Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Pnh6Hy7vc5f3a2u136ey26EU8Ok.roa
File:                     Pnh6Hy7vc5f3a2u136ey26EU8Ok.roa (raw, json)
Hash identifier:          noM6p5f7ZQpdwEVndpQHS2OXdadKq5wJVaztkuu81gg=
Subject key identifier:   3E:78:7A:1F:2E:EF:73:97:F7:6B:6B:B5:DF:A7:B2:DB:A1:14:F0:E9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       046E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Pnh6Hy7vc5f3a2u136ey26EU8Ok.roa
Signing time:             Tue 31 Mar 2026 08:12:30 +0000
ROA not before:           Tue 31 Mar 2026 08:12:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        114.198.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134 (0x46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3E787A1F2EEF7397F76B6BB5DFA7B2DBA114F0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:f6:e1:ca:67:29:f7:89:2e:68:43:53:dd:
                    43:a1:a9:e9:81:17:bc:0a:4f:a6:b9:bd:e8:12:d1:
                    3e:66:0e:3a:bc:ad:c4:ec:64:f5:33:fe:7d:1a:fc:
                    f7:06:ab:2e:f8:fc:66:d7:a3:14:bc:4e:00:24:cf:
                    17:2c:5d:0e:19:8b:ef:56:04:4c:e5:dc:26:59:12:
                    e4:9a:1e:18:f4:47:77:09:0f:dc:00:35:7d:9b:1c:
                    53:20:6c:c7:11:5b:8a:3a:c1:17:02:49:c8:a9:b1:
                    0c:88:f5:21:1a:df:5d:6d:60:e1:86:dc:a2:8f:99:
                    66:df:0a:50:3e:9d:c1:01:7c:fe:4b:fc:79:89:a2:
                    04:24:c3:14:73:a6:e8:84:f7:de:55:32:32:c2:58:
                    06:73:3a:47:74:57:c7:aa:25:da:8e:50:89:87:90:
                    a5:14:95:93:4d:a5:d0:4d:a1:dd:14:21:e4:be:08:
                    71:36:60:74:c6:81:15:00:b2:50:94:ba:81:c1:75:
                    01:6b:d7:8f:c2:ed:19:8b:77:c6:02:a4:1c:5c:4a:
                    d4:3c:92:59:df:02:22:10:0b:0c:a2:5d:74:a6:d0:
                    8b:92:04:31:60:e5:40:3a:d7:72:91:6e:3f:c6:97:
                    95:14:77:fc:8c:41:3a:1c:bf:71:89:62:e7:27:24:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:78:7A:1F:2E:EF:73:97:F7:6B:6B:B5:DF:A7:B2:DB:A1:14:F0:E9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Pnh6Hy7vc5f3a2u136ey26EU8Ok.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:5b:a2:8d:93:02:e1:9c:f5:52:55:64:88:78:2f:a2:e0:
         52:23:80:62:7e:75:7b:2a:fa:54:96:95:55:e1:63:ba:ed:6f:
         bb:43:31:45:74:d9:3f:dd:16:4d:61:7a:3a:d8:3d:39:e8:b2:
         15:93:d6:0c:6e:26:16:5b:73:e0:a9:b9:c2:9d:91:9f:3f:6a:
         02:45:b4:d2:48:20:74:f0:b0:4e:18:85:0a:97:76:61:2a:61:
         40:1f:15:73:8f:2d:cb:a7:d9:b0:ab:67:e6:25:e6:e7:3e:e9:
         36:a6:7f:a4:77:0d:77:10:01:e1:d5:7f:85:73:ad:a4:c5:ee:
         76:1c:40:a9:40:bc:dd:d6:c1:56:4e:8d:dc:84:f5:66:d5:43:
         b1:1d:25:a9:e7:e7:ad:40:12:b5:30:2a:a9:6b:63:86:62:44:
         e9:d4:63:89:97:c6:c6:f1:2a:6f:5e:d4:59:aa:13:40:e5:21:
         65:6b:49:1e:d8:e8:2a:0f:f7:43:5f:73:97:83:b0:f9:29:0f:
         84:6e:99:a2:25:1b:0d:17:49:42:e4:56:e1:af:b8:62:2d:4a:
         20:dd:31:db:bb:f0:bc:c7:f5:00:63:c6:0c:9c:d4:83:df:95:
         1f:3d:ca:0b:9c:dc:b0:95:a0:bd:2e:c5:3c:d5:9d:44:e7:79:
         24:74:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:16 2026 by rpki-client