Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Guwd5xyhZMs7M5UH_aHjyMW3U90.roa
File:                     Guwd5xyhZMs7M5UH_aHjyMW3U90.roa (raw, json)
Hash identifier:          lxRYOH5eq3VyMPFzZEERBR3SgqBduJWa7St/rBiQOdU=
Subject key identifier:   1A:EC:1D:E7:1C:A1:64:CB:3B:33:95:07:FD:A1:E3:C8:C5:B7:53:DD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0410
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Guwd5xyhZMs7M5UH_aHjyMW3U90.roa
Signing time:             Tue 31 Mar 2026 08:11:43 +0000
ROA not before:           Tue 31 Mar 2026 08:11:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23788
IP address blocks:        219.100.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040 (0x410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1AEC1DE71CA164CB3B339507FDA1E3C8C5B753DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:06:49:c8:7a:9a:50:50:4b:53:32:87:f4:
                    cf:e5:19:49:50:9a:4c:01:35:0f:b8:68:46:cf:dc:
                    b3:87:51:6e:a8:c6:13:55:c1:27:26:8a:b3:5a:26:
                    1c:a5:c6:88:43:03:cb:d5:12:ea:cd:11:ba:2e:07:
                    f8:ae:62:37:db:7f:9c:98:ea:e2:73:2d:99:c0:f7:
                    bc:a9:05:f0:91:c2:c4:e1:40:33:68:e9:d6:4d:c5:
                    4a:2d:18:e5:ee:b4:aa:32:f9:cc:8c:7e:4f:03:8a:
                    8b:18:61:ee:7a:cb:e1:75:aa:47:4a:dc:38:9e:e8:
                    e0:62:a5:ab:d5:cf:d5:70:13:75:fb:e5:72:66:d5:
                    5f:c2:65:9d:3f:b3:58:dc:21:5f:30:85:8d:11:7a:
                    ea:98:b0:2a:d2:7f:e5:79:a1:68:f1:47:dc:c0:8f:
                    1a:86:40:e2:f9:68:28:a1:c3:78:1b:7e:50:d7:28:
                    52:1c:7e:05:4a:7c:e5:92:4a:f3:6a:32:9e:b8:0f:
                    25:13:58:64:ab:ee:1d:48:4d:6c:db:ba:f8:44:75:
                    7c:75:f6:81:c5:55:f5:10:a0:e9:34:84:54:a4:6c:
                    db:a0:51:4a:53:6c:df:55:f5:f1:8a:fe:c7:6d:61:
                    5e:e2:f6:17:93:99:83:1d:85:6f:98:c0:ac:cf:b0:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:1D:E7:1C:A1:64:CB:3B:33:95:07:FD:A1:E3:C8:C5:B7:53:DD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Guwd5xyhZMs7M5UH_aHjyMW3U90.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:bd:e3:a8:d4:6f:c8:8b:48:22:16:db:c9:c8:c0:f1:d0:cf:
         92:d3:c5:ea:93:f9:5e:4e:29:a0:b1:ff:01:4a:77:7b:0f:bb:
         83:78:17:bc:e8:47:0a:84:50:3b:db:e2:0f:d8:2d:f6:42:fe:
         13:79:2c:ce:ea:8d:7c:20:1b:35:d5:03:52:d3:40:6e:12:93:
         9b:29:b2:b1:17:55:9f:f2:3d:7d:43:81:8b:5a:dd:51:07:64:
         51:d7:73:21:89:8e:1e:43:b9:44:54:b5:18:1a:55:2b:6c:de:
         ef:20:f6:1c:ba:fc:d0:96:e2:9a:70:06:dd:b7:4d:6f:b3:3a:
         9f:3c:25:0f:b3:73:53:32:d6:e2:2a:10:f3:b4:76:b7:d6:d4:
         9a:e5:f0:25:b0:b7:91:65:ab:00:67:e7:06:81:6c:d6:15:84:
         8e:b5:77:18:cb:fc:ba:ad:61:8a:54:b8:2a:a8:64:99:16:12:
         99:47:6e:ec:24:1a:dc:fc:12:2b:41:c8:dc:ec:5a:de:b3:16:
         5e:8f:c9:07:f7:06:bf:3f:94:40:f1:50:20:21:c8:0d:5b:1f:
         42:83:bf:ff:e0:13:a4:34:d8:d4:b1:87:19:96:3a:c8:65:42:
         2c:7d:a8:79:96:ba:d6:f9:7a:96:67:c5:44:a8:18:d6:c2:9a:
         09:00:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:52 2026 by rpki-client