Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/5FVNqH1N1Eme0G4vMhl4ebjZ6Uc.roa
File:                     5FVNqH1N1Eme0G4vMhl4ebjZ6Uc.roa (raw, json)
Hash identifier:          BMkoWdc4kfuA+Gvi1tOP28VXltXm9fx4sdxXdOMma2c=
Subject key identifier:   E4:55:4D:A8:7D:4D:D4:49:9E:D0:6E:2F:32:19:78:79:B8:D9:E9:47
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       040F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5FVNqH1N1Eme0G4vMhl4ebjZ6Uc.roa
Signing time:             Tue 31 Mar 2026 08:11:43 +0000
ROA not before:           Tue 31 Mar 2026 08:11:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        103.192.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039 (0x40f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E4554DA87D4DD4499ED06E2F32197879B8D9E947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:f1:35:91:76:69:6e:42:7c:8b:af:ee:24:
                    a4:bc:99:38:be:cf:82:8b:a8:4c:1f:c1:a1:d3:be:
                    a4:78:5a:77:ba:75:7b:c7:69:92:a9:e3:3b:e6:30:
                    d9:93:af:f9:9e:ff:4a:98:5a:36:48:98:32:e4:ee:
                    23:44:1f:b4:3e:64:98:03:bb:f6:44:e4:59:b0:34:
                    4d:be:60:a6:9f:d0:31:a1:4a:06:12:85:b6:5a:f8:
                    ac:d3:5f:6f:53:7e:15:ea:db:33:d1:52:60:44:8a:
                    70:3f:c2:a4:d1:24:2e:5b:f2:f0:40:1a:d4:df:4a:
                    d0:7e:4a:93:82:81:86:54:e6:b2:0c:60:35:bb:d5:
                    c8:7e:90:42:09:29:7e:23:1a:7a:64:ae:2c:89:68:
                    ac:56:0d:10:5c:4d:fd:9e:f8:c1:1f:1c:fb:d1:62:
                    10:1b:31:04:21:3b:24:4e:68:92:c9:b2:9d:ee:ba:
                    ba:06:0f:11:1d:c0:23:d7:14:48:66:98:4c:15:ab:
                    05:f3:06:0b:d2:bc:33:16:08:37:6a:a0:47:a6:65:
                    8d:a7:87:2d:0f:ad:50:e8:a3:ca:73:b3:7c:56:fe:
                    d1:be:2e:71:03:57:dc:05:09:d9:4b:7d:df:db:db:
                    ce:be:16:21:1d:bc:de:bb:f4:09:25:e5:73:97:ec:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:4D:A8:7D:4D:D4:49:9E:D0:6E:2F:32:19:78:79:B8:D9:E9:47
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5FVNqH1N1Eme0G4vMhl4ebjZ6Uc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:64:be:ea:11:92:9c:0d:2e:7f:be:06:0e:e7:3a:40:fa:
         4e:dc:6b:1d:00:bf:36:ad:3f:6c:d4:2c:05:36:b6:a4:03:ab:
         b5:ea:64:c3:88:54:58:0a:6b:2f:69:34:41:6b:3d:63:78:33:
         a8:26:de:80:9e:7b:08:05:d6:ac:30:e4:8b:26:a0:b5:d2:be:
         f4:3b:6d:1b:e9:a1:20:4f:dc:ad:a0:e5:e9:00:33:1b:fb:b7:
         4f:da:e5:6b:7c:00:8f:e6:3e:6b:04:7a:0b:ac:fd:46:0d:6c:
         3e:16:62:6b:a4:89:8c:93:21:7f:71:d9:00:fe:73:e4:76:fb:
         17:7e:72:19:fc:a9:d2:06:3c:d1:f3:26:2e:e7:bf:23:b4:0a:
         0d:f5:61:a1:19:6d:96:6d:56:0f:d4:19:05:98:7c:98:39:bc:
         9f:e8:67:1f:c5:68:08:0e:50:2d:d3:69:49:dc:af:48:96:c4:
         03:64:65:40:3a:42:a0:78:68:b9:d4:a4:45:1e:53:f2:2f:95:
         f0:04:50:4c:ab:85:f3:7d:cc:c3:8b:cd:a1:c3:fc:e7:1d:b8:
         7b:4c:05:23:2b:9c:ae:76:eb:37:de:ef:14:31:b0:25:5d:27:
         37:aa:93:32:f5:e8:53:12:88:3b:46:ab:9a:d9:c3:3c:35:12:
         76:a9:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:45 2026 by rpki-client