Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3tUF-sgizES6K9MMFcX41Cdr-Z0.roa
File:                     3tUF-sgizES6K9MMFcX41Cdr-Z0.roa (raw, json)
Hash identifier:          ziNEBKKi2gpfzrcp466FczZYUiuscB5ER/cjq7ua5i0=
Subject key identifier:   DE:D5:05:FA:C8:22:CC:44:BA:2B:D3:0C:15:C5:F8:D4:27:6B:F9:9D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0497
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3tUF-sgizES6K9MMFcX41Cdr-Z0.roa
Signing time:             Tue 31 Mar 2026 08:12:50 +0000
ROA not before:           Tue 31 Mar 2026 08:12:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        219.113.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DED505FAC822CC44BA2BD30C15C5F8D4276BF99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:5a:43:ea:82:83:bc:60:9f:fa:7c:78:90:
                    f9:0f:d8:04:ad:c6:0c:84:a5:ad:80:05:16:f7:3f:
                    c1:8b:4f:db:b0:d3:60:80:0e:10:69:41:72:b0:ff:
                    9a:4a:40:10:10:6f:b9:c2:21:3a:51:d7:fb:3d:97:
                    01:c4:ee:6e:db:f7:15:59:76:c3:2c:85:4e:6e:2d:
                    15:06:e2:cc:ba:40:ab:37:81:eb:06:b8:0f:94:d4:
                    2f:01:71:27:6a:0c:0c:fe:79:74:4a:4b:40:3e:f2:
                    95:c6:e7:0b:0f:3d:1f:b6:24:f4:1a:6f:78:ef:0d:
                    c5:d0:f9:e0:7a:b1:e1:fa:49:6f:89:1c:17:3e:3d:
                    ce:31:2c:10:40:85:29:b2:cf:b0:a6:9d:30:41:7d:
                    56:0d:2c:c0:ae:ba:c9:31:10:da:ba:66:11:92:83:
                    48:b0:3d:01:29:b3:65:7b:b7:d8:ef:8f:a7:aa:7e:
                    87:cc:0b:7e:07:91:4a:39:ab:80:9c:e4:5b:02:2e:
                    75:25:f8:84:71:42:03:da:10:4d:93:2c:13:2d:03:
                    37:02:04:e5:6a:49:55:8a:67:82:b1:a8:af:f7:2e:
                    e3:7a:9b:9c:ce:dd:fa:3e:64:5c:ae:d6:bf:12:4a:
                    63:16:74:9c:09:56:cb:a7:b7:1b:4d:d0:4b:a2:6e:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D5:05:FA:C8:22:CC:44:BA:2B:D3:0C:15:C5:F8:D4:27:6B:F9:9D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3tUF-sgizES6K9MMFcX41Cdr-Z0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:b8:e4:ca:3d:6d:6a:a3:68:3b:4d:ea:26:02:bc:f2:68:21:
         4d:d5:b8:24:c6:ac:16:9c:1a:79:4f:a9:da:61:f1:38:15:8c:
         84:d2:72:1a:bc:ad:81:5f:d1:b8:43:78:02:38:7b:d4:6a:7f:
         b9:59:17:ca:32:e2:66:a6:4e:21:49:fd:3c:98:58:72:3b:01:
         e7:55:4e:1e:a4:8f:70:ab:0b:67:cd:39:ff:d1:f0:66:63:59:
         52:29:db:7d:83:28:4a:5d:9d:06:e5:b7:af:98:ba:2a:83:c9:
         09:5f:71:a1:ad:bc:6e:19:00:49:f1:bd:12:3b:1a:38:b6:d0:
         56:3f:dd:59:01:27:d8:45:3e:58:a1:9f:e9:4c:4d:41:50:e9:
         53:0a:9e:26:b3:80:b4:ac:a6:aa:08:45:53:27:8e:f6:30:c8:
         26:57:0d:3c:00:28:7a:33:cb:c2:92:3a:20:ef:7f:c6:6c:f2:
         ff:96:d7:9a:0a:89:a2:44:51:71:56:b0:6a:4d:d8:10:09:a6:
         b5:ae:46:86:04:4b:91:ca:57:1d:8c:5e:5d:ff:4c:b7:6a:27:
         ba:d4:e6:66:c7:92:63:e8:19:bf:26:8c:b3:38:49:82:a6:6d:
         63:04:5d:b7:fc:54:17:c0:d0:65:b7:c1:46:4b:ff:22:d6:44:
         86:dc:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:44 2026 by rpki-client