority Key Identifier:
                keyid:FE:CE:50:F3:15:19:9E:74:3C:9B:EE:35:E9:07:7A:5A:4B:F0:4E:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_s5Q8xUZnnQ8m-416Qd6WkvwTjs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20301/vP4jW4nUmPAUqsGh71R08-HkKIs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:84:6a:b2:f1:62:94:08:49:5e:f4:a7:6f:d8:dd:07:68:
         4e:c8:73:b7:6b:31:64:b4:a4:47:30:1b:af:af:c4:22:70:fd:
         b9:94:55:9d:06:62:1b:6e:31:4d:ca:9e:c0:6a:36:3b:9f:e1:
         98:0d:4e:55:9a:e9:22:33:71:22:17:6c:8b:a2:2a:d9:d5:78:
         85:91:e7:54:1c:ad:1c:11:74:4f:a1:6d:86:42:5e:39:59:8b:
         a9:48:93:e8:e0:4a:68:55:b3:ac:87:ed:33:cf:87:2f:80:5f:
         d6:77:e7:07:ea:b2:4b:a9:09:11:8a:4f:b5:39:48:90:45:59:
         0d:40:b8:81:d8:b3:f3:8f:43:bf:a8:9a:94:39:fe:ff:62:7d:
         7f:e2:e2:60:e4:8e:b1:ab:91:d0:6b:03:6b:b4:3c:7d:fb:eb:
         4b:0d:91:13:8e:37:20:d3:c1:64:9f:c9:1b:35:b4:bb:e6:98:
         10:a9:25:28:c0:f8:f4:34:fd:99:a8:eb:c0:15:b7:58:dc:b4:
         1b:20:af:d3:fc:a8:c1:25:5f:7d:46:50:69:2e:ff:e7:8d:7f:
         55:d9:7a:bc:88:01:0d:7a:97:a8:e1:9a:e5:f3:a8:c2:3d:ca:
         62:b4:71:dd:a2:1b:da:b2:c7:43:c6:dc:c7:da:5f:11:92:8f:
         86:96:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:46 2026 by rpki-client