Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/FI1U7mUURDRARdKfZKkvlI5MUPc.roa
File:                     FI1U7mUURDRARdKfZKkvlI5MUPc.roa (raw, json)
Hash identifier:          UK63q+EuVsYazW/RBc7nrkAcnmliYwtYypSQr8i1DHc=
Subject key identifier:   14:8D:54:EE:65:14:44:34:40:45:D2:9F:64:A9:2F:94:8E:4C:50:F7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       046A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FI1U7mUURDRARdKfZKkvlI5MUPc.roa
Signing time:             Tue 31 Mar 2026 08:12:29 +0000
ROA not before:           Tue 31 Mar 2026 08:12:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        114.134.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=148D54EE651444344045D29F64A92F948E4C50F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:31:36:e4:6f:7f:3e:3d:c6:32:df:18:2b:
                    db:0f:d9:a4:90:b3:95:79:eb:38:08:dc:a4:a4:55:
                    98:78:43:57:23:9b:71:97:38:8d:bb:e8:d1:75:bf:
                    ff:ff:e0:c7:38:35:85:39:0e:68:76:5c:52:f3:b1:
                    f4:02:8b:63:98:7c:af:2e:b4:8d:b7:bf:64:53:fc:
                    aa:9a:25:bb:8b:aa:c5:8f:88:50:81:bf:6c:92:7e:
                    98:59:e6:d2:75:86:ce:3e:79:55:3a:68:46:00:ea:
                    ca:a2:e2:95:24:35:29:cb:e0:cd:bc:6c:ea:76:1d:
                    01:24:41:70:5a:fb:4d:b6:b2:08:21:ef:15:60:7b:
                    d8:cc:c7:f3:5a:88:37:c3:bd:35:ed:14:b4:92:76:
                    95:30:82:e2:c6:bd:7b:c8:2e:08:a8:52:b2:04:54:
                    5b:4f:47:d2:b2:bb:3b:c2:36:78:15:28:a8:a0:fd:
                    dd:28:4d:2f:5d:45:02:5d:86:50:28:4e:7b:3b:2f:
                    3b:53:79:7e:7f:29:ee:0a:29:bb:96:c2:a4:37:b1:
                    af:8d:a7:e7:07:40:30:54:5c:ff:7e:0f:71:44:13:
                    fb:76:14:73:91:48:a1:26:5b:18:55:46:03:d7:2a:
                    d9:27:a2:6c:f1:94:6b:03:3a:27:5d:f6:13:79:b3:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8D:54:EE:65:14:44:34:40:45:D2:9F:64:A9:2F:94:8E:4C:50:F7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FI1U7mUURDRARdKfZKkvlI5MUPc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:42:a8:10:78:fd:f2:2e:c1:b9:e8:d3:43:4c:5c:bf:99:59:
         ab:f7:61:bf:a2:72:50:6a:ac:5f:78:eb:b9:61:49:b7:19:1a:
         75:25:10:f2:d2:66:d8:62:8f:80:5c:b3:bb:fb:6d:d2:13:a1:
         3a:59:71:0d:27:bf:0b:1c:a5:1a:f1:62:6d:2a:c0:cd:4c:f7:
         75:7c:ae:64:4c:fe:8e:f4:14:03:24:7c:ef:aa:8c:68:e6:6f:
         4c:8f:a6:8b:7f:86:ab:15:ca:d8:9c:51:e8:ac:a7:45:07:76:
         f3:00:28:c9:bb:c0:87:0e:a3:9c:f8:df:cd:34:d6:99:9b:af:
         45:79:51:da:b1:d8:b4:35:05:15:15:96:dc:ab:bd:ff:bc:a6:
         ea:9c:93:08:cc:01:ff:07:98:9a:d1:17:f7:a0:92:29:24:0a:
         62:75:2b:d0:08:c5:e5:b2:d6:9d:dc:8d:df:9c:de:98:46:64:
         15:e4:d2:5e:04:fc:c0:83:b4:39:2e:33:7b:f1:76:bd:f6:c5:
         b5:4f:4f:ef:0b:f1:f0:a1:9b:54:97:5d:9c:48:b5:fc:c9:75:
         52:d2:fa:66:b2:68:95:39:41:88:41:ff:aa:56:c8:75:bf:89:
         36:9f:30:9f:f6:1d:3f:24:28:8e:e4:9f:56:8f:3e:14:13:99:
         49:5a:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:58 2026 by rpki-client