Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa
File:                     7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa (raw, json)
Hash identifier:          ChCxXvEe4ykPmfyLeGxMDIYLOwDlcZJqhaziEX/8KSg=
Subject key identifier:   EE:A1:62:2B:8E:5F:5C:57:73:3A:42:3E:09:AD:A4:7C:78:EF:44:20
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04A8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa
Signing time:             Tue 31 Mar 2026 08:12:57 +0000
ROA not before:           Tue 31 Mar 2026 08:12:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        61.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EEA1622B8E5F5C57733A423E09ADA47C78EF4420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:9f:e3:8e:07:9a:48:bb:b9:0a:ce:d8:72:
                    d8:ed:ca:ba:83:10:84:f9:d5:7d:85:20:99:38:55:
                    bf:57:d6:ad:a2:15:84:d7:6c:1d:75:92:d8:9d:40:
                    53:c6:2e:b9:21:0c:00:68:4a:b9:ec:75:06:f1:c8:
                    a1:c3:dc:7b:0d:5e:02:c5:fc:1c:a2:05:84:86:a8:
                    b5:05:47:98:00:16:84:be:cd:6f:43:c5:68:16:3b:
                    1d:f1:c9:3a:32:6d:36:60:cb:3e:1a:14:6e:e5:79:
                    61:d7:1d:67:5c:b0:a0:ee:08:ab:0b:28:f2:5e:9a:
                    e2:61:db:40:3b:1e:d4:90:c0:af:8f:69:3b:fa:68:
                    dc:24:4e:06:36:f4:00:3c:cf:6e:35:28:8e:a6:9b:
                    90:ff:58:3f:f5:6d:e0:36:41:0a:bc:a0:f3:44:f7:
                    7c:f9:cf:9e:42:11:9b:fb:46:6f:9b:3d:a3:51:52:
                    1f:68:80:30:ac:b9:d1:6e:4a:5a:8f:8c:54:bc:7c:
                    e7:c2:7c:30:c1:2a:e7:cd:37:51:e9:9b:3d:eb:6f:
                    39:75:55:6a:c4:bc:aa:49:32:ea:80:14:37:b9:93:
                    0f:13:f9:7a:9c:84:ae:76:ad:6d:cc:84:40:50:fc:
                    8d:a7:89:51:44:34:73:58:91:fc:f1:e7:e7:67:6f:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A1:62:2B:8E:5F:5C:57:73:3A:42:3E:09:AD:A4:7C:78:EF:44:20
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:2f:89:1d:74:27:a9:96:76:01:b0:f7:16:fc:e2:12:56:
         e4:08:93:73:7e:d8:14:8e:c4:31:25:65:07:0f:ca:a9:f6:3e:
         2f:6a:fc:ac:81:1a:20:69:7f:6b:c9:0f:e3:33:09:b7:72:a6:
         43:90:a4:b0:08:8f:52:cc:e7:fa:ce:09:91:0d:d8:f3:e6:ca:
         60:d5:d8:07:f7:62:0b:e6:e2:75:c7:a3:c0:50:eb:7c:83:e2:
         4a:14:7c:f7:64:c0:ca:d5:76:70:e2:a0:f2:76:96:ed:23:fc:
         8a:ff:a8:69:80:dd:f9:88:7c:0c:64:2d:33:f3:46:0b:33:e3:
         3b:8a:9b:ce:3b:6f:25:56:89:b3:36:58:99:c2:33:99:0a:57:
         80:6b:e4:fb:5b:43:f1:d8:01:89:87:a3:b5:fe:ce:8f:89:30:
         b1:3a:fc:15:a6:de:3e:80:ea:73:28:8a:cd:c0:8d:12:c0:d4:
         97:c1:b1:8e:b9:54:3e:79:96:b0:f2:38:2b:88:aa:11:eb:d1:
         d5:a9:1c:ea:5b:eb:71:70:41:7b:21:f5:a1:9b:b7:57:f2:c6:
         43:3c:75:16:ac:60:7d:7b:2f:f5:f5:12:16:3e:e3:43:eb:7d:
         a4:50:3e:07:26:66:b1:82:35:de:9a:86:6c:1a:56:11:4f:8b:
         17:4d:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client