Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MlfZ9OQG5RfJb1KCCD9yI7Fj270.roa
File:                     MlfZ9OQG5RfJb1KCCD9yI7Fj270.roa (raw, json)
Hash identifier:          tNET5HjRfdX+JbjBsKyGOHp9K0KRvqGskcbApnSuzbw=
Subject key identifier:   32:57:D9:F4:E4:06:E5:17:C9:6F:52:82:08:3F:72:23:B1:63:DB:BD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0409
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MlfZ9OQG5RfJb1KCCD9yI7Fj270.roa
Signing time:             Tue 31 Mar 2026 08:11:40 +0000
ROA not before:           Tue 31 Mar 2026 08:11:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        111.125.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3257D9F4E406E517C96F5282083F7223B163DBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:1c:09:7e:22:d1:71:89:d1:47:1d:3e:9c:
                    74:64:c0:9f:0a:09:f4:b5:56:5d:8e:03:8c:be:81:
                    ca:7e:95:b4:56:d0:a1:57:60:39:e1:7b:61:42:df:
                    e0:42:1f:eb:16:45:01:87:4e:11:0a:28:02:b7:e7:
                    0e:c7:48:06:e5:08:95:b5:9f:c7:f4:df:08:23:5c:
                    4e:96:80:ca:8e:7e:1c:7d:62:6a:09:6b:7b:07:b1:
                    9e:98:7c:b2:e4:a6:e7:a4:ad:03:f1:36:bb:6e:7e:
                    1a:52:0a:c1:c7:3d:58:06:af:6f:5f:93:8c:10:cd:
                    70:58:3d:bc:dc:64:4d:0e:d1:4a:36:83:ca:1d:1a:
                    d7:5c:4d:c2:c7:b6:c1:1c:ff:6c:af:e6:43:3f:4a:
                    3f:64:c4:fc:66:28:b6:d5:6c:96:79:8c:b0:4b:0c:
                    05:f6:3e:9b:eb:4a:2e:58:2a:cd:04:96:b9:5d:61:
                    8a:f9:b7:a6:14:3e:b9:38:c4:a7:bd:a9:68:f2:80:
                    b5:a4:62:17:53:46:4a:89:a4:eb:05:1e:74:53:dd:
                    00:6a:20:0c:df:b6:c2:73:04:47:26:71:1f:bb:64:
                    36:1c:2e:00:7b:68:ff:e8:7d:16:a9:7a:5c:93:58:
                    11:7f:73:c6:d3:57:99:f5:b7:b8:d9:d9:d7:5b:7e:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:D9:F4:E4:06:E5:17:C9:6F:52:82:08:3F:72:23:B1:63:DB:BD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MlfZ9OQG5RfJb1KCCD9yI7Fj270.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:8a:b9:e1:02:36:4d:ce:5c:ca:c4:ff:92:dc:43:20:4b:92:
         1c:36:1f:62:ad:b0:6b:fa:90:f9:38:24:9b:8d:bb:ed:61:71:
         db:b2:61:27:34:22:5f:e3:8a:75:b1:07:b3:35:68:ec:e8:04:
         e1:7b:b8:97:84:cd:61:e0:9e:72:a8:ca:10:0c:7d:b1:bb:ed:
         e4:ae:00:0b:53:1a:36:5a:cf:a5:2d:b5:78:18:7d:75:cf:da:
         4a:4d:cf:a9:85:bf:dc:e0:02:d3:f4:0e:0d:86:dd:aa:7b:48:
         5c:2f:c3:c7:c0:7f:8a:b4:8c:be:f5:72:2c:e3:30:b7:10:9d:
         4b:e7:40:80:cd:0a:c6:4c:06:8c:a0:ef:86:7b:68:87:fa:fe:
         51:59:28:e7:7b:0a:38:7e:c7:a8:98:4d:0c:11:31:25:cb:ca:
         3a:fb:ec:f9:48:16:1a:4d:72:7d:93:84:5c:b0:a7:d3:60:63:
         d5:3f:ab:57:b6:e5:2d:39:9f:a8:c2:33:cd:48:1b:62:2d:e2:
         30:5c:24:ca:38:95:51:0c:54:07:bc:2d:da:1d:08:20:98:83:
         6d:d7:9b:37:fe:fd:c6:86:2a:11:59:0b:d5:f6:9f:cc:ec:e1:
         5d:73:6c:f1:18:c8:75:8d:dd:b4:ff:31:6c:72:cf:09:c6:57:
         ab:6a:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:40 2026 by rpki-client