Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/sfBQBf6XLM0uIkFvGybjZvZFuck.roa
File:                     sfBQBf6XLM0uIkFvGybjZvZFuck.roa (raw, json)
Hash identifier:          lMhAkS/kjOtszbyvkLb8AwIlXAJq4YGYHU/p4uVWXec=
Subject key identifier:   B1:F0:50:05:FE:97:2C:CD:2E:22:41:6F:1B:26:E3:66:F6:45:B9:C9
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       36
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/sfBQBf6XLM0uIkFvGybjZvZFuck.roa
Signing time:             Tue 03 Mar 2026 08:03:00 +0000
ROA not before:           Tue 03 Mar 2026 08:03:00 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18283
IP address blocks:        133.117.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: Mar  3 08:03:00 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B1F05005FE972CCD2E22416F1B26E366F645B9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:5e:b3:10:86:0e:b6:f0:1a:26:d1:b8:9b:
                    44:99:f3:9d:ee:ca:91:53:bf:78:89:75:e4:b4:e9:
                    57:7e:b5:cb:a6:05:01:e2:e1:d6:30:df:b5:c6:15:
                    ce:44:b1:c0:bc:c1:06:b3:98:7b:f0:bd:dd:5f:04:
                    ff:04:41:f1:99:7a:1f:11:85:7a:b2:da:76:54:6b:
                    0d:6f:09:e5:6d:57:c5:dc:b2:07:58:85:21:6a:78:
                    85:87:3d:fc:94:fb:85:11:ea:8e:22:a3:40:31:c4:
                    e4:23:92:cd:5a:22:02:00:e3:57:5b:39:a7:a7:96:
                    c7:a8:87:f8:7b:4f:a6:c7:f5:46:0a:8e:09:8c:e8:
                    84:d8:33:24:50:a0:46:b9:b4:91:58:b1:ad:cb:25:
                    48:b4:8c:4a:9b:64:8f:9a:06:f6:a9:95:8c:4f:fe:
                    ac:b1:18:64:d9:82:10:04:b0:3c:58:50:fe:fc:e4:
                    aa:0b:8f:bd:27:98:9b:e6:0d:df:58:e9:11:2b:9a:
                    d9:97:6a:4a:74:97:0f:78:ce:27:1e:7c:76:5a:ae:
                    c1:8b:0c:45:af:49:55:87:42:bd:26:18:a9:79:ad:
                    08:c7:f8:2d:d0:ac:ef:5a:64:21:73:7b:bd:3f:01:
                    9b:75:c2:8a:aa:64:38:31:06:be:03:1f:b7:97:6b:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F0:50:05:FE:97:2C:CD:2E:22:41:6F:1B:26:E3:66:F6:45:B9:C9
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/sfBQBf6XLM0uIkFvGybjZvZFuck.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.117.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:34:70:af:19:ab:a3:ff:e4:97:05:80:af:9c:be:a9:f5:f0:
         fc:cd:41:04:36:7c:3e:5f:fd:b8:cb:6e:6c:36:a6:cf:ac:2e:
         d2:fd:a2:49:19:13:4f:2c:75:a1:3b:ee:3b:55:d8:39:b9:30:
         72:6a:7a:0d:7d:d1:22:bb:8c:14:42:81:cc:50:49:73:3a:42:
         7e:50:6b:40:a5:c4:64:80:e4:52:b8:fd:9e:90:ca:4d:d2:f0:
         28:23:3e:51:a5:b0:6f:bc:9c:6b:31:d5:27:9e:58:4b:1d:d3:
         18:04:75:52:8a:4e:26:83:9e:cf:bd:d9:50:05:7f:31:a5:13:
         e4:29:91:bb:29:90:cf:58:ce:cc:5a:05:e1:5b:bb:f8:2e:e3:
         f9:d2:c1:d7:10:de:d6:ec:71:bc:d8:e7:e3:01:03:0c:4a:e1:
         75:50:98:89:65:e1:73:04:f2:32:59:56:85:5c:9d:35:82:49:
         d3:69:1d:5b:fe:df:d5:7d:1d:b2:2c:0f:16:f2:90:a5:9d:da:
         05:14:33:47:b2:c9:69:8b:17:a7:b7:a6:2d:f6:57:c3:cc:05:
         54:f1:56:38:69:a1:38:22:1a:77:9b:7f:ed:1b:8b:61:f3:fd:
         0f:76:b1:79:81:7a:f3:14:cf:3d:a7:88:93:4e:a7:8c:a6:91:
         80:bd:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:34:08 2026 by rpki-client