Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6bpHRlTltUz9SvlopTD1sli0tZ0.roa
File:                     6bpHRlTltUz9SvlopTD1sli0tZ0.roa (raw, json)
Hash identifier:          3nm/H085Jl69ErwTH8dh+2sS3sZSjwgtd5nnVxd57h0=
Subject key identifier:   E9:BA:47:46:54:E5:B5:4C:FD:4A:F9:68:A5:30:F5:B2:58:B4:B5:9D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       041D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6bpHRlTltUz9SvlopTD1sli0tZ0.roa
Signing time:             Tue 31 Mar 2026 08:11:49 +0000
ROA not before:           Tue 31 Mar 2026 08:11:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9378
IP address blocks:        61.215.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E9BA474654E5B54CFD4AF968A530F5B258B4B59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:ca:ab:8d:75:53:32:8d:a9:39:df:89:31:
                    26:5c:95:b3:b6:24:e0:c9:0a:b5:7e:55:7c:ee:c8:
                    fb:e1:07:c1:ae:77:f1:d1:94:75:39:e7:2a:54:25:
                    0c:2c:00:d3:50:af:90:ba:ff:d7:a2:4e:a7:da:6b:
                    4a:c2:b6:43:a9:46:ea:8e:b7:f2:a9:17:11:4e:4a:
                    64:44:5d:1a:8c:66:66:e2:e0:a6:d8:f4:2c:e2:1b:
                    6a:e6:5d:35:5d:10:ce:d3:2e:9d:3f:f0:24:6f:cf:
                    ec:b1:a1:23:74:c4:cb:e5:9c:cc:75:fe:07:35:fa:
                    6a:e0:40:2e:c3:6c:a4:af:2d:51:5c:50:84:b1:84:
                    72:b5:ae:b6:e6:8d:25:3b:cc:a1:cc:f6:cd:8c:ba:
                    b9:bb:93:c4:e5:3b:a7:cd:b7:7f:9c:4e:80:45:7c:
                    65:fa:00:c8:5e:f1:48:a2:4f:1c:7f:8d:0e:c2:71:
                    f9:e8:e1:ae:9c:f5:36:85:72:f4:e6:3e:61:c6:db:
                    94:a3:07:d8:39:6a:49:73:17:a4:e0:b2:60:07:24:
                    7e:75:63:9f:7a:53:99:54:a9:ca:d8:76:8a:96:98:
                    30:57:a2:0e:99:98:f6:bb:d0:0a:25:cc:ea:37:7a:
                    e7:ab:c5:f0:e6:51:ab:04:b9:0a:ca:a7:5a:55:32:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:47:46:54:E5:B5:4C:FD:4A:F9:68:A5:30:F5:B2:58:B4:B5:9D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6bpHRlTltUz9SvlopTD1sli0tZ0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:de:c0:2f:2f:a5:ba:d9:41:ca:ef:2d:d7:81:0c:51:49:54:
         7a:24:9e:fe:4d:32:32:ac:1c:3e:09:65:21:bf:81:e2:ab:02:
         d5:89:64:e0:50:72:28:c9:a3:49:00:73:0f:be:a1:d3:4a:e9:
         16:52:03:3c:a4:d2:48:0d:37:7e:01:05:22:c3:df:af:af:e9:
         67:ee:33:e5:3c:ec:d1:dc:a3:e6:58:b7:b8:71:1a:c9:9e:1a:
         34:bc:c5:96:5d:a2:58:97:a3:43:18:06:4a:8e:71:60:b8:63:
         b3:bc:8a:61:63:c0:a1:08:4b:02:cb:85:dd:2d:55:af:b7:08:
         3b:9e:2a:8a:c8:33:4d:e4:0e:d0:30:9b:8a:2f:6b:47:75:28:
         f6:b0:cf:b2:c5:13:fa:c8:61:40:f6:2f:ae:71:ca:2a:62:15:
         db:7b:81:f3:64:bd:0e:9f:40:b7:61:e1:60:50:ab:59:e6:a8:
         08:07:36:dc:93:05:1b:5a:39:59:b6:d5:ea:de:1b:94:c8:95:
         81:da:a8:5a:11:08:6a:d8:7d:80:69:71:49:9b:90:88:da:d7:
         b5:99:13:04:6b:00:20:9c:a1:16:59:29:2b:0f:32:ca:59:e1:
         aa:1d:bf:bf:ad:c9:08:20:5b:6e:e7:03:c9:5c:00:12:e3:b6:
         23:47:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:44:14 2026 by rpki-client