Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Go00a0vRVibkn6jd6GwDync9Zhc.roa
File:                     Go00a0vRVibkn6jd6GwDync9Zhc.roa (raw, json)
Hash identifier:          ahaWJM+aOphXiB7fbF4z1AOlmXDefOelBD/7i23NPyY=
Subject key identifier:   1A:8D:34:6B:4B:D1:56:26:E4:9F:A8:DD:E8:6C:03:CA:77:3D:66:17
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0428
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Go00a0vRVibkn6jd6GwDync9Zhc.roa
Signing time:             Tue 31 Mar 2026 08:11:54 +0000
ROA not before:           Tue 31 Mar 2026 08:11:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9378
IP address blocks:        202.179.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1A8D346B4BD15626E49FA8DDE86C03CA773D6617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:da:cc:3e:2e:dd:fe:d7:69:a4:98:84:6e:7c:
                    76:6b:ec:df:12:5f:14:28:7d:f9:e9:ac:71:f0:3f:
                    3e:5c:fa:77:39:4c:51:af:6b:0e:02:c6:1d:41:0e:
                    c3:cd:66:f7:49:6e:0a:32:1b:3e:cf:a9:d5:b3:39:
                    ee:53:2c:34:ff:b8:13:95:b3:6c:8d:d6:d3:90:43:
                    e1:62:33:ef:de:a8:1e:48:fa:ec:58:bc:69:e9:75:
                    8e:74:bf:cd:f9:89:01:60:05:2c:04:39:55:75:84:
                    c4:07:e7:de:d2:12:ff:1d:16:3e:44:7a:44:85:4f:
                    0c:a7:af:64:50:92:0f:aa:e9:c2:e1:78:25:85:c4:
                    03:e7:9e:d8:c0:86:b1:74:ed:9a:78:8c:bb:5b:3e:
                    9b:1e:3b:6c:e0:6a:ff:8b:34:df:6a:5b:b6:7b:4b:
                    97:aa:e6:29:74:f8:fa:12:96:23:35:59:18:42:fd:
                    ce:94:ad:74:b6:00:9c:3e:98:35:c1:50:20:9c:81:
                    d6:47:a3:cf:e4:b1:a3:e6:4e:ee:0d:ce:e2:af:3b:
                    6d:48:5e:ad:6a:95:3a:30:b9:de:44:91:cc:ff:ef:
                    2f:f5:21:15:fd:dc:0b:82:06:a6:6f:e5:f2:ef:4c:
                    60:41:ca:22:df:7e:9b:08:4b:3b:35:89:72:a1:ed:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8D:34:6B:4B:D1:56:26:E4:9F:A8:DD:E8:6C:03:CA:77:3D:66:17
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Go00a0vRVibkn6jd6GwDync9Zhc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:fe:d1:74:2f:6c:5a:27:69:59:81:d4:f2:48:4f:a6:ff:5d:
         f8:7c:b5:59:0d:56:99:93:2c:cc:29:0f:d7:91:1d:72:91:fd:
         99:8d:fb:41:48:1e:f9:ed:e6:6c:89:be:64:d3:74:c4:0c:9a:
         54:fd:ac:c7:24:39:60:9d:e8:0a:ab:a9:b7:18:c5:e8:ed:4a:
         9a:78:20:1e:24:42:b7:f0:f6:2e:ee:88:fc:1c:56:df:b6:d8:
         62:14:b9:41:1c:64:ff:da:df:ca:22:83:f5:60:e6:a6:7c:15:
         b9:5c:a5:44:8d:a4:b5:0d:b3:40:46:53:b8:a3:70:ce:0b:f2:
         f4:74:13:f5:93:c4:b1:55:b8:a8:81:17:f0:4b:c9:56:7c:4a:
         37:a0:85:25:76:a0:03:38:8f:74:73:af:0d:f0:f4:f5:be:da:
         8e:a6:65:2e:3d:e5:b5:58:52:55:6c:b5:6a:7f:56:24:42:4a:
         2d:4f:f3:b9:6c:fa:1d:38:5a:3c:9a:9c:f9:ac:2a:17:35:e3:
         e9:7f:03:da:d6:7e:26:77:82:83:ac:2b:ec:70:6e:1f:b8:09:
         fe:66:83:e6:07:fa:9e:e3:a8:0d:7a:e8:e6:b3:b5:9e:89:9a:
         65:bd:1e:0f:75:ab:f3:49:82:c5:e8:50:3e:b5:0d:b5:f9:ad:
         3e:54:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:08 2026 by rpki-client