Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7tpgrL2pffsQ-XmnWGjXDF9MJX4.roa
File:                     7tpgrL2pffsQ-XmnWGjXDF9MJX4.roa (raw, json)
Hash identifier:          A3fWTidQ6xq69rcV9HfIRBYAZp7t6Eool1PJL6CdRPQ=
Subject key identifier:   EE:DA:60:AC:BD:A9:7D:FB:10:F9:79:A7:58:68:D7:0C:5F:4C:25:7E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       045D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7tpgrL2pffsQ-XmnWGjXDF9MJX4.roa
Signing time:             Tue 31 Mar 2026 08:12:23 +0000
ROA not before:           Tue 31 Mar 2026 08:12:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        110.4.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EEDA60ACBDA97DFB10F979A75868D70C5F4C257E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:34:ee:ec:79:6a:ae:e9:62:e9:1e:66:40:
                    04:8e:ac:9b:8e:89:6d:66:d5:b9:85:ce:8f:81:ae:
                    98:74:75:d7:eb:6c:31:e8:ab:9e:1e:a9:24:21:ab:
                    3b:e0:a2:c8:e6:81:ab:35:6a:e6:c2:f3:53:9b:d4:
                    d6:01:3d:5f:7e:78:ff:3f:47:1a:72:81:b6:f0:ef:
                    42:a8:eb:af:d3:a6:9c:56:2c:d9:b7:a5:11:d4:a9:
                    fd:72:79:03:ea:33:0a:34:4d:9b:19:20:49:46:c3:
                    04:47:68:d3:be:ab:b2:34:96:71:ef:e5:93:8b:2e:
                    30:93:16:3d:49:70:40:a4:1e:ba:b3:2b:ff:36:71:
                    92:8c:45:f7:2b:d2:a1:38:00:94:bc:7b:04:fd:92:
                    eb:6a:47:4c:06:33:68:26:7a:b2:61:8d:41:78:c7:
                    58:4f:43:0b:9e:59:e9:66:be:70:14:c5:8e:e5:92:
                    ec:4f:d3:f3:ed:f9:37:74:dc:5b:b1:ac:5b:e7:bf:
                    1b:81:9d:8e:07:67:32:9f:2c:6d:fc:6e:f0:ff:f8:
                    a2:bc:ef:9f:ae:02:b5:a2:a5:91:c2:44:bd:1e:bc:
                    9f:cc:87:44:32:29:8c:45:81:ef:58:8e:5f:16:07:
                    d9:64:11:9f:98:5a:4c:7d:ed:c4:23:93:c0:43:25:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:60:AC:BD:A9:7D:FB:10:F9:79:A7:58:68:D7:0C:5F:4C:25:7E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7tpgrL2pffsQ-XmnWGjXDF9MJX4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:6f:f5:6f:9c:92:fa:dc:6f:80:65:c4:79:74:22:da:6d:8c:
         4b:b0:77:6e:b0:8d:6a:35:a6:76:d4:f4:09:24:42:3b:df:6f:
         e3:ab:22:c0:6c:5c:7f:ca:a2:6c:72:ab:da:ff:9e:22:46:07:
         63:44:b5:94:52:c9:32:53:c5:2c:ea:13:7d:34:4c:e8:4c:4b:
         6d:f5:06:9b:22:53:cd:0d:ae:00:45:3c:64:5a:f4:8a:d8:4d:
         56:c9:e4:d4:ce:9d:87:9d:20:6a:01:41:5f:54:b2:a5:01:a2:
         f6:90:40:46:e4:2a:22:12:27:45:3b:9b:ce:6c:3d:13:2d:3d:
         16:cd:d3:f9:ac:e4:b6:47:6c:6f:b8:b6:2a:be:f7:eb:bd:8a:
         35:ae:99:77:f0:8b:4d:7f:e9:53:6b:e6:d5:0d:fe:61:a8:69:
         5e:0f:bf:28:c5:a1:29:b9:3b:25:65:02:ce:38:ce:32:98:9c:
         b7:e6:f1:7b:f4:d3:4f:0b:25:13:93:82:d4:44:01:47:f8:dc:
         ea:22:86:d1:3b:cb:58:4b:e5:00:b2:40:1a:8d:b2:2f:76:69:
         f1:6e:42:05:f3:c3:e8:c7:dd:ee:eb:e3:a1:94:30:87:d9:6f:
         fe:68:e0:d8:35:eb:43:2a:11:a2:3d:ce:5d:05:df:a7:e0:56:
         5d:31:53:39
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyMjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVFREE2MEFDQkRBOTdE
RkIxMEY5NzlBNzU4NjhENzBDNUY0QzI1N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAijTu7Hlqruli6R5mQASOrJuOiW1m1bmFzo+Brph0ddfrbDHo
q54eqSQhqzvgosjmgas1aubC81Ob1NYBPV9+eP8/Rxpygbbw70Ko66/TppxWLNm3
pRHUqf1yeQPqMwo0TZsZIElGwwRHaNO+q7I0lnHv5ZOLLjCTFj1JcECkHrqzK/82
cZKMRfcr0qE4AJS8ewT9kutqR0wGM2gmerJhjUF4x1hPQwueWelmvnAUxY7lkuxP
0/Pt+Td03FuxrFvnvxuBnY4HZzKfLG38bvD/+KK875+uArWipZHCRL0evJ/Mh0Qy
KYxFge9Yjl8WB9lkEZ+YWkx97cQjk8BDJf6lAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU7tpgrL2pffsQ+XmnWGjXDF9MJX4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxLzd0cGdyTDJwZmZzUS1YbW5XR2pYREY5TUpYNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARuBDAwDQYJKoZIhvcNAQELBQADggEB
ANFv9W+ckvrcb4BlxHl0ItptjEuwd26wjWo1pnbU9AkkQjvfb+OrIsBsXH/Komxy
q9r/niJGB2NEtZRSyTJTxSzqE300TOhMS231BpsiU80NrgBFPGRa9IrYTVbJ5NTO
nYedIGoBQV9UsqUBovaQQEbkKiISJ0U7m85sPRMtPRbN0/ms5LZHbG+4tiq+9+u9
ijWumXfwi01/6VNr5tUN/mGoaV4PvyjFoSm5OyVlAs44zjKYnLfm8Xv0008LJROT
gtREAUf43OoihtE7y1hL5QCyQBqNsi92afFuQgXzw+jH3e7r46GUMIfZb/5o4Ng1
60MqEaI9zl0F36fgVl0xUzk=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:05 2026 by rpki-client