Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DPF0v2TXHxQH6fa1267l3v-r0Ow.roa
File:                     DPF0v2TXHxQH6fa1267l3v-r0Ow.roa (raw, json)
Hash identifier:          C3OPRzfQryf2BZ74HjJVBP+xCf/IToCcQDV0H8UD/vY=
Subject key identifier:   0C:F1:74:BF:64:D7:1F:14:07:E9:F6:B5:DB:AE:E5:DE:FF:AB:D0:EC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0465
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DPF0v2TXHxQH6fa1267l3v-r0Ow.roa
Signing time:             Tue 31 Mar 2026 08:12:27 +0000
ROA not before:           Tue 31 Mar 2026 08:12:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        112.137.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0CF174BF64D71F1407E9F6B5DBAEE5DEFFABD0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:4d:e4:90:44:9c:8d:e4:77:c7:5e:3b:a8:
                    09:e6:48:a2:98:3c:7d:1e:56:23:70:78:69:80:0d:
                    7f:85:a0:ce:67:a7:dc:85:9d:12:0d:1c:59:38:34:
                    49:40:d5:22:28:4d:fd:2e:ec:fd:de:7e:88:d8:3b:
                    c5:c6:a2:ee:90:77:24:26:98:4d:db:22:b8:c0:f1:
                    b7:bc:2d:ac:fc:4b:6f:f2:ab:85:3a:fb:67:70:1a:
                    db:39:9c:13:d1:bc:e9:59:ba:82:39:16:fc:09:64:
                    da:e0:ee:32:84:c1:2b:90:fa:40:99:85:cf:ec:82:
                    4c:0f:ed:0f:54:3a:4e:c9:89:f4:9c:21:bb:92:ad:
                    e9:0d:9f:07:c0:85:ba:7f:e0:5d:04:28:48:8c:f7:
                    24:d5:b6:00:ef:83:a9:ec:d1:3a:85:cc:c4:1e:32:
                    bb:89:c2:b8:3a:57:cc:37:eb:14:3b:c5:83:23:34:
                    a0:f7:54:c9:b5:f2:01:56:58:5a:98:0c:df:fa:ed:
                    75:18:c1:2c:c1:45:83:55:d1:9e:80:e4:a4:f3:57:
                    bb:5d:93:d0:d0:57:84:8b:7a:71:61:09:1d:fa:d6:
                    27:8c:7c:8d:1f:8d:b6:99:b1:a7:b8:cf:b0:ae:02:
                    72:54:29:8f:77:4c:41:8f:4b:0d:cd:43:38:8f:e6:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F1:74:BF:64:D7:1F:14:07:E9:F6:B5:DB:AE:E5:DE:FF:AB:D0:EC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DPF0v2TXHxQH6fa1267l3v-r0Ow.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:50:22:fe:e7:d1:6c:b7:c1:b5:17:ed:1c:e0:76:32:a5:39:
         f2:f7:21:6a:8e:13:b7:22:78:32:e4:79:d6:98:cb:cb:07:ed:
         ea:83:8e:7e:e1:22:64:00:a2:1c:e4:de:9a:db:65:c0:35:4d:
         1b:63:da:d0:26:34:79:de:3c:41:f8:86:5f:ae:40:ee:cb:88:
         9b:63:7e:6b:0a:1b:a1:3c:51:48:32:90:2e:b4:c2:e3:ad:19:
         12:96:05:f8:78:b1:3c:71:dd:8d:b1:10:b2:f6:18:69:2b:1d:
         a6:58:19:8b:72:b6:d2:56:26:e2:39:f4:b9:dc:14:9c:65:31:
         4b:a7:14:4d:ce:be:2d:04:7d:f0:7c:e0:26:21:e3:fb:60:bb:
         9a:86:33:2d:f9:4f:73:42:f6:fa:6d:cb:5f:3a:d7:6a:2b:53:
         0f:c7:8a:20:5a:08:48:8b:2c:7b:0f:3b:3c:7d:bb:45:e6:9b:
         cb:84:8c:42:7e:90:bd:55:ba:af:6f:de:a6:7a:75:4c:1c:f9:
         b9:5a:92:51:41:4e:cf:02:c8:de:20:fd:e8:5e:c3:5a:cf:8b:
         b8:50:4b:6b:19:ca:75:ff:ba:84:34:db:3a:4d:9b:27:5a:1d:
         1c:2a:b3:ce:fa:fd:72:4b:ca:d6:14:26:dc:82:f2:8e:b5:8e:
         35:44:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:24 2026 by rpki-client