Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/41bzumRZahbtHLK4i3V9V771MyA.roa
File:                     41bzumRZahbtHLK4i3V9V771MyA.roa (raw, json)
Hash identifier:          gQ1w2uQuPggffh4TJZWp+jV6nMVrd6MKtXw+ZhDBx6k=
Subject key identifier:   E3:56:F3:BA:64:59:6A:16:ED:1C:B2:B8:8B:75:7D:57:BE:F5:33:20
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       049D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/41bzumRZahbtHLK4i3V9V771MyA.roa
Signing time:             Tue 31 Mar 2026 08:12:52 +0000
ROA not before:           Tue 31 Mar 2026 08:12:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        219.124.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E356F3BA64596A16ED1CB2B88B757D57BEF53320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:2a:e5:8f:a5:28:a3:cc:23:3e:12:7d:60:
                    95:b8:fd:b5:b0:d2:f4:66:5c:40:cc:0d:0a:af:ff:
                    3e:e1:59:03:32:3a:c3:c3:53:54:b2:72:30:da:eb:
                    aa:93:d3:40:a8:13:f6:7d:89:f3:fc:04:5b:fe:9d:
                    1d:08:cd:cb:b5:19:9a:84:5a:fd:f4:94:1c:d6:9b:
                    66:61:91:9d:2b:e9:5a:a8:e8:8b:06:22:db:4a:d4:
                    19:46:97:d7:c4:61:98:54:30:01:6c:4f:2a:9c:52:
                    07:7e:30:d2:f1:93:1b:44:a9:89:62:5d:3c:cd:6f:
                    18:52:27:cd:52:88:d7:01:99:af:69:3e:28:72:84:
                    00:7f:0c:0d:14:56:bb:94:fc:90:64:22:3f:c1:92:
                    b3:5c:22:38:f7:13:78:f9:ba:fb:c5:6b:36:5d:80:
                    6f:be:9a:08:54:c7:50:82:f9:da:56:eb:27:cc:c1:
                    6b:30:2c:4a:6c:2f:d1:4d:54:36:48:6d:9f:89:40:
                    59:b8:c7:0f:f2:2a:2b:23:db:23:67:15:f3:11:7a:
                    5f:d9:61:f6:6c:7b:ec:ad:99:7a:4d:39:16:37:26:
                    6a:f2:03:b6:a3:3a:62:a2:4f:97:51:d6:ce:f5:4b:
                    95:04:b6:a7:3c:96:a2:bf:8e:41:ef:68:0b:ca:c4:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:56:F3:BA:64:59:6A:16:ED:1C:B2:B8:8B:75:7D:57:BE:F5:33:20
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/41bzumRZahbtHLK4i3V9V771MyA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:30:ef:cb:f7:93:58:52:4c:11:75:59:91:9e:68:db:9c:
         b0:b3:7c:bd:5b:bf:10:ad:5b:34:cc:56:74:37:08:51:9c:10:
         34:15:9a:2c:8e:83:cb:fb:41:a3:77:08:96:96:e4:db:ff:eb:
         90:7f:98:44:0d:3f:96:e7:49:12:a2:cc:87:a2:96:16:b2:16:
         80:18:cf:c1:08:5b:cf:2e:27:73:ce:be:f8:51:f9:ad:5b:91:
         5d:f7:90:80:cd:93:74:e7:c9:5e:6a:58:08:ad:1a:b9:8a:1f:
         9c:0e:3f:c9:26:54:6e:e0:e9:be:03:62:88:d6:24:70:06:64:
         09:cb:76:57:84:6c:2a:0d:eb:dd:bd:bf:fa:7f:5c:e2:04:8d:
         83:b4:e8:b4:d3:a6:4a:fe:f5:b1:2e:ca:d9:3a:3b:bb:5d:5e:
         f4:ee:23:2d:dc:56:d4:6a:13:da:96:10:ec:6c:fc:3c:a7:f7:
         4a:72:15:d7:98:60:92:d9:98:5c:74:a4:8b:32:c2:23:63:16:
         52:3e:43:1f:4c:f7:1d:27:72:79:0d:cb:4e:9e:d5:aa:ed:49:
         88:29:7d:f7:bc:5f:a7:5d:f2:b2:79:50:a6:a4:8d:77:0a:b4:
         e5:1c:05:9b:28:3d:22:64:d7:79:7a:75:66:a4:b0:71:68:f8:
         5e:1c:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:39 2026 by rpki-client