Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3wxhoOX__HK8Q_4BY-eqMt5dJes.roa
File:                     3wxhoOX__HK8Q_4BY-eqMt5dJes.roa (raw, json)
Hash identifier:          fyXAAXaM0DL4kLZR8O6+qn27ctwOJm4rDR9x+zBBVIQ=
Subject key identifier:   DF:0C:61:A0:E5:FF:FC:72:BC:43:FE:01:63:E7:AA:32:DE:5D:25:EB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03FA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3wxhoOX__HK8Q_4BY-eqMt5dJes.roa
Signing time:             Tue 31 Mar 2026 08:11:33 +0000
ROA not before:           Tue 31 Mar 2026 08:11:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        175.103.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF0C61A0E5FFFC72BC43FE0163E7AA32DE5D25EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:1d:9b:7a:4f:98:b8:c5:b1:6b:c8:61:2f:
                    50:e1:ae:64:4c:61:d9:13:de:69:0c:a9:5a:f7:d8:
                    2d:8c:38:3e:d0:4f:ff:74:b1:a3:8d:c8:77:7a:f9:
                    4a:77:38:d8:10:b9:64:28:fb:73:2c:3f:72:a5:78:
                    4c:bd:a1:d7:39:96:4c:39:b5:a7:e3:61:b0:36:2c:
                    df:5f:65:49:a6:58:21:fe:e3:26:94:c0:02:58:ae:
                    e8:57:29:a3:47:55:03:43:87:9b:89:82:ea:f2:1a:
                    45:21:0a:0f:cc:7e:0e:88:7d:bc:39:f6:07:cf:70:
                    fa:60:e1:56:25:1a:d9:ff:19:e9:d1:9f:90:4a:62:
                    3f:78:11:be:68:da:1c:85:34:d2:c8:b7:1e:f5:b2:
                    8f:a8:55:a9:61:0d:52:ce:af:69:61:33:c0:61:6a:
                    36:81:11:93:88:76:03:a3:29:74:5e:35:98:38:9c:
                    9f:98:8f:28:1f:48:b6:72:e6:da:f7:6c:91:c2:6a:
                    a3:0c:67:60:e2:13:81:0a:68:2b:ea:d2:95:c3:15:
                    f6:4c:0e:b4:39:1d:66:f3:d5:91:02:84:a6:c6:58:
                    c7:4a:a3:0b:04:22:cd:30:88:9d:23:bd:1c:3d:39:
                    37:85:ed:9c:8a:6c:d5:87:0e:f8:68:bd:7f:fd:cd:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0C:61:A0:E5:FF:FC:72:BC:43:FE:01:63:E7:AA:32:DE:5D:25:EB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3wxhoOX__HK8Q_4BY-eqMt5dJes.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:27:9e:7c:e6:a0:9f:7c:4a:58:a9:19:d8:02:18:e7:b2:b5:
         a5:ce:5f:45:98:25:ec:75:ca:8b:b4:85:87:d7:f7:0f:0c:66:
         b4:f4:3c:92:da:71:26:a9:28:c5:74:fa:0d:ab:6f:1a:36:a0:
         4a:cf:52:ab:8b:22:c2:5b:79:82:68:ea:47:5b:30:09:77:6f:
         16:dc:50:e9:72:16:14:ef:d0:af:45:53:66:a1:87:e0:f9:ff:
         95:45:b1:15:10:e4:11:ed:7d:89:88:a3:de:11:d1:c3:0e:08:
         1b:91:78:54:1c:9e:d6:40:8b:12:d4:31:be:c9:d2:14:bd:5e:
         e8:39:72:e0:16:8c:90:f5:14:9e:94:d5:a4:d1:d5:d0:25:4a:
         c9:89:52:99:fd:8a:70:a5:26:a6:a9:24:65:a2:66:88:8e:9e:
         f7:23:5d:14:41:d9:dd:a0:bb:85:42:ec:77:00:0b:87:88:b6:
         b1:16:ae:61:43:d3:b3:ea:d4:f0:1a:49:ce:e4:28:21:91:29:
         36:f1:54:14:12:d2:7b:07:87:5a:85:41:37:67:97:18:30:b9:
         b8:d4:af:92:d1:1a:f2:51:8c:c6:fc:4f:91:67:63:d6:31:5b:
         6b:ee:40:48:9f:27:26:b7:43:94:eb:32:f5:ad:b7:e5:e6:54:
         9d:08:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:07 2026 by rpki-client