Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/OmZWVfKwmjUOyCzw4eICtLbIJjE.roa
File:                     OmZWVfKwmjUOyCzw4eICtLbIJjE.roa (raw, json)
Hash identifier:          t1UYaCWmyodQqIqp9azdKUqovB+Ei15lgulUSGnnG6A=
Subject key identifier:   3A:66:56:55:F2:B0:9A:35:0E:C8:2C:F0:E1:E2:02:B4:B6:C8:26:31
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0429
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OmZWVfKwmjUOyCzw4eICtLbIJjE.roa
Signing time:             Tue 31 Mar 2026 08:11:54 +0000
ROA not before:           Tue 31 Mar 2026 08:11:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        202.179.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3A665655F2B09A350EC82CF0E1E202B4B6C82631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:4b:0b:c4:01:62:28:01:a1:43:bd:f6:58:
                    20:8c:74:1e:59:9b:b0:70:82:65:21:f9:0f:ff:12:
                    9c:15:3d:14:5e:50:cd:96:b3:ae:46:4a:21:fd:fb:
                    b1:25:46:58:1e:2a:e2:81:85:53:3f:77:a5:54:d0:
                    98:12:04:fc:6d:5a:23:fd:96:b2:4e:4c:8e:22:ce:
                    2c:4e:aa:f6:56:a2:ac:9c:2f:3d:8e:f8:3f:07:0c:
                    b5:fd:bb:58:de:d2:da:57:ca:51:ad:50:32:e9:af:
                    97:83:6a:16:0d:71:ef:25:9d:16:09:1e:6e:63:b8:
                    02:40:19:4d:15:d8:a1:b4:fb:c5:5d:0f:c0:69:a3:
                    6d:48:3b:60:e5:c1:13:1c:94:65:33:21:41:54:5e:
                    a6:d8:c0:e6:e2:de:33:46:7d:30:61:97:39:c5:39:
                    21:83:0b:78:2b:fd:12:8c:6c:59:78:87:be:19:87:
                    c4:9f:94:4b:70:14:bd:28:1a:0a:49:51:12:3e:bd:
                    e7:15:f9:87:a0:95:75:e7:db:11:05:37:d7:45:22:
                    be:9f:58:be:1e:f7:b6:9c:49:1d:fd:f9:e6:6e:ca:
                    8b:9a:b4:43:19:8a:1c:a9:86:e5:8b:e1:65:b7:0f:
                    dd:aa:96:76:7d:87:de:4e:e4:b8:01:af:32:62:e8:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:66:56:55:F2:B0:9A:35:0E:C8:2C:F0:E1:E2:02:B4:B6:C8:26:31
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OmZWVfKwmjUOyCzw4eICtLbIJjE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:6d:85:ec:16:fb:85:68:64:87:22:ca:9c:fa:b2:fc:91:
         14:b2:81:9d:bd:51:fa:2b:0b:69:87:0f:4e:d0:2d:39:73:4d:
         7b:51:38:13:a0:2e:92:f0:72:a3:e6:4a:4a:2e:fe:ea:e2:df:
         63:4e:00:47:9d:a5:f3:55:86:50:da:62:27:3a:25:ee:00:93:
         2c:4e:67:a3:9e:15:14:32:a3:d4:6e:bb:17:86:77:34:52:b9:
         23:5e:82:fe:cd:d5:ef:12:c7:f3:2c:0b:51:28:6f:27:ae:a0:
         0a:90:31:cd:58:1e:17:31:12:c1:e4:de:2b:ba:41:b0:cb:bf:
         71:dd:a0:af:0d:97:fd:ad:50:01:17:49:84:21:e5:f3:e8:b9:
         9a:97:52:07:19:1f:cf:d1:f0:c5:c2:ed:3a:a4:46:fb:0f:a2:
         3b:7a:f0:95:02:26:60:29:69:6a:83:3d:fa:e7:e6:65:e3:86:
         5f:6a:2f:ff:88:9b:68:1d:66:71:c7:64:df:93:ec:70:fa:25:
         4b:64:06:1b:9d:67:97:f6:fa:f7:c9:e8:c8:98:da:4c:a9:68:
         b1:0f:0c:5d:1e:64:f7:2b:d4:15:b1:f6:8e:e9:a9:ea:48:60:
         db:bc:91:62:dd:74:1c:a3:b0:53:80:e1:0a:12:83:97:be:99:
         4f:4d:5c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:39 2026 by rpki-client