Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/-InJsdF72HTIl6aJXDLgESpr_6s.roa
File:                     -InJsdF72HTIl6aJXDLgESpr_6s.roa (raw, json)
Hash identifier:          Oy2szI7+BVpeoRtrpTK33ngE67ZhuDWHelOblAoMcRE=
Subject key identifier:   F8:89:C9:B1:D1:7B:D8:74:C8:97:A6:89:5C:32:E0:11:2A:6B:FF:AB
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       67
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/-InJsdF72HTIl6aJXDLgESpr_6s.roa
Signing time:             Tue 31 Mar 2026 07:47:15 +0000
ROA not before:           Tue 31 Mar 2026 07:47:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17948
IP address blocks:        203.145.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Mar 31 07:47:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F889C9B1D17BD874C897A6895C32E0112A6BFFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:12:59:29:4e:3c:14:ca:75:b4:f3:52:ab:
                    70:ee:ec:b8:72:24:79:aa:1c:ce:3e:d6:f6:f3:2b:
                    15:a4:9a:e6:34:cb:ab:a1:d0:5b:01:a2:6e:a3:27:
                    3f:1a:8d:29:36:95:e1:a3:d0:e2:4c:92:65:ea:fe:
                    ca:eb:1b:75:12:d7:f7:e9:60:fb:ae:16:9d:02:fe:
                    56:88:5d:3a:fe:07:62:e3:6b:29:76:a3:16:f4:cf:
                    55:69:f0:47:e3:8e:8d:02:b2:f5:af:ca:8e:c2:7c:
                    7f:84:2b:a1:37:d7:74:fc:b9:d8:5f:24:70:49:19:
                    8a:3b:87:ec:36:36:9d:cd:db:03:f8:83:74:43:ee:
                    c9:a3:81:58:2e:5d:93:1d:5a:67:59:47:91:91:1a:
                    8b:3d:1f:1e:d4:e9:3b:fb:9e:a7:31:ff:67:09:e5:
                    bb:90:47:fb:ef:71:8f:d6:5d:3c:7d:a0:34:2a:f7:
                    e4:ed:1c:d6:db:8a:06:1f:d9:44:5b:5b:76:4a:af:
                    85:ef:00:e3:63:8b:cb:50:8c:0c:e1:24:91:9e:7c:
                    e1:99:7d:4a:35:ed:f8:4c:2a:9b:43:fc:31:b7:b0:
                    17:d7:a8:db:e2:f4:65:d0:96:86:79:d9:c0:e3:02:
                    49:aa:b5:8c:53:e1:08:76:ac:6d:52:5a:46:43:ce:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:89:C9:B1:D1:7B:D8:74:C8:97:A6:89:5C:32:E0:11:2A:6B:FF:AB
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/-InJsdF72HTIl6aJXDLgESpr_6s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:e3:82:1f:94:b2:dd:74:1c:76:b5:e1:ca:a2:a2:aa:43:
         89:97:f1:05:bb:81:3b:d6:9f:c8:14:8a:80:bb:59:d8:6d:10:
         35:5a:1c:39:14:01:f1:36:20:e0:21:a1:94:0a:b9:c2:f5:c9:
         60:f6:71:61:56:df:d2:10:52:09:1a:11:b3:41:5e:3e:44:d2:
         0d:73:1b:6e:7b:68:f5:c6:46:a4:40:d8:f1:74:f9:0a:87:9c:
         4b:c6:4d:0c:72:45:e6:4a:75:22:9a:be:c4:26:43:a7:a1:47:
         9e:75:c4:40:b9:55:8c:4d:e8:c2:9c:df:fc:7d:3b:87:6d:d6:
         f0:b2:3d:a9:f0:b9:34:b2:12:00:c4:87:0f:39:f8:2d:d2:3d:
         0d:4b:28:6c:bb:a6:bb:d4:00:4e:c9:d0:aa:b9:61:f6:db:f3:
         af:ee:1e:13:a5:d6:38:7b:53:94:19:86:fe:63:42:d6:e9:06:
         32:4b:2f:d7:4f:39:f9:53:d6:25:6b:d7:31:39:5e:77:13:f2:
         72:f2:23:36:b8:19:8a:ab:dc:d7:b3:be:10:9b:5a:99:3c:e7:
         61:d0:3a:d4:88:fc:64:d3:7f:dc:c6:e2:e4:9f:6a:f5:5b:53:
         b6:b5:d6:0c:d5:28:3d:87:40:a8:ab:9c:21:cc:33:77:2e:3e:
         20:91:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client