Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DH5-PzLCGxkBGPg6DzzaDOriMCw.roa
File:                     DH5-PzLCGxkBGPg6DzzaDOriMCw.roa (raw, json)
Hash identifier:          52UapCKGPGy9jqxu3Udg1kik5P46IYWu1VYfaycN76g=
Subject key identifier:   0C:7E:7E:3F:32:C2:1B:19:01:18:F8:3A:0F:3C:DA:0C:EA:E2:30:2C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       045A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DH5-PzLCGxkBGPg6DzzaDOriMCw.roa
Signing time:             Tue 31 Mar 2026 08:12:22 +0000
ROA not before:           Tue 31 Mar 2026 08:12:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        61.203.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C7E7E3F32C21B190118F83A0F3CDA0CEAE2302C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:25:c7:a9:1c:ed:f3:46:5e:dc:0e:40:76:
                    b4:1c:a0:3f:04:23:3c:23:4d:a1:e1:e6:ec:b8:45:
                    fd:3a:a5:1a:e0:44:22:20:75:c1:8b:25:6d:fb:f8:
                    50:8a:26:c5:f9:0f:a1:93:60:02:c2:90:86:00:67:
                    f1:e0:eb:f6:f9:47:e9:5e:94:0b:d0:fb:f2:91:b0:
                    64:30:e8:78:d2:6c:f6:89:e3:09:b8:f9:6c:1e:30:
                    7a:7d:48:3f:db:17:76:9a:a3:d4:a0:51:76:7b:c7:
                    5e:34:8c:80:1f:b6:2b:c1:ab:39:a0:b9:ee:94:f8:
                    a4:27:bb:f9:35:86:87:24:3e:82:90:ee:84:2c:b8:
                    a1:11:c9:4b:36:04:9a:75:65:c0:3e:27:de:80:68:
                    33:98:d3:4d:ac:f7:01:e4:6c:89:be:62:b1:6e:b0:
                    dc:1f:77:97:4c:1f:09:b5:c8:d7:d8:02:68:78:54:
                    4b:70:13:6c:d0:ef:03:ef:0a:20:31:fd:e9:72:55:
                    9d:93:36:a8:7c:6a:0a:c6:e2:bc:11:30:b8:6e:c0:
                    fd:bd:19:94:62:e6:77:d6:85:41:77:10:e5:68:0e:
                    a7:a7:b8:60:22:e7:13:22:47:c2:eb:c5:78:60:48:
                    81:d9:c9:65:18:e8:d4:fa:2c:9b:7d:5b:1b:0e:f1:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7E:7E:3F:32:C2:1B:19:01:18:F8:3A:0F:3C:DA:0C:EA:E2:30:2C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DH5-PzLCGxkBGPg6DzzaDOriMCw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ce:54:d7:6d:9b:c7:30:cf:4f:00:90:eb:b1:08:b4:9c:33:fc:
         39:ff:77:b1:74:d9:c0:1e:34:e7:50:10:e0:e6:47:eb:0a:ee:
         27:28:de:b0:b5:26:4c:24:7a:e8:ae:a3:05:49:28:97:a0:15:
         50:8f:cb:79:35:59:30:3e:03:99:28:58:ed:e5:5c:0b:dc:24:
         4d:af:e3:0d:e3:ef:38:1a:08:e3:de:e7:64:ed:2d:3d:48:02:
         0f:47:f7:8b:a0:7c:c6:39:cf:8b:cb:98:fe:ce:a8:9f:73:82:
         e3:44:d3:95:19:36:f2:2e:9c:e8:12:97:f6:c2:33:9b:29:51:
         3f:ad:b5:9c:9c:e6:fc:3a:0f:9e:a9:58:5f:f6:de:d1:68:ef:
         47:d6:66:d3:63:ad:2e:6d:dc:1c:fa:da:48:ce:95:c4:08:48:
         d2:42:89:19:bb:54:05:65:63:10:7f:f5:0d:96:02:36:a5:ec:
         af:a1:de:84:db:fb:1f:26:11:28:af:c6:e3:b3:04:b8:4f:5c:
         0a:fa:f6:67:36:48:03:8d:f9:b3:60:cd:46:09:fb:17:01:48:
         71:a1:25:47:8e:c1:b2:83:df:e4:34:2a:82:e4:07:46:ee:cf:
         ea:df:a3:08:ee:f2:77:33:0e:97:1c:25:86:b6:57:e8:10:35:
         6a:c9:78:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:39 2026 by rpki-client