Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NBinUf-S6Jlkqyb3t_e6EpVzZA8.roa
File:                     NBinUf-S6Jlkqyb3t_e6EpVzZA8.roa (raw, json)
Hash identifier:          WVhKujKXOvo6/Rv3w6e+pigEttLV0ZPfQ4JT2JrfUuA=
Subject key identifier:   34:18:A7:51:FF:92:E8:99:64:AB:26:F7:B7:F7:BA:12:95:73:64:0F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       048B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NBinUf-S6Jlkqyb3t_e6EpVzZA8.roa
Signing time:             Tue 31 Mar 2026 08:12:45 +0000
ROA not before:           Tue 31 Mar 2026 08:12:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        203.124.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3418A751FF92E89964AB26F7B7F7BA129573640F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:3c:b1:ab:51:06:c8:fd:6f:71:43:5f:b6:
                    1f:94:3e:34:46:c7:4a:94:47:20:2d:10:82:c9:a3:
                    f3:3d:bb:2a:49:04:33:87:f4:e4:e5:3a:50:fa:46:
                    7f:2c:fa:00:da:88:54:38:6d:f5:39:c7:49:d5:f0:
                    25:85:27:9f:94:53:61:7f:b2:c2:40:a9:c3:92:1d:
                    3e:a3:33:88:71:ec:a0:9e:d4:b9:da:9b:97:de:d5:
                    3c:f5:f8:73:e0:5a:f6:3f:8f:a9:8f:f1:19:4e:9f:
                    21:74:8c:2e:d5:1a:89:4f:e3:a2:dd:95:9f:b0:bd:
                    e3:77:a9:a7:7e:e5:1a:31:8a:a2:db:c3:c6:f1:c1:
                    9a:fa:15:37:a6:81:5b:dd:d2:f3:86:26:6c:90:be:
                    73:02:49:f2:a6:46:3a:91:d4:26:d3:43:05:11:db:
                    2d:54:02:dd:16:50:06:3c:9d:97:6d:2c:b3:22:b3:
                    cd:98:09:9c:69:07:4e:51:72:33:d3:e2:59:ad:00:
                    70:73:e9:4d:e4:73:0a:07:5c:02:ec:00:2b:7d:67:
                    b7:40:f7:be:2c:17:98:ae:fa:a8:ee:e2:b1:95:26:
                    8b:24:1d:39:9e:91:00:73:df:53:ed:20:fe:6e:46:
                    78:78:23:5f:48:cc:62:c4:e9:d6:c6:7a:73:35:8c:
                    3b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:18:A7:51:FF:92:E8:99:64:AB:26:F7:B7:F7:BA:12:95:73:64:0F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NBinUf-S6Jlkqyb3t_e6EpVzZA8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:cf:b9:53:08:70:06:81:a4:ac:54:78:66:69:59:af:04:
         67:28:66:75:70:ab:79:48:b2:a3:87:c3:ed:da:d2:ea:e8:65:
         04:6b:49:5e:f9:34:b5:20:eb:6c:bd:c9:a3:e3:90:64:1f:ce:
         fc:31:6d:d2:e1:e9:1b:4f:cf:5a:7e:71:ca:cf:d4:5b:a6:f4:
         bd:0d:87:d7:17:51:b1:c5:b0:08:ce:47:4d:7a:53:c2:c4:65:
         2c:f3:6f:9d:05:5e:7e:98:4c:6e:fd:bb:7f:76:ce:37:f9:6d:
         59:fa:65:fb:98:32:44:6d:1a:5d:33:3d:cb:a7:b3:fb:68:48:
         01:d3:da:d4:c3:57:94:e6:fd:9e:53:3e:74:a6:ff:20:cd:b5:
         85:0d:f4:1f:67:00:0c:68:30:fa:0b:55:51:d0:7b:00:e2:0c:
         ae:53:3e:c6:a9:62:89:69:49:d8:d0:bf:ba:5c:e9:cf:1d:f2:
         11:1b:ba:b9:63:5c:57:36:9c:ee:82:f6:02:e8:7a:78:2e:90:
         f3:bb:49:20:06:cf:f3:e9:76:14:33:15:fb:85:12:30:30:00:
         2c:b4:cc:65:2b:d9:bf:54:3d:a9:22:c4:4f:64:41:ad:a6:65:
         ea:65:21:99:a5:6f:9b:e3:a4:ef:79:51:50:a6:ae:59:95:59:
         7b:89:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:26 2026 by rpki-client