Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/JpbF227PmjyMEa0T2upJYlLsiCw.roa
File:                     JpbF227PmjyMEa0T2upJYlLsiCw.roa (raw, json)
Hash identifier:          UgWS3VUaslWuwGbOeoEWN/gcE+hQBswciy2pQSVQZN0=
Subject key identifier:   26:96:C5:DB:6E:CF:9A:3C:8C:11:AD:13:DA:EA:49:62:52:EC:88:2C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       047A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JpbF227PmjyMEa0T2upJYlLsiCw.roa
Signing time:             Tue 31 Mar 2026 08:12:37 +0000
ROA not before:           Tue 31 Mar 2026 08:12:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        180.149.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2696C5DB6ECF9A3C8C11AD13DAEA496252EC882C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a7:85:4d:55:d4:e2:5d:78:63:57:06:52:3e:
                    d4:ea:bc:b4:19:53:ff:d1:d1:8e:81:cc:41:93:ac:
                    2e:4b:9d:09:30:7a:96:91:94:65:88:45:24:0d:d8:
                    b8:1b:9d:5a:e1:8d:5f:b5:b0:3f:99:b0:db:83:72:
                    c7:d9:aa:ff:08:cd:d0:90:08:43:3d:b5:27:fe:41:
                    a0:a1:24:2b:fd:24:95:1e:46:d5:47:32:5b:ee:0b:
                    1a:1e:81:b6:53:dc:c8:9c:54:c4:a1:ee:ae:a9:6d:
                    50:88:eb:40:32:f3:9c:c7:f6:36:1f:cd:a5:06:8f:
                    e5:3c:c2:ac:05:f5:fe:c3:ed:77:f3:80:f9:fa:d4:
                    bc:3c:43:90:b3:e6:22:2c:aa:dd:0f:f3:a1:67:ec:
                    34:49:c1:55:c4:b4:3c:56:3e:13:d4:dc:b9:c7:1b:
                    df:3c:fb:10:8a:47:22:df:1a:c8:02:c5:08:15:0e:
                    5b:43:9f:d3:45:ba:cf:c6:9c:1a:bb:aa:1e:58:e3:
                    15:a6:a8:c1:ce:5c:29:74:7f:88:a5:d5:c0:f9:e6:
                    1b:08:a8:42:43:5d:38:ee:cd:42:b8:03:66:56:2a:
                    b4:9a:2d:aa:37:c5:4f:62:59:2f:e1:0b:ee:25:e2:
                    8c:4b:7a:0f:2d:36:db:42:34:1a:0f:2c:4c:ef:3d:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:C5:DB:6E:CF:9A:3C:8C:11:AD:13:DA:EA:49:62:52:EC:88:2C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JpbF227PmjyMEa0T2upJYlLsiCw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:2c:68:25:dc:c1:36:45:b0:a9:86:57:57:45:4c:6a:1f:
         77:16:c8:6a:ca:ed:f5:e0:7b:30:cd:66:a7:a1:6b:68:6d:1c:
         53:7b:b9:68:38:1c:a6:da:34:8f:00:e1:96:33:9f:31:b3:77:
         64:99:47:9e:26:7e:d6:1e:2e:13:e3:43:bb:3e:22:c8:eb:21:
         c7:b4:5e:39:c4:66:5a:3d:6b:22:9a:20:93:bc:0a:41:91:eb:
         dc:01:22:fc:b6:b6:78:b4:d1:cb:06:ae:df:cb:4d:51:10:60:
         29:fb:cb:56:7e:bd:d9:f4:ac:fd:aa:8b:68:89:63:06:b2:4c:
         03:5b:6e:70:3d:5e:5e:ed:f5:cc:75:44:e3:c4:6a:c5:ef:66:
         e3:29:b2:71:53:4a:b0:6e:26:e7:fa:d3:8d:da:61:41:1b:fc:
         b0:ef:d2:0c:45:50:51:4c:3e:a3:f5:13:01:b8:74:5a:c2:46:
         31:0c:8f:60:94:26:06:78:38:53:f6:c1:75:74:c0:d7:26:c1:
         e6:76:11:c8:dd:30:56:0f:68:8d:dd:aa:cd:60:7d:4f:f1:ae:
         49:d7:bb:0e:0c:5d:e8:59:a1:28:b1:0a:da:be:90:6c:dd:cd:
         f1:73:f6:c0:e1:fa:7a:dc:19:b3:7f:71:bf:20:49:19:c1:e9:
         b5:5a:75:54
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyMzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI2OTZDNURCNkVDRjlB
M0M4QzExQUQxM0RBRUE0OTYyNTJFQzg4MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDup4VNVdTiXXhjVwZSPtTqvLQZU//R0Y6BzEGTrC5LnQkwepaR
lGWIRSQN2LgbnVrhjV+1sD+ZsNuDcsfZqv8IzdCQCEM9tSf+QaChJCv9JJUeRtVH
MlvuCxoegbZT3MicVMSh7q6pbVCI60Ay85zH9jYfzaUGj+U8wqwF9f7D7XfzgPn6
1Lw8Q5Cz5iIsqt0P86Fn7DRJwVXEtDxWPhPU3LnHG988+xCKRyLfGsgCxQgVDltD
n9NFus/GnBq7qh5Y4xWmqMHOXCl0f4il1cD55hsIqEJDXTjuzUK4A2ZWKrSaLao3
xU9iWS/hC+4l4oxLeg8tNttCNBoPLEzvPVfnAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJpbF227PmjyMEa0T2upJYlLsiCwwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL0pwYkYyMjdQbWp5TUVhMFQydXBKWWxMc2lDdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW0laAwDQYJKoZIhvcNAQELBQADggEB
AKgULGgl3ME2RbCphldXRUxqH3cWyGrK7fXgezDNZqeha2htHFN7uWg4HKbaNI8A
4ZYznzGzd2SZR54mftYeLhPjQ7s+IsjrIce0XjnEZlo9ayKaIJO8CkGR69wBIvy2
tni00csGrt/LTVEQYCn7y1Z+vdn0rP2qi2iJYwayTANbbnA9Xl7t9cx1ROPEasXv
ZuMpsnFTSrBuJuf6043aYUEb/LDv0gxFUFFMPqP1EwG4dFrCRjEMj2CUJgZ4OFP2
wXV0wNcmweZ2EcjdMFYPaI3dqs1gfU/xrknXuw4MXehZoSixCtq+kGzdzfFz9sDh
+nrcGbN/cb8gSRnB6bVadVQ=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:44 2026 by rpki-client