Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DtoqBFmJbEc1ZDvqYOmNJ9AMN_k.roa
File:                     DtoqBFmJbEc1ZDvqYOmNJ9AMN_k.roa (raw, json)
Hash identifier:          WS+PtOAjcUwO/5uzMFFBb8BD2QvGmYMqcLLz1qryKoE=
Subject key identifier:   0E:DA:2A:04:59:89:6C:47:35:64:3B:EA:60:E9:8D:27:D0:0C:37:F9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       043E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DtoqBFmJbEc1ZDvqYOmNJ9AMN_k.roa
Signing time:             Tue 31 Mar 2026 08:12:06 +0000
ROA not before:           Tue 31 Mar 2026 08:12:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18136
IP address blocks:        219.105.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0EDA2A0459896C4735643BEA60E98D27D00C37F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:be:3a:de:bd:3f:ac:8f:39:cb:d0:2e:e4:
                    a1:99:0d:9a:64:17:57:9f:4c:da:cb:b5:39:f8:01:
                    15:11:2f:a7:25:cf:9e:17:c8:5a:a9:95:92:13:4c:
                    0c:53:71:d5:f2:5d:9a:7b:d8:fc:06:d2:15:da:93:
                    27:56:1e:d8:78:41:5c:92:62:d2:6f:ad:46:14:27:
                    2f:93:62:58:ec:e9:ce:01:a4:b0:be:b3:e4:50:58:
                    be:5c:96:a5:b4:0f:68:04:88:90:18:48:05:8e:ce:
                    6e:1a:e6:02:44:88:b4:87:d6:c4:f2:b5:a1:db:5d:
                    bc:61:b0:91:d1:87:f2:cd:70:5f:ba:1c:d9:e2:1d:
                    2f:61:de:c5:bb:e1:49:62:8b:19:28:b4:ca:76:a6:
                    a8:a5:de:2b:cb:ff:cc:4e:1a:8f:44:da:f2:0d:96:
                    0c:40:9a:43:3a:19:0f:17:c6:01:f5:64:ea:a6:65:
                    8c:c9:0d:6e:58:03:40:f0:d6:5d:a0:08:d9:7b:f2:
                    d6:0c:b8:04:3d:0b:90:b6:3b:78:d1:ab:8e:12:fc:
                    43:2f:20:bf:64:76:21:a3:c1:a3:f3:58:d0:12:5b:
                    4d:62:ba:80:a8:e6:8e:fe:51:e4:bd:ab:79:1b:11:
                    9f:97:23:a0:5a:5a:61:35:a4:71:af:8d:b3:6b:9c:
                    85:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DA:2A:04:59:89:6C:47:35:64:3B:EA:60:E9:8D:27:D0:0C:37:F9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DtoqBFmJbEc1ZDvqYOmNJ9AMN_k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:45:e0:1d:a4:17:47:44:2d:a2:cc:10:08:fa:32:5f:d1:f0:
         ac:7b:c5:67:9c:19:93:3a:0a:a1:02:c6:a1:9d:e1:a2:94:7c:
         e6:3e:a5:75:ad:88:06:be:1e:f4:10:e7:d1:3b:d5:95:b9:26:
         68:c7:ca:ab:dd:ef:31:ab:56:28:08:cc:83:cb:8c:71:30:3a:
         c5:4c:dc:c3:91:0f:ae:51:2f:c2:de:d0:6c:0f:5c:c8:25:00:
         95:87:5b:f1:cb:20:07:01:72:28:82:c8:c0:2a:11:1c:32:86:
         ae:1c:b0:f8:db:98:3c:59:a5:7a:93:d1:ee:f5:73:3e:d8:67:
         fa:ac:64:3e:e4:b2:e2:a2:dc:29:f5:a8:db:5c:a8:b9:7c:d1:
         60:f0:3a:2c:b8:c7:e9:a4:75:1c:59:2d:a3:11:41:58:84:c9:
         8c:15:42:f0:cb:7e:b0:e8:9f:69:8a:86:22:20:df:b2:00:12:
         ed:13:1a:64:2d:5c:d0:bc:eb:d8:2a:66:27:00:92:b4:43:d7:
         36:4a:6c:4a:58:68:2f:2c:a7:67:3b:33:8a:31:7c:28:ba:03:
         2a:34:34:de:ec:ce:d2:69:23:1d:cb:18:23:9a:d5:35:43:69:
         46:ad:a7:1d:30:7b:f9:74:ec:4e:47:e8:f8:51:d7:66:4c:35:
         1e:11:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:56 2026 by rpki-client