Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/JGn3o5ESn2M9K3frDuzBqVF4VaA.roa
File:                     JGn3o5ESn2M9K3frDuzBqVF4VaA.roa (raw, json)
Hash identifier:          /wNZMHVeYje9hzrJjQSsdRy4WiIjDoWXDSPK9PD1Sns=
Subject key identifier:   24:69:F7:A3:91:12:9F:63:3D:2B:77:EB:0E:EC:C1:A9:51:78:55:A0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04BB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JGn3o5ESn2M9K3frDuzBqVF4VaA.roa
Signing time:             Tue 31 Mar 2026 08:13:08 +0000
ROA not before:           Tue 31 Mar 2026 08:13:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        211.124.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2469F7A391129F633D2B77EB0EECC1A9517855A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:00:5f:3c:27:82:7f:20:d7:cb:6e:e8:d9:87:
                    37:bc:df:ce:91:58:7e:ec:0f:89:39:3d:81:89:53:
                    cd:20:79:63:47:d3:f1:a1:98:8c:8d:e9:dc:5b:ad:
                    31:3d:ef:2a:e6:d3:d8:7e:76:44:c4:ea:30:a7:2b:
                    45:bb:08:ed:08:70:73:10:db:9d:e0:42:9d:ad:8d:
                    29:ff:96:20:34:db:96:a7:09:f3:2c:86:63:b2:5f:
                    08:cf:81:5a:60:ae:be:3f:09:73:04:b3:5c:47:af:
                    81:3c:68:26:30:b0:dd:ff:8f:37:a7:f6:8a:03:83:
                    e7:b3:2f:c3:ae:30:28:e8:08:62:b0:a3:49:4f:ed:
                    0c:67:30:25:20:19:0f:92:a2:dc:5e:00:bc:ec:43:
                    a0:64:b8:43:38:ca:97:41:ba:11:03:74:55:50:6d:
                    88:63:bf:58:de:7e:4d:39:8a:9a:e0:b7:ac:6e:56:
                    e9:ef:c8:9b:aa:fc:0f:b3:7a:aa:2a:78:51:8c:7e:
                    bb:b1:5e:33:e2:77:a5:6d:1d:b3:54:6a:f3:2e:a6:
                    89:be:34:1f:a6:a8:5f:57:25:7d:63:d7:e4:fd:25:
                    e6:33:b7:d4:bb:5a:a5:2d:45:a0:b8:ef:3a:c8:7a:
                    8f:e1:f5:f9:e4:c4:dc:bd:90:36:f0:ca:00:cf:48:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:69:F7:A3:91:12:9F:63:3D:2B:77:EB:0E:EC:C1:A9:51:78:55:A0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JGn3o5ESn2M9K3frDuzBqVF4VaA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:31:85:0f:8e:43:d6:64:92:04:d3:8b:d6:03:9f:e7:f8:02:
         f5:fe:b0:d3:ae:ba:76:6b:32:b4:8f:6d:c3:8e:d9:09:c1:0e:
         f6:f5:ac:aa:7a:28:5a:e9:25:38:67:cb:3a:c7:95:a0:d0:b1:
         7d:f6:82:71:8e:d0:e8:5d:36:c6:0e:fd:6b:9f:5e:03:e5:85:
         d6:a9:89:9e:99:9f:f2:d5:5b:76:a0:b4:6a:e7:8c:7d:60:b4:
         e7:2a:49:04:84:35:b4:20:15:9a:37:3b:a5:9e:a5:ac:c3:4c:
         48:e6:0e:4a:f1:f0:68:58:fa:65:f6:c5:2d:f6:03:49:51:b1:
         aa:0a:1a:3e:6f:31:40:30:c2:d8:4a:87:79:29:53:2b:36:45:
         25:94:de:ce:04:4b:72:98:62:16:2e:21:35:3e:1b:0a:cd:6f:
         b8:1c:d1:68:f0:ee:ec:1a:7c:6c:bd:07:16:3b:12:49:72:e5:
         72:ad:e5:9a:6a:c6:a1:f4:45:df:02:0f:15:87:58:32:ea:69:
         81:88:49:c1:9e:3f:45:4e:b2:4c:e6:df:42:c3:6b:26:1a:9b:
         8a:37:37:74:87:dd:53:d8:ca:f5:cd:23:f2:00:bd:ce:83:fa:
         5c:87:f6:87:40:70:f1:da:1c:3a:65:29:9d:c7:a9:5b:9b:ac:
         e4:65:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:38 2026 by rpki-client