Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/FmfWKIPt6vj2-5W3IViafv_W8Yg.roa
File:                     FmfWKIPt6vj2-5W3IViafv_W8Yg.roa (raw, json)
Hash identifier:          Jot4qYPSyCjdRxveagh1Xl/PAUmoX7asVGbBmcUH5c4=
Subject key identifier:   16:67:D6:28:83:ED:EA:F8:F6:FB:95:B7:21:58:9A:7E:FF:D6:F1:88
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0430
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FmfWKIPt6vj2-5W3IViafv_W8Yg.roa
Signing time:             Tue 31 Mar 2026 08:11:58 +0000
ROA not before:           Tue 31 Mar 2026 08:11:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18134
IP address blocks:        122.50.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1667D62883EDEAF8F6FB95B721589A7EFFD6F188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:25:33:38:e3:5a:ec:36:99:c7:6e:24:7d:
                    f1:4a:94:27:88:1c:04:37:f8:2e:ea:13:0f:a9:3b:
                    85:bb:62:f5:1c:38:e5:35:38:52:c3:aa:bc:a5:e3:
                    2a:9f:cd:b2:32:70:b7:7a:53:bd:d7:ab:64:c3:0d:
                    74:9f:9f:22:b7:0a:bb:6d:50:a4:d5:ff:49:02:63:
                    c6:ca:9e:df:3c:9b:9a:4b:3c:79:dd:b5:85:3e:8d:
                    d1:42:8f:59:83:6c:74:97:62:17:52:d5:7e:21:3d:
                    21:3f:9d:25:54:c6:a0:24:f0:95:e2:be:8a:1d:d9:
                    bc:32:da:99:b8:fe:19:30:af:a5:0b:58:a0:ff:ea:
                    1d:4f:d1:fc:f7:ec:ab:f7:cc:19:04:a8:49:15:8c:
                    bb:ef:46:8e:89:54:c1:b9:83:1c:92:39:e0:3e:3e:
                    1e:f2:52:38:bd:eb:92:66:a8:d7:50:e2:35:f3:8e:
                    fa:5b:1d:81:57:10:c4:cf:e7:fe:3a:e1:79:08:67:
                    a8:23:68:84:ff:b0:0f:e8:90:98:60:2e:27:58:dd:
                    ec:23:0b:88:4d:e8:fa:e1:26:04:e0:5c:d4:6d:55:
                    45:b1:ea:2b:08:18:1c:d3:be:df:68:2a:6a:b6:d8:
                    5d:0f:07:8f:ab:d1:ab:3e:c0:70:42:af:16:26:df:
                    bb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:D6:28:83:ED:EA:F8:F6:FB:95:B7:21:58:9A:7E:FF:D6:F1:88
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FmfWKIPt6vj2-5W3IViafv_W8Yg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:95:f6:97:71:14:38:c1:b1:f8:a9:1b:5e:f4:21:e7:17:d9:
         9a:6b:8e:75:e4:9d:d2:9f:12:f5:ed:5b:21:e2:43:a6:c2:1f:
         29:0d:05:f4:bb:cd:b6:63:c8:bd:72:c3:dc:95:19:df:69:d9:
         7d:52:50:ac:6b:86:d8:3e:be:a3:0f:bc:e7:59:01:cf:1f:15:
         d8:36:a8:b3:f2:50:eb:56:3f:ee:5b:77:b0:aa:39:fe:09:2e:
         f7:10:de:db:44:5b:a7:ce:42:d6:ce:3c:80:ed:95:54:78:1e:
         ad:4a:f7:7a:f5:8b:38:6a:26:1d:db:f6:eb:2e:af:8d:a6:91:
         17:60:ff:8e:77:dc:40:b5:9f:43:b9:43:64:f5:5a:36:68:10:
         f3:62:f8:a2:21:6c:74:eb:cf:e4:23:65:f2:77:40:4f:ba:b5:
         c8:97:f2:73:ef:d8:84:ad:1e:5e:ea:a2:b3:df:14:f0:11:c2:
         2d:f9:ca:2d:7a:53:fe:8e:17:00:28:90:e6:e3:2f:83:f5:44:
         65:ea:dc:9e:95:7f:81:52:69:23:de:73:42:89:91:1f:82:4b:
         1f:65:d4:80:20:44:3a:26:6c:99:d4:2f:b8:88:7d:95:f9:f6:
         23:91:34:6f:12:80:dc:ac:b1:0e:df:66:47:d1:b4:6a:33:a9:
         9e:63:d2:7b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODExNThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE2NjdENjI4ODNFREVB
RjhGNkZCOTVCNzIxNTg5QTdFRkZENkYxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJMiUzOONa7DaZx24kffFKlCeIHAQ3+C7qEw+pO4W7YvUcOOU1
OFLDqryl4yqfzbIycLd6U73Xq2TDDXSfnyK3CrttUKTV/0kCY8bKnt88m5pLPHnd
tYU+jdFCj1mDbHSXYhdS1X4hPSE/nSVUxqAk8JXivood2bwy2pm4/hkwr6ULWKD/
6h1P0fz37Kv3zBkEqEkVjLvvRo6JVMG5gxySOeA+Ph7yUji965JmqNdQ4jXzjvpb
HYFXEMTP5/464XkIZ6gjaIT/sA/okJhgLidY3ewjC4hN6PrhJgTgXNRtVUWx6isI
GBzTvt9oKmq22F0PB4+r0as+wHBCrxYm37utAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUFmfWKIPt6vj2+5W3IViafv/W8YgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL0ZtZldLSVB0NnZqMi01VzNJVmlhZnZfVzhZZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV6MiAwDQYJKoZIhvcNAQELBQADggEB
ANGV9pdxFDjBsfipG170IecX2ZprjnXkndKfEvXtWyHiQ6bCHykNBfS7zbZjyL1y
w9yVGd9p2X1SUKxrhtg+vqMPvOdZAc8fFdg2qLPyUOtWP+5bd7CqOf4JLvcQ3ttE
W6fOQtbOPIDtlVR4Hq1K93r1izhqJh3b9usur42mkRdg/4533EC1n0O5Q2T1WjZo
EPNi+KIhbHTrz+QjZfJ3QE+6tciX8nPv2IStHl7qorPfFPARwi35yi16U/6OFwAo
kObjL4P1RGXq3J6Vf4FSaSPec0KJkR+CSx9l1IAgRDombJnUL7iIfZX59iORNG8S
gNyssQ7fZkfRtGozqZ5j0ns=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:48 2026 by rpki-client