Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1gJhfKIjQ8uVbv422zPbUUvkafg.roa
File:                     1gJhfKIjQ8uVbv422zPbUUvkafg.roa (raw, json)
Hash identifier:          0sMlVr0krQEqn8vf5G0nifoFlkW8WzKdpHMSWDg6K2A=
Subject key identifier:   D6:02:61:7C:A2:23:43:CB:95:6E:FE:36:DB:33:DB:51:4B:E4:69:F8
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0486
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1gJhfKIjQ8uVbv422zPbUUvkafg.roa
Signing time:             Tue 31 Mar 2026 08:12:42 +0000
ROA not before:           Tue 31 Mar 2026 08:12:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        202.178.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D602617CA22343CB956EFE36DB33DB514BE469F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:8a:20:c3:d9:a4:17:28:d5:98:4e:ab:bb:
                    10:d5:fa:15:ca:59:d4:4d:7e:eb:4b:5e:7d:ad:40:
                    cd:58:7e:03:fa:ef:82:16:ed:52:5d:4e:b5:e8:2f:
                    0f:a2:21:24:1e:bb:f0:cb:80:ce:4d:7c:79:97:01:
                    13:c6:eb:91:9d:9d:5f:86:6c:0e:a2:fe:e9:62:12:
                    b7:6e:cd:cb:15:00:3c:2f:51:66:34:80:a0:34:37:
                    c9:e8:34:e1:52:ea:de:97:7e:94:54:6f:af:46:f1:
                    91:79:cf:41:60:60:34:8f:4b:30:f1:29:db:78:84:
                    95:23:25:bd:b0:f5:c1:a4:fa:9f:10:c1:53:25:a8:
                    8a:ac:a8:32:54:36:d4:68:a0:6b:55:b8:14:13:e5:
                    6c:bc:c9:b9:02:91:f0:e8:dc:dc:55:4a:28:d7:0c:
                    66:f1:32:e7:40:66:4e:0d:71:40:0c:82:b6:78:87:
                    2d:b3:89:fb:a2:16:4b:13:95:76:4d:63:3b:dd:f5:
                    05:5e:26:31:59:30:09:75:65:07:57:43:4d:88:ae:
                    6e:d6:dc:17:a1:b9:42:96:7b:f0:74:30:c2:d1:e5:
                    5d:c2:88:54:53:ee:95:73:f4:7e:89:7d:38:f8:03:
                    c1:31:56:62:81:9f:11:b0:27:25:82:8b:6a:59:89:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:02:61:7C:A2:23:43:CB:95:6E:FE:36:DB:33:DB:51:4B:E4:69:F8
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1gJhfKIjQ8uVbv422zPbUUvkafg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.178.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:22:7a:29:84:e3:f4:6c:0c:9f:9d:ff:f3:07:32:67:34:
         42:1d:e9:76:5e:ca:38:fc:b1:3f:d2:75:10:f8:a9:39:4b:43:
         81:84:e6:9f:69:7b:28:9b:0a:b1:d1:c4:e5:8f:81:80:d7:50:
         78:ad:98:90:25:a2:84:c9:0b:46:fb:3d:13:0b:c0:9f:60:db:
         8d:be:0d:90:05:48:45:d6:64:16:85:a7:2a:76:04:3e:b8:88:
         87:5d:a3:de:01:ee:0a:e9:18:69:9d:69:c2:bf:a4:df:f6:4f:
         47:c1:34:12:f9:56:b8:1a:c0:bb:78:a9:bf:56:87:af:32:ed:
         60:b8:a6:31:ae:6b:6a:8b:0e:5c:62:e2:a1:86:01:c4:80:b9:
         96:8d:37:9c:4c:8a:7b:09:4e:c1:db:47:55:b8:d2:a6:ea:d6:
         d8:33:81:22:9d:47:d2:e7:f5:28:00:75:e4:1c:ec:25:63:12:
         af:fb:f8:f8:a2:45:cc:82:76:e7:69:7f:21:ae:12:f7:94:a6:
         16:bb:90:9d:35:cf:21:7b:92:70:ed:12:1c:09:88:d7:de:ed:
         12:68:de:ff:a3:50:9b:8d:9e:44:96:ab:4a:c5:01:a1:0d:a9:
         13:cd:c8:e1:b8:d8:5e:67:59:5d:08:e5:4d:5d:f3:3c:fd:ff:
         71:48:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:43:53 2026 by rpki-client