Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/F_q6VjOY7snUIYNhHAjq9tC4oVI.roa
File:                     F_q6VjOY7snUIYNhHAjq9tC4oVI.roa (raw, json)
Hash identifier:          MiQFYrWYoRJk8r4zi/BLByLY2xBMv51UnLS7G2NN/eU=
Subject key identifier:   17:FA:BA:56:33:98:EE:C9:D4:21:83:61:1C:08:EA:F6:D0:B8:A1:52
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0440
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/F_q6VjOY7snUIYNhHAjq9tC4oVI.roa
Signing time:             Tue 31 Mar 2026 08:12:07 +0000
ROA not before:           Tue 31 Mar 2026 08:12:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        219.105.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=17FABA563398EEC9D42183611C08EAF6D0B8A152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:cf:a9:73:33:13:60:39:93:45:fb:c9:e1:
                    81:6a:4c:c4:b7:02:74:22:c9:f8:6f:95:a8:83:fe:
                    f7:35:b4:87:b6:10:ff:63:e8:c4:ee:73:fe:42:ca:
                    a2:ba:0a:a7:f8:02:b3:60:cc:8b:ea:da:3b:ed:3d:
                    98:b4:2e:53:84:6f:e1:a9:3c:ca:a3:45:8e:42:51:
                    7e:a8:32:60:f9:16:eb:8c:98:cc:a9:17:5d:6d:7b:
                    b2:c9:c6:44:ae:69:74:61:44:7c:7f:16:35:4a:43:
                    97:ee:3c:8f:46:0b:18:5c:d0:8d:cd:67:9b:e0:02:
                    70:9c:75:c4:cc:dc:cf:ae:cb:59:ee:72:a0:2b:5e:
                    49:f9:1d:9b:03:4b:21:40:64:c4:ac:a0:82:12:90:
                    ac:67:b8:f4:46:3d:27:da:fc:1d:4f:0c:52:cb:d6:
                    13:7c:a2:c0:7f:63:bb:3b:e5:8a:74:7d:31:81:e3:
                    2f:ed:50:60:43:4a:cc:59:4c:3e:f9:45:bd:92:22:
                    4b:74:9f:4e:db:d1:5f:a6:2c:65:cf:69:94:bb:71:
                    5b:7e:0c:81:9f:72:98:a5:5f:bb:94:52:ef:75:14:
                    ee:43:03:17:d0:0a:e5:b5:10:bb:3e:05:20:28:e4:
                    f6:1f:eb:91:81:31:25:e5:b6:dc:50:13:c9:a4:cb:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FA:BA:56:33:98:EE:C9:D4:21:83:61:1C:08:EA:F6:D0:B8:A1:52
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/F_q6VjOY7snUIYNhHAjq9tC4oVI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:fa:5a:f0:7a:3a:46:60:f9:b2:18:be:ea:cb:01:bf:cf:4e:
         ee:f6:1b:88:32:22:57:9a:b1:5e:66:5a:39:40:c0:e2:6e:31:
         28:3a:bd:c8:13:6b:58:77:4c:1e:d7:97:63:40:29:00:20:6e:
         20:98:d4:ec:66:12:cc:27:98:8d:52:65:08:30:74:7b:da:e3:
         55:24:c5:9f:11:8f:d0:80:48:0e:03:25:08:af:71:7c:05:fa:
         7b:e6:06:08:b4:56:5b:61:60:bc:3c:70:48:d9:74:ea:0a:8e:
         68:4a:02:2f:83:cc:59:60:c8:35:a2:e6:81:a9:dd:95:c6:a4:
         36:46:5f:8d:67:03:48:d4:d0:70:5e:79:59:9d:8f:3e:19:a7:
         eb:e3:da:a1:e6:c9:c5:67:0a:07:7f:2d:ae:f7:d1:32:6b:67:
         75:4d:6e:59:f3:3e:a0:11:a7:5b:26:6e:73:d0:e7:2a:3f:93:
         a8:17:5a:cb:fa:a7:9f:cf:02:04:3b:6f:87:bb:62:d1:03:e4:
         23:df:77:82:ee:f3:05:b7:60:34:9e:19:b3:13:99:70:94:1a:
         ac:94:d4:b9:57:70:25:b7:c6:ae:70:34:90:21:c6:38:2a:5d:
         dc:60:bd:04:ff:e3:cd:c5:55:70:28:db:5f:0a:7f:93:4d:1d:
         30:f1:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:35 2026 by rpki-client