Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/-6UBLo0rpAkrxesx0kYo0GnagHY.roa
File:                     -6UBLo0rpAkrxesx0kYo0GnagHY.roa (raw, json)
Hash identifier:          wVY0wban57BR9CvOgVZ3y5JI8BAJI7KGtIJAQmR3AQw=
Subject key identifier:   FB:A5:01:2E:8D:2B:A4:09:2B:C5:EB:31:D2:46:28:D0:69:DA:80:76
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       5A
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/-6UBLo0rpAkrxesx0kYo0GnagHY.roa
Signing time:             Tue 31 Mar 2026 08:29:35 +0000
ROA not before:           Tue 31 Mar 2026 08:29:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        110.92.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FBA5012E8D2BA4092BC5EB31D24628D069DA8076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:a5:32:12:3c:36:04:4f:80:2b:5d:e9:e5:
                    bc:1a:17:dc:09:09:8e:27:53:c4:2e:64:5f:b9:6e:
                    17:af:a8:04:ae:29:3f:e9:6b:b2:c3:d1:f8:d3:ec:
                    87:9e:9d:18:8a:0b:9c:bb:ef:55:0a:f2:f1:00:5b:
                    c9:2c:de:cc:24:e3:0a:7d:58:6c:5f:30:cf:86:30:
                    d4:c2:21:cb:6b:6e:58:50:ec:a7:03:7c:3c:09:f2:
                    89:ee:68:c6:c0:b0:bb:b4:d9:c2:64:25:d6:b3:0a:
                    d0:d2:dc:37:7a:54:b8:78:37:b1:35:00:d6:28:e2:
                    a6:36:8b:6c:25:8a:64:29:10:cf:e2:55:58:d1:d5:
                    e8:ec:13:a8:1f:f2:91:70:8e:ac:41:3a:26:e0:a1:
                    04:cb:2f:34:08:b2:75:2d:b9:84:cb:18:60:4e:8e:
                    f1:cb:85:e1:ec:91:4c:20:11:9a:99:3a:57:3d:65:
                    10:fa:8a:93:b9:8c:f3:3b:97:fa:61:21:00:ef:f1:
                    48:75:41:ed:9a:37:d6:ca:6b:2c:13:36:27:f7:51:
                    98:e4:a0:9a:c5:55:a9:6e:35:df:90:73:96:50:e0:
                    eb:60:f9:13:2b:b2:82:2c:ab:fe:bb:11:0d:2b:a1:
                    e3:ad:28:52:44:9d:7f:6b:ea:ff:8e:f2:ed:e1:07:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A5:01:2E:8D:2B:A4:09:2B:C5:EB:31:D2:46:28:D0:69:DA:80:76
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/-6UBLo0rpAkrxesx0kYo0GnagHY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:63:4e:5f:54:eb:e8:48:cb:6c:24:ea:00:a2:92:78:d9:61:
         bf:76:bf:f2:2c:2a:24:b6:10:e7:9b:91:d7:cf:b9:65:12:d6:
         4f:e4:89:ed:68:f9:50:fa:ec:5d:5a:c0:7e:4a:d6:31:46:84:
         0f:c3:9c:f3:d6:9b:b4:71:fa:ab:79:20:7a:04:25:f1:22:c2:
         4e:3e:1d:ad:cb:df:70:33:8a:2c:bd:c1:78:3a:5e:7e:56:83:
         04:81:aa:24:e0:aa:09:58:2b:1f:c2:f3:2b:91:fb:eb:b5:39:
         f8:30:62:87:fe:ca:87:9f:c2:b9:d2:b1:ee:7f:e5:84:b2:cc:
         c1:21:30:98:bb:36:65:44:06:ea:af:8a:a4:26:3b:fc:9e:f9:
         76:61:7c:d7:93:25:4f:4c:0f:7c:4c:29:4b:a4:5e:c5:1b:e5:
         b3:9a:f7:03:57:66:8d:0e:31:b9:62:7b:ec:de:9f:26:d2:d0:
         21:36:c2:24:15:2e:21:98:3d:c1:88:06:48:1b:74:e8:04:97:
         f8:a3:bf:f6:8d:2a:52:21:af:a2:e5:26:7e:ad:53:d9:46:11:
         ec:4a:7d:22:81:2b:08:7c:be:23:25:0f:97:81:43:64:5a:dd:
         47:6d:44:a3:ff:04:b7:18:a3:ed:03:c4:8a:0e:27:f4:6b:f6:
         e0:9b:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:24 2026 by rpki-client