Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Fef4ZI616fb1MSgOHvqbbd0yjtM.roa
File:                     Fef4ZI616fb1MSgOHvqbbd0yjtM.roa (raw, json)
Hash identifier:          +i4jkAHAYNNPJCOJ6O8bjNw5Zk3R4cuNRfdI1hZvr2Y=
Subject key identifier:   15:E7:F8:64:8E:B5:E9:F6:F5:31:28:0E:1E:FA:9B:6D:DD:32:8E:D3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03F3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Fef4ZI616fb1MSgOHvqbbd0yjtM.roa
Signing time:             Tue 31 Mar 2026 08:11:30 +0000
ROA not before:           Tue 31 Mar 2026 08:11:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        110.232.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=15E7F8648EB5E9F6F531280E1EFA9B6DDD328ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:bc:85:91:4d:fc:87:49:3e:fa:44:78:96:
                    d9:b3:1e:76:ae:45:04:6d:70:44:22:56:85:40:cf:
                    06:22:9b:92:8d:cb:05:b6:76:ec:60:72:a9:ca:66:
                    71:40:f7:73:e1:61:4f:8b:13:97:2c:4a:b2:71:0a:
                    c1:7a:0e:28:55:d2:8e:4b:03:45:8d:62:31:12:5c:
                    f8:e9:cd:00:e3:be:89:e5:5c:a4:a8:a9:44:82:7d:
                    1b:c3:c0:83:b5:e1:ed:74:92:23:60:d2:eb:31:18:
                    ea:ff:fd:76:01:cd:80:de:42:1a:51:bd:33:61:5a:
                    d3:c4:ee:47:b5:3f:65:93:ed:cd:e6:f9:ba:01:32:
                    cd:b2:17:fe:d9:ba:44:ce:8d:93:fc:26:fb:b1:24:
                    be:6f:63:55:5a:5e:1f:ce:e3:8c:6e:d1:ef:63:8a:
                    8d:4f:11:7d:45:48:cb:bb:d4:54:c7:8c:64:46:ab:
                    55:01:7d:97:6d:2f:83:a5:16:a0:01:83:03:79:d3:
                    37:c1:c9:ac:f8:b5:2c:53:4b:c9:1c:c3:7f:cd:87:
                    c5:c1:10:c6:0e:39:74:2f:2c:eb:fd:6f:ec:61:82:
                    71:d9:01:fb:d3:c0:af:fc:bc:9b:4d:4e:b4:a6:a0:
                    b6:4b:44:e5:2b:86:63:84:99:54:bd:8e:0f:b4:80:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E7:F8:64:8E:B5:E9:F6:F5:31:28:0E:1E:FA:9B:6D:DD:32:8E:D3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Fef4ZI616fb1MSgOHvqbbd0yjtM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:bd:05:cc:06:12:85:90:3d:98:4c:b1:fa:47:ad:04:9a:
         26:10:49:8a:5c:0f:e1:bb:cd:c9:da:5f:f8:15:d3:db:86:d0:
         64:68:76:56:ec:84:50:37:cc:99:ab:5a:f3:35:b8:d7:33:e2:
         da:bd:21:77:87:fd:ab:c5:e1:d4:46:d1:48:e9:de:f7:b8:38:
         0a:31:f2:62:c6:31:1f:55:50:1d:c6:10:bd:dc:90:c8:ca:8f:
         f2:19:ba:3d:ee:b5:59:b1:70:ae:2d:c9:e7:43:ae:42:bd:ee:
         53:ac:af:fa:82:d2:eb:6d:a5:26:06:54:a3:90:4c:f2:37:c1:
         73:b3:e0:5d:98:82:8a:6c:85:31:35:43:11:5c:95:c1:48:07:
         4d:29:83:57:f6:27:28:79:6d:a9:06:8f:46:e2:6c:4b:0e:59:
         a0:b4:4b:1b:aa:d3:2e:68:3a:5d:3f:51:60:b7:ca:8a:78:84:
         5c:f8:33:32:83:95:30:b5:13:ea:d2:37:ba:27:7c:f3:9a:f0:
         46:bc:de:c4:af:00:28:a6:b9:5c:75:8f:3b:c8:58:fc:e4:7f:
         3f:43:f5:d0:83:07:52:34:ef:2d:26:95:7a:21:e7:15:87:e5:
         fb:50:b3:bf:d1:3f:93:cc:6f:7f:39:e6:13:29:d5:96:f1:d6:
         51:1e:f8:7c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODExMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1RTdGODY0OEVCNUU5
RjZGNTMxMjgwRTFFRkE5QjZEREQzMjhFRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4bbyFkU38h0k++kR4ltmzHnauRQRtcEQiVoVAzwYim5KNywW2
duxgcqnKZnFA93PhYU+LE5csSrJxCsF6DihV0o5LA0WNYjESXPjpzQDjvonlXKSo
qUSCfRvDwIO14e10kiNg0usxGOr//XYBzYDeQhpRvTNhWtPE7ke1P2WT7c3m+boB
Ms2yF/7ZukTOjZP8JvuxJL5vY1VaXh/O44xu0e9jio1PEX1FSMu71FTHjGRGq1UB
fZdtL4OlFqABgwN50zfByaz4tSxTS8kcw3/Nh8XBEMYOOXQvLOv9b+xhgnHZAfvT
wK/8vJtNTrSmoLZLROUrhmOEmVS9jg+0gHJHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUFef4ZI616fb1MSgOHvqbbd0yjtMwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL0ZlZjRaSTYxNmZiMU1TZ09IdnFiYmQweWp0TS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANu6IAwDQYJKoZIhvcNAQELBQADggEB
AD6nvQXMBhKFkD2YTLH6R60EmiYQSYpcD+G7zcnaX/gV09uG0GRodlbshFA3zJmr
WvM1uNcz4tq9IXeH/avF4dRG0Ujp3ve4OAox8mLGMR9VUB3GEL3ckMjKj/IZuj3u
tVmxcK4tyedDrkK97lOsr/qC0uttpSYGVKOQTPI3wXOz4F2YgopshTE1QxFclcFI
B00pg1f2Jyh5bakGj0bibEsOWaC0Sxuq0y5oOl0/UWC3yop4hFz4MzKDlTC1E+rS
N7onfPOa8Ea83sSvACimuVx1jzvIWPzkfz9D9dCDB1I07y0mlXoh5xWH5ftQs7/R
P5PMb3855hMp1Zbx1lEe+Hw=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:07 2026 by rpki-client