Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa
File:                     1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa (raw, json)
Hash identifier:          kBrEBw36e2U4pYgWfkltZqdycUHf4HGRQKfRcURiK4w=
Subject key identifier:   D5:2A:6C:41:C1:41:DA:63:8E:F8:E1:A0:71:C1:32:29:0D:63:73:9A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0408
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa
Signing time:             Tue 31 Mar 2026 08:11:39 +0000
ROA not before:           Tue 31 Mar 2026 08:11:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18134
IP address blocks:        111.125.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D52A6C41C141DA638EF8E1A071C132290D63739A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ec:e7:a8:bc:b8:33:67:ff:cd:16:ba:87:85:
                    b5:56:08:b7:ac:48:e1:50:1c:b1:40:00:06:58:be:
                    df:b2:26:13:6d:77:7a:4c:af:0b:53:0f:2b:6f:f6:
                    97:51:7a:6c:d8:42:05:58:a7:ba:a6:cc:09:59:95:
                    4b:82:6f:93:d0:38:23:9b:71:f0:09:8a:0c:df:68:
                    ff:90:f9:f7:b8:57:29:29:ba:66:1a:c5:eb:c1:e5:
                    0c:95:09:f2:ee:05:5c:7e:f7:14:70:ff:00:61:ee:
                    75:47:30:25:ca:1e:29:6c:ce:37:2b:07:1c:cd:a9:
                    d0:a6:fe:96:c6:56:da:a7:bd:1c:4f:d2:d6:07:83:
                    2d:c4:38:33:fd:a4:40:6e:1c:21:ae:e2:93:8f:5f:
                    f1:fe:91:b4:f8:b6:4c:9c:cc:5f:da:ba:46:b9:01:
                    14:90:7d:4b:9a:f1:ff:ca:68:dd:c0:56:40:b0:8c:
                    5c:29:51:0a:54:e5:9d:06:ae:8b:56:14:c0:21:78:
                    06:01:65:1f:c0:47:f1:07:6a:b8:5b:11:7f:d1:03:
                    04:e5:6d:35:c1:bf:b3:24:b6:85:9b:cb:1d:f1:fe:
                    5a:86:b3:c7:84:11:0d:bc:a8:6f:12:5b:2c:6e:c8:
                    54:42:79:8f:a2:56:e9:94:b9:16:4d:a9:6b:ec:3b:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2A:6C:41:C1:41:DA:63:8E:F8:E1:A0:71:C1:32:29:0D:63:73:9A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:ef:54:9f:46:57:09:b7:26:3c:d2:47:b2:92:99:05:27:ba:
         4d:69:9a:0f:6e:c6:1c:a3:36:9c:1d:9d:d1:fb:22:bb:53:19:
         b1:a4:02:ee:3f:d2:22:c6:1e:c6:8e:08:c8:3c:50:26:90:86:
         7a:f3:d8:26:64:24:b6:c4:27:d1:45:fd:95:0a:fd:bf:dd:7f:
         31:a0:32:d9:2d:e1:d0:83:12:73:2c:c1:8e:8e:6d:2f:f8:cb:
         f2:98:3e:2c:fd:c4:49:81:7c:47:fe:dc:1b:39:8f:cf:f2:64:
         7a:ff:e9:4d:20:b8:bb:7d:b8:63:6c:3c:1a:54:4e:6d:65:d5:
         96:00:81:0c:db:54:6b:0a:2b:64:52:be:82:3b:e2:73:d5:3e:
         72:36:68:bf:ac:dc:53:62:3d:da:ef:a6:a5:6c:8a:99:7c:e6:
         9b:cb:14:46:2a:85:03:ec:34:1f:31:e4:83:99:6b:eb:13:a3:
         36:3e:52:e1:68:81:2a:13:80:92:7e:b1:69:8d:0c:00:35:b6:
         4d:56:7c:bf:8b:17:a5:cd:d0:31:38:ee:21:92:94:1d:82:b3:
         d0:05:0e:e8:b7:00:01:62:71:79:5b:70:41:92:ae:be:c3:88:
         08:66:40:5a:4a:9c:a8:8c:3a:d5:9d:e5:cf:9e:c3:e4:2b:57:
         3d:e4:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:46 2026 by rpki-client