Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PeoIcwpPdij5kt655tNjeK_h_0Q.roa
File:                     PeoIcwpPdij5kt655tNjeK_h_0Q.roa (raw, json)
Hash identifier:          R4rggAL2be8+udMfsNxUY6I+frh4VDRZP7wv13lIeM4=
Subject key identifier:   3D:EA:08:73:0A:4F:76:28:F9:92:DE:B9:E6:D3:63:78:AF:E1:FF:44
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0484
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PeoIcwpPdij5kt655tNjeK_h_0Q.roa
Signing time:             Tue 31 Mar 2026 08:12:41 +0000
ROA not before:           Tue 31 Mar 2026 08:12:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        202.78.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3DEA08730A4F7628F992DEB9E6D36378AFE1FF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:1f:5e:4d:fd:67:c4:1e:44:76:da:7b:02:
                    ac:f9:6c:15:22:51:60:29:30:21:ae:74:df:6e:7c:
                    4e:3f:36:f3:f7:21:2a:76:c9:fa:83:f1:5f:17:0a:
                    b9:b5:fa:65:40:84:90:e8:a7:5e:f8:0d:3b:be:e0:
                    7c:ed:c8:a0:93:95:df:56:cc:2b:a7:f1:70:b7:b4:
                    86:9e:fa:71:9c:d1:47:b7:e8:9d:80:4f:c0:99:c7:
                    08:ac:75:b7:a7:f3:d5:22:19:7c:1e:37:bd:f9:d5:
                    6f:99:93:90:41:4c:0c:29:59:98:fc:89:34:95:8b:
                    2d:de:38:05:50:ad:e1:0b:06:7a:d2:b9:f4:1c:e5:
                    48:08:2f:cc:fc:9d:ad:aa:3f:1c:ee:0b:58:a2:38:
                    14:fc:f1:46:29:a4:5a:56:d8:71:4a:e6:c7:89:cb:
                    04:7a:93:30:91:5d:d5:8c:60:e2:b7:43:7a:6f:5a:
                    8a:36:30:18:cf:25:cb:c2:88:6b:b6:0b:6e:15:f9:
                    98:38:0f:0b:0e:1c:02:84:c9:da:ff:a6:df:ea:3c:
                    8b:8f:c7:58:ae:83:13:ad:83:f3:a5:ac:94:49:b1:
                    64:85:5b:e9:b4:9e:0f:07:5e:cc:96:a4:b2:90:22:
                    05:1c:ce:74:65:d5:ad:8a:87:e8:a3:a8:16:a4:91:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EA:08:73:0A:4F:76:28:F9:92:DE:B9:E6:D3:63:78:AF:E1:FF:44
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PeoIcwpPdij5kt655tNjeK_h_0Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:28:26:4c:7c:bc:70:25:2b:95:20:b8:4f:b2:0a:87:cc:c0:
         d4:c3:eb:58:58:1c:67:f1:f0:56:c3:d5:24:9f:78:da:4c:cd:
         e3:23:d6:9e:07:d2:e6:93:d1:df:78:66:e8:78:f1:1b:61:0e:
         4c:61:36:85:5d:0f:e4:51:a5:97:1e:b3:5c:a1:64:a8:32:81:
         0b:0a:9e:9a:99:d6:77:84:45:a1:e4:b5:33:7e:c8:fb:af:5d:
         b6:e6:ea:fb:6e:76:20:8e:4f:9a:c3:b1:68:d2:e8:44:bd:57:
         ad:15:1c:3b:2e:94:02:49:8a:9a:8c:49:29:84:3d:1a:93:77:
         ba:17:02:8d:1b:2a:ff:02:49:ea:78:8c:cc:c6:05:6a:28:cd:
         d8:05:6f:7f:30:a6:74:71:d4:6e:43:1b:27:48:bb:f2:65:77:
         05:21:30:78:38:02:a8:17:81:94:43:09:e5:c6:bc:6d:80:ff:
         91:5c:a3:ac:da:6d:65:ea:75:e3:d0:6f:19:47:7a:00:42:d9:
         e7:ec:4a:55:bc:1a:66:ee:e1:78:e6:34:d5:92:01:f6:85:08:
         ee:4d:06:52:c9:e2:e7:07:00:78:ed:43:5f:41:e7:65:bb:30:
         fb:a1:83:15:49:6e:74:85:18:85:fc:06:e1:e4:68:c8:46:04:
         04:af:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:23 2026 by rpki-client