Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Qit8gcWx_hHpWws3v8MlAhC4UM.roa
File:                     7Qit8gcWx_hHpWws3v8MlAhC4UM.roa (raw, json)
Hash identifier:          2oqICDWjBx/hMKxCzxPr5ho8307bR/f46n6KtzNllIk=
Subject key identifier:   ED:08:AD:F2:07:16:C7:F8:47:A5:6C:2C:DE:FF:0C:94:08:42:E1:43
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0464
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Qit8gcWx_hHpWws3v8MlAhC4UM.roa
Signing time:             Tue 31 Mar 2026 08:12:26 +0000
ROA not before:           Tue 31 Mar 2026 08:12:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        112.137.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ED08ADF20716C7F847A56C2CDEFF0C940842E143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:c5:95:8a:e7:8d:16:16:48:0a:b3:bb:6d:
                    de:14:24:61:b0:0a:78:5c:80:b8:d2:fd:ae:bc:ad:
                    30:48:f9:ba:d0:44:e5:c1:23:f1:f5:d0:16:25:b1:
                    13:64:97:bb:1c:8b:c1:87:65:ff:3b:78:ce:7a:ab:
                    62:aa:73:0f:4f:e8:ae:4a:32:c8:c3:9a:83:de:c2:
                    60:5f:db:d1:aa:7d:87:90:a7:32:d7:39:72:71:49:
                    b0:7e:20:0d:b1:eb:c3:ae:15:a6:9f:09:19:92:ac:
                    0b:ab:19:0d:17:c2:7e:29:5d:78:c0:ba:52:a5:77:
                    64:3e:c9:72:43:a6:6f:75:0c:ea:f5:e0:d2:4c:5f:
                    93:f3:5c:cb:33:5b:9c:52:c4:01:75:43:df:cf:f9:
                    20:38:1d:93:2c:40:d3:50:63:b2:9a:92:ed:91:9a:
                    1a:02:99:5a:d3:e4:da:38:a3:d9:4b:da:ee:31:08:
                    f9:64:99:7d:88:7f:23:ea:94:4c:06:45:45:7f:e7:
                    60:b3:a9:eb:c8:b9:9d:9c:63:91:b1:d6:67:c8:06:
                    aa:e8:aa:33:ba:80:c7:20:39:a8:98:45:bd:36:82:
                    ba:9d:3a:1a:78:70:93:16:02:dc:07:95:b6:93:1c:
                    d0:77:4a:86:3b:e5:67:1e:cd:30:4f:6c:22:f9:5c:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:AD:F2:07:16:C7:F8:47:A5:6C:2C:DE:FF:0C:94:08:42:E1:43
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Qit8gcWx_hHpWws3v8MlAhC4UM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:1b:3c:bc:c7:54:45:d9:4d:37:14:be:14:fb:9e:eb:ae:
         10:af:ea:88:af:35:00:dd:ec:62:e3:22:63:05:10:43:37:43:
         f2:5d:b6:49:8a:c0:c1:43:8f:af:e1:e4:9e:f3:e7:86:10:8e:
         a0:56:35:f9:7e:89:54:c4:fb:51:28:53:b9:33:d6:41:ac:27:
         7e:57:e2:91:97:d4:64:d7:6d:a5:c4:40:c6:79:ad:c9:a2:5a:
         7b:8f:4b:7a:04:94:3f:92:23:b6:a1:31:23:c6:aa:49:b6:0b:
         6f:5f:3c:2e:32:d0:85:75:6a:0b:47:2e:ed:02:46:70:b2:b5:
         94:ca:c0:fc:15:1b:f6:fe:f0:1b:60:57:bb:e7:21:b3:4e:06:
         62:76:a7:79:98:69:e9:53:c7:39:aa:78:37:75:71:43:05:fa:
         f8:0f:2a:b4:23:f3:e8:e3:e9:f4:6f:37:f4:be:43:65:1b:f7:
         97:0f:a4:6e:b8:f4:dc:cd:8d:8c:aa:6e:db:7d:bb:49:af:1d:
         88:6c:56:ce:98:86:7c:7b:22:59:10:2a:fb:c9:dd:a7:92:d9:
         3e:2d:79:07:43:a2:1c:c6:a7:ef:48:8e:89:ec:da:7f:48:2e:
         b1:0a:75:b2:fd:a9:11:6f:f7:d9:f1:18:d9:9b:fc:fd:a1:cd:
         5b:24:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:43:54 2026 by rpki-client