Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6lXxHWW0Ea2rV4ycGE2ohN3xjyM.roa
File:                     6lXxHWW0Ea2rV4ycGE2ohN3xjyM.roa (raw, json)
Hash identifier:          o0mgJAk/S7x53FooXxLdUupY6YWQxVqxmsjoHQNWV5w=
Subject key identifier:   EA:55:F1:1D:65:B4:11:AD:AB:57:8C:9C:18:4D:A8:84:DD:F1:8F:23
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       040A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6lXxHWW0Ea2rV4ycGE2ohN3xjyM.roa
Signing time:             Tue 31 Mar 2026 08:11:40 +0000
ROA not before:           Tue 31 Mar 2026 08:11:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18134
IP address blocks:        203.217.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1034 (0x40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EA55F11D65B411ADAB578C9C184DA884DDF18F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:3b:d5:82:63:f3:f3:4c:5b:72:04:55:3e:
                    c1:79:75:8b:bb:28:79:77:a1:66:f1:1e:95:d5:eb:
                    22:db:ad:d2:04:c6:0d:90:fe:78:77:b8:fe:e3:4d:
                    59:55:77:7b:0c:15:49:c4:dc:b5:84:ed:2b:62:ce:
                    22:55:15:4d:ae:ca:9b:30:d4:f8:e3:3e:44:be:af:
                    23:46:86:27:ac:25:2c:2f:26:f9:4e:0f:04:91:d7:
                    92:ab:92:7f:b8:dd:c8:e6:f6:a6:69:7b:98:c1:ad:
                    da:f7:06:67:32:31:9e:45:bb:8f:33:6c:8e:70:65:
                    8a:47:90:79:39:65:d3:9e:82:17:88:46:6e:42:7b:
                    f2:23:2b:cb:a5:d8:df:b1:56:5c:3f:b7:3b:65:6c:
                    c6:da:2c:00:a3:76:df:68:19:d4:73:48:22:6d:6a:
                    7d:cc:ff:e4:01:bb:72:c9:f5:f5:8c:47:39:29:74:
                    eb:e8:a2:93:ba:d4:c9:ff:31:1f:76:d8:e2:6c:a1:
                    6b:f1:07:9a:8d:81:1a:a5:5f:04:fd:8e:85:68:8e:
                    f6:8c:c0:9d:8a:f6:9a:4b:0c:ba:14:35:e0:ed:e2:
                    96:f4:c6:08:76:2e:38:bc:c9:aa:f9:0c:d5:fb:a2:
                    e8:ea:67:c3:62:24:f7:ea:85:58:6b:33:48:fa:69:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:F1:1D:65:B4:11:AD:AB:57:8C:9C:18:4D:A8:84:DD:F1:8F:23
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6lXxHWW0Ea2rV4ycGE2ohN3xjyM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:65:68:8d:4e:5f:c4:dd:67:4c:1d:77:62:35:44:7c:8a:b1:
         f5:e0:e8:45:1d:dd:03:d4:48:6e:b0:69:64:a2:66:24:07:fd:
         a7:c3:63:1f:7b:18:37:10:a7:7c:a5:8b:11:5e:f8:b1:5d:f1:
         c1:91:a6:ef:b4:9c:fd:88:61:0b:39:bd:91:c8:00:16:ab:ff:
         9c:43:3a:c4:49:84:fb:46:21:98:13:c3:d5:14:97:ad:92:b2:
         27:68:75:92:f2:a1:bf:6a:76:77:87:3c:9a:00:61:e3:4c:8d:
         32:f8:81:95:39:5e:8a:2f:15:04:cd:d8:40:32:8f:db:8e:3e:
         94:af:e2:53:4a:68:d4:90:28:63:df:95:b6:a3:66:38:9b:c7:
         a8:93:69:f0:ea:76:9d:c4:f0:bb:bc:9a:75:6c:cf:fa:71:71:
         4b:58:dc:43:1b:ab:a5:22:c9:d3:b6:e1:53:91:39:74:67:af:
         07:9f:5a:c9:44:7a:10:b4:bd:62:4e:d1:09:64:41:95:17:56:
         58:1f:3b:54:14:79:bc:50:74:62:71:03:35:aa:7f:bd:ea:82:
         94:eb:21:0b:8f:6d:01:65:a0:eb:65:29:9a:83:1c:21:16:1a:
         ee:bd:5d:6f:45:94:6f:96:81:15:c1:92:33:4a:d6:0a:3a:d8:
         a9:5f:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:50 2026 by rpki-client