Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0obS8sUtibGEXfaqY_Yqrkcqfnw.roa
File:                     0obS8sUtibGEXfaqY_Yqrkcqfnw.roa (raw, json)
Hash identifier:          vooVzQVBmizRoUsRJzj10GN9ExW5SWlTutiR30dwyMM=
Subject key identifier:   D2:86:D2:F2:C5:2D:89:B1:84:5D:F6:AA:63:F6:2A:AE:47:2A:7E:7C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       046F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0obS8sUtibGEXfaqY_Yqrkcqfnw.roa
Signing time:             Tue 31 Mar 2026 08:12:31 +0000
ROA not before:           Tue 31 Mar 2026 08:12:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        114.198.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D286D2F2C52D89B1845DF6AA63F62AAE472A7E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:e8:48:fe:16:ea:f7:ce:89:81:22:70:e9:
                    24:1d:ed:8a:95:f2:e7:4e:ad:db:58:47:48:2a:6a:
                    d8:3d:e0:be:26:7a:8a:31:b2:64:fd:fd:67:e1:59:
                    ea:c2:b3:2e:54:f7:90:4d:ad:7c:e6:74:81:02:bc:
                    4b:bd:24:7e:8d:83:70:d3:ae:7d:73:fc:d1:1c:94:
                    b6:87:ed:c5:c7:87:b9:11:c1:06:15:75:8e:b5:b1:
                    e3:1c:b0:a4:72:51:4a:c9:99:e8:66:27:3c:b1:74:
                    5a:51:cc:33:86:95:b7:cd:f6:88:99:32:42:ce:15:
                    ac:0e:e4:01:7c:6f:55:c2:96:3f:6d:f1:d3:c1:c6:
                    5f:52:b2:57:66:5d:64:32:78:dd:d7:3b:59:ce:bc:
                    21:0b:ff:9b:e4:b9:6a:6a:d9:db:b8:95:0b:f9:80:
                    94:72:ec:68:a3:bf:db:12:54:1c:6b:b2:ab:87:30:
                    b7:f8:b4:c6:fb:98:1c:fb:c8:bf:61:01:14:68:4d:
                    96:72:9c:fb:e9:84:ed:b5:10:dd:92:71:10:10:b1:
                    ac:2d:5b:e9:e5:c9:86:18:c3:7f:9b:04:75:42:4e:
                    e8:61:b3:c6:42:dd:a4:1f:af:77:35:46:9a:1b:cd:
                    4c:8a:09:01:10:2b:35:0f:11:da:e3:89:47:33:ad:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:D2:F2:C5:2D:89:B1:84:5D:F6:AA:63:F6:2A:AE:47:2A:7E:7C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0obS8sUtibGEXfaqY_Yqrkcqfnw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:ab:32:ea:3a:40:02:03:12:03:a0:f9:f4:47:3f:31:5b:
         3f:ad:b6:f0:23:59:4f:cb:3f:2c:fe:af:29:91:cd:cc:d4:a9:
         6b:e7:93:bd:0c:3b:a1:94:97:3a:cb:b2:93:f1:5b:41:3f:df:
         7e:40:69:66:4d:fb:96:e6:7f:86:ed:80:bf:f8:c5:2e:ad:5b:
         08:9e:93:c8:61:96:db:d2:16:d8:22:e4:57:69:f0:c9:6f:79:
         b1:b6:61:cc:77:79:b8:cb:6b:2d:61:d3:05:95:b0:4e:32:d9:
         9f:6e:f4:ae:c1:41:b0:0d:9b:ea:e1:c6:3e:cf:52:3c:1f:11:
         e7:62:ba:b1:90:90:d6:26:16:2f:e6:e1:fa:f4:41:c7:18:b0:
         f4:d8:f8:6a:50:fe:a5:e3:a4:ab:d2:d6:6f:e5:e4:03:5d:8e:
         c7:b9:d2:d5:2b:ec:cf:84:1c:ec:e5:58:77:e7:62:58:49:a3:
         19:41:29:17:ec:4d:8b:e2:b8:f5:13:a7:2f:f9:de:2e:74:7c:
         77:3a:67:53:31:7d:db:28:51:81:90:a3:dd:a0:1a:6f:89:b5:
         14:58:6f:82:fb:0b:97:01:9b:94:ce:77:66:c6:4d:fb:99:b0:
         b8:f0:c1:1c:54:87:32:05:bd:93:98:12:64:92:a5:c7:d3:d7:
         5d:9c:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:54 2026 by rpki-client