Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20282/wBxfo3iV3In9PbJya93j9HgnC9Q.roa
File:                     wBxfo3iV3In9PbJya93j9HgnC9Q.roa (raw, json)
Hash identifier:          dHwK1rN1gU7oXWDG7alvADswMJzxQwsDATp4yKZeBWA=
Subject key identifier:   C0:1C:5F:A3:78:95:DC:89:FD:3D:B2:72:6B:DD:E3:F4:78:27:0B:D4
Certificate issuer:       /CN=F9FA7E72F2D4F8712A085C966F6AFD0F839735DD
Certificate serial:       06
Authority key identifier: F9:FA:7E:72:F2:D4:F8:71:2A:08:5C:96:6F:6A:FD:0F:83:97:35:DD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-fp-cvLU-HEqCFyWb2r9D4OXNd0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/wBxfo3iV3In9PbJya93j9HgnC9Q.roa
Signing time:             Tue 31 Mar 2026 08:47:50 +0000
ROA not before:           Tue 31 Mar 2026 08:47:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152875
IP address blocks:        211.128.128.0/18 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/-fp-cvLU-HEqCFyWb2r9D4OXNd0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/-fp-cvLU-HEqCFyWb2r9D4OXNd0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-fp-cvLU-HEqCFyWb2r9D4OXNd0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FA7E72F2D4F8712A085C966F6AFD0F839735DD
        Validity
            Not Before: Mar 31 08:47:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C01C5FA37895DC89FD3DB2726BDDE3F478270BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:2f:d9:77:eb:d6:9c:c6:7e:bb:2b:c4:89:
                    1c:fb:bb:bc:a3:a1:d2:ea:30:81:29:fd:63:9e:46:
                    26:99:fd:30:a5:90:84:7b:c0:8b:e6:d8:7e:11:71:
                    d3:6f:13:3d:b6:ed:9b:fb:e2:9a:f0:85:6b:7b:7d:
                    85:fd:aa:22:20:5d:8b:6d:be:e4:26:cc:2a:d2:dd:
                    47:2a:a8:76:c5:67:dc:af:2f:de:b0:78:7c:d4:cf:
                    9b:47:f3:4c:2c:57:e1:c8:57:d3:c9:a3:c8:99:62:
                    15:90:d7:45:39:67:c7:15:76:fa:3a:9c:8d:0a:4e:
                    30:4c:01:44:71:65:cd:87:44:19:50:3f:ed:a3:47:
                    8e:77:87:7e:ed:ab:93:77:2d:b2:c9:0a:ea:dc:02:
                    cf:82:27:61:c3:be:a3:f6:86:b3:43:e8:b8:0c:6b:
                    07:20:66:c8:97:9b:6d:3f:54:cb:3b:5c:f4:d9:11:
                    cf:bc:df:32:cd:44:14:f4:7e:d5:c7:af:97:ec:b1:
                    cc:92:6e:57:f2:d4:a1:37:9e:83:14:93:bc:26:72:
                    c7:08:71:b4:73:0f:3b:0d:d4:ff:62:a8:a4:20:a1:
                    97:cf:c0:09:db:fa:91:a9:08:f9:e4:9c:c9:f2:4c:
                    c3:02:d4:5f:79:a2:4a:48:7b:64:74:a1:87:70:c8:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1C:5F:A3:78:95:DC:89:FD:3D:B2:72:6B:DD:E3:F4:78:27:0B:D4
            X509v3 Authority Key Identifier:
                keyid:F9:FA:7E:72:F2:D4:F8:71:2A:08:5C:96:6F:6A:FD:0F:83:97:35:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/-fp-cvLU-HEqCFyWb2r9D4OXNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-fp-cvLU-HEqCFyWb2r9D4OXNd0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/wBxfo3iV3In9PbJya93j9HgnC9Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.128.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:99:c5:a6:a2:f9:e8:ae:2f:51:e2:6c:b4:6b:7d:e3:e8:
         45:d9:6e:46:44:f1:63:6a:eb:8a:45:2c:fb:2b:c8:af:95:58:
         4f:7a:58:67:67:da:03:7c:4f:a3:3f:00:cf:78:24:ab:54:f4:
         e4:17:77:4e:35:21:4f:79:dc:e9:23:e0:9d:b6:c0:38:4f:05:
         25:50:9a:26:ea:4c:cc:a6:5e:47:19:d5:6f:31:d7:f8:cd:f8:
         f9:9f:c5:66:fc:44:96:4e:cf:01:1b:09:fc:d2:e8:bf:38:02:
         ac:ea:fd:04:64:fa:dd:fb:ec:c4:51:41:85:4b:60:1a:c6:91:
         83:0e:76:88:40:87:7a:27:77:d4:91:96:1e:55:81:80:fc:20:
         42:62:5c:75:40:f6:d1:b8:9a:0e:68:0b:b8:e1:5c:8e:11:cc:
         d9:b4:34:a6:08:82:19:5f:37:f9:89:f9:4d:81:20:e7:aa:fd:
         24:ca:24:76:17:2e:d5:98:65:d0:2e:e6:45:04:3b:cb:e7:27:
         bd:83:c2:eb:d2:15:ce:53:30:30:af:05:e1:73:99:80:06:98:
         94:78:86:c4:6c:2f:ac:d9:12:60:db:19:f7:09:34:03:ec:82:
         95:86:07:92:e1:4e:36:ff:da:90:b8:3a:98:b6:db:2e:3d:5a:
         92:f7:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:11 2026 by rpki-client