Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DISSrREP5bAXylBzkDdNA7VvlK4.roa
File:                     DISSrREP5bAXylBzkDdNA7VvlK4.roa (raw, json)
Hash identifier:          +nSOiId2jH7alGpmfsslrIK0fTHlffrSMqnQqU2ZTxM=
Subject key identifier:   0C:84:92:AD:11:0F:E5:B0:17:CA:50:73:90:37:4D:03:B5:6F:94:AE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04D5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DISSrREP5bAXylBzkDdNA7VvlK4.roa
Signing time:             Tue 31 Mar 2026 08:13:19 +0000
ROA not before:           Tue 31 Mar 2026 08:13:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        125.62.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C8492AD110FE5B017CA507390374D03B56F94AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:9f:ba:27:d2:80:e0:82:90:69:91:ce:e6:
                    29:c3:58:10:72:65:ce:46:f8:39:17:ea:c6:7d:7d:
                    76:22:13:b6:cf:3a:22:ad:7e:f5:e3:8f:24:38:6f:
                    c6:5f:b1:b6:13:da:79:38:3d:07:cd:ac:5f:4e:3c:
                    ca:76:7e:28:09:53:83:d5:f1:a5:26:6c:97:37:6f:
                    8e:49:da:1e:88:a8:de:e3:ce:48:c5:47:72:4f:f5:
                    6f:d7:0c:b5:df:19:3a:ab:6a:f6:de:dd:e4:10:6c:
                    00:ec:61:be:b0:55:91:07:af:55:cb:83:6e:13:ee:
                    25:64:d7:91:d0:e5:bd:18:16:46:82:38:0a:1a:98:
                    fb:17:56:6e:94:06:57:5f:6b:8d:28:c5:95:9a:df:
                    99:86:fb:e5:3b:e0:1e:bc:29:1e:1e:fb:b2:50:19:
                    6c:29:4a:ca:1e:2e:4c:ca:0f:d4:39:b4:b4:8b:96:
                    6a:83:87:6c:01:e5:07:b5:5e:60:f3:9a:a6:e1:57:
                    6d:44:07:d0:01:8a:9a:b2:17:93:14:8c:9b:77:03:
                    19:fa:76:b8:b4:f1:25:93:4b:18:28:8e:0f:41:f5:
                    94:3b:d4:43:25:be:ef:56:5b:e5:e8:04:e0:45:15:
                    89:ad:69:5d:02:fa:34:18:43:b5:dc:9c:a0:ee:ff:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:92:AD:11:0F:E5:B0:17:CA:50:73:90:37:4D:03:B5:6F:94:AE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DISSrREP5bAXylBzkDdNA7VvlK4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:2b:9c:d2:80:e9:fa:54:4b:4c:e1:4f:5f:08:5d:af:f6:51:
         50:f1:33:47:2f:3b:99:b3:41:8f:05:4a:d9:fa:60:77:d9:ea:
         2b:0c:ef:63:41:70:2e:cd:4a:55:7b:6c:8a:52:50:91:e8:8d:
         26:54:96:ec:b6:b7:df:80:47:8b:68:ee:51:b8:54:e5:ef:18:
         61:8b:de:4b:f8:8c:45:1b:91:99:29:0c:9f:71:20:63:45:74:
         99:5e:46:4a:a7:e3:cb:61:c4:7b:d1:df:ab:eb:82:15:48:6d:
         c8:65:aa:dd:81:f9:88:4d:49:f9:05:83:16:f0:97:dd:76:5d:
         01:78:0f:c1:f8:ce:56:4e:4c:c9:ea:96:8d:bc:d4:27:be:a0:
         0a:76:29:37:90:23:41:01:21:63:25:f7:9f:c1:ef:6e:7d:1b:
         32:65:5a:f0:5c:22:ac:59:3c:6b:c8:90:1c:bb:69:9a:33:75:
         99:6f:9b:4f:1f:cc:a5:92:9a:c1:93:2f:d4:53:b7:37:51:98:
         8d:f8:e3:30:f2:6f:ea:4f:14:f9:c1:9f:6e:c2:fc:4a:55:8e:
         40:eb:c0:cf:3b:14:ea:44:16:91:5b:e1:61:68:78:ff:d3:07:
         57:fc:f0:d4:36:55:ec:a0:f8:15:b8:89:dd:57:dc:23:41:7f:
         d9:41:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:38 2026 by rpki-client