Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/EjxAAEANF4BETwGZKPvNZJEIdMs.roa
File:                     EjxAAEANF4BETwGZKPvNZJEIdMs.roa (raw, json)
Hash identifier:          YSOJCtYaW5FHMO7QKDLKPIq97beWh7nXPUrdpxFa8QA=
Subject key identifier:   12:3C:40:00:40:0D:17:80:44:4F:01:99:28:FB:CD:64:91:08:74:CB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0479
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EjxAAEANF4BETwGZKPvNZJEIdMs.roa
Signing time:             Tue 31 Mar 2026 08:12:37 +0000
ROA not before:           Tue 31 Mar 2026 08:12:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        180.92.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=123C4000400D1780444F019928FBCD64910874CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:ca:58:b2:89:d7:3d:a0:63:f0:db:18:80:
                    6b:41:fb:0b:69:1c:28:d9:57:3c:c1:6c:73:9d:f9:
                    cc:ec:64:a2:ea:5c:b7:e3:c5:b8:ef:ae:66:8b:b7:
                    5c:18:e6:7f:5a:4d:87:fc:ce:ca:06:6e:9b:09:a3:
                    76:f6:95:db:b5:ab:48:2d:e2:46:cb:a8:de:c1:be:
                    ad:3c:e5:73:e4:16:02:03:fb:03:19:d2:f9:8b:94:
                    04:f4:bd:c4:83:d7:da:36:46:ee:08:44:29:34:1d:
                    3d:44:59:64:62:9b:54:ce:15:41:2b:6a:9c:d9:d9:
                    17:ba:a1:1b:6a:37:d7:73:ed:67:48:83:25:fc:a2:
                    d4:e1:32:c0:36:c6:42:ca:e6:4d:22:a2:40:5d:ba:
                    c3:33:28:11:40:51:f5:f2:85:1c:6d:41:e2:0e:35:
                    9c:36:bc:f2:2a:42:49:05:f3:4a:6b:cc:de:67:dc:
                    6d:d7:ad:73:c5:c6:0b:cb:a2:06:d6:87:9b:8e:1b:
                    81:70:cc:0a:13:03:c3:17:cb:42:99:1e:86:fb:dd:
                    66:86:0e:56:de:8c:9d:84:fc:23:f8:a3:85:2e:b4:
                    c2:65:c7:59:0a:df:44:c5:fe:3c:75:bd:84:8b:4d:
                    66:d2:26:41:e3:96:c8:9b:bf:fc:05:52:49:2f:64:
                    c7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:40:00:40:0D:17:80:44:4F:01:99:28:FB:CD:64:91:08:74:CB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EjxAAEANF4BETwGZKPvNZJEIdMs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:6d:86:2e:ef:7d:8d:a3:a9:d7:1a:1c:3f:76:79:e1:3d:ef:
         87:dc:78:ab:05:a7:73:b0:5e:3c:12:52:d2:26:dd:3c:5e:8b:
         81:da:d7:11:2c:b9:9c:c3:7d:2a:36:a1:6d:47:af:4e:df:f0:
         1a:5a:48:f5:28:24:62:12:26:5a:a7:be:be:05:ac:73:34:f3:
         76:fc:e0:a6:69:87:a2:62:15:d7:2d:51:92:b3:6c:65:39:0a:
         93:7a:f4:69:de:92:74:7a:51:80:57:6d:d1:53:a3:ea:0f:94:
         e8:61:2a:94:50:41:07:9b:fd:46:0b:a4:45:bd:ed:88:71:d4:
         bd:a2:a9:24:67:b1:ca:81:57:4a:22:7f:e2:bc:ef:8e:e2:41:
         ec:08:19:51:8e:9b:68:a5:e6:e2:ae:24:41:a1:dc:9d:04:87:
         c9:fe:29:c4:f0:c1:2d:01:ca:82:b3:28:f8:81:22:91:af:da:
         d3:73:b0:06:d7:96:2e:2d:4d:66:76:ac:33:3c:0b:b6:f2:df:
         fe:e9:e5:bb:3b:fd:b0:25:f3:24:1e:5a:c3:06:6d:3c:bc:72:
         fc:9e:d0:13:15:4d:b4:d5:93:68:5f:a2:b6:47:ce:cb:a6:f2:
         99:e5:00:9b:bb:3e:a3:75:de:17:f1:1d:37:80:42:cf:fc:6a:
         0d:38:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:44 2026 by rpki-client