Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QjPI2HXpmqWfrxbgATV_eHunJ6M.roa
File:                     QjPI2HXpmqWfrxbgATV_eHunJ6M.roa (raw, json)
Hash identifier:          BLVC6A2Yha/Wmbeu/cEEnKI1evkMMQaHQpn0dNwZBTA=
Subject key identifier:   42:33:C8:D8:75:E9:9A:A5:9F:AF:16:E0:01:35:7F:78:7B:A7:27:A3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       040B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QjPI2HXpmqWfrxbgATV_eHunJ6M.roa
Signing time:             Tue 31 Mar 2026 08:11:40 +0000
ROA not before:           Tue 31 Mar 2026 08:11:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        203.217.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4233C8D875E99AA59FAF16E001357F787BA727A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:03:0b:a7:6f:ff:1f:5a:36:af:92:5d:9e:
                    12:8a:f2:34:4c:11:24:88:7f:fa:76:49:ba:7b:f8:
                    38:4f:70:b7:d6:10:ff:98:cc:4a:90:a2:88:78:47:
                    cc:4f:a4:f0:7e:c0:7f:68:46:49:27:cd:bc:0d:8e:
                    0e:56:0d:d7:69:9a:b3:53:ed:7b:d3:23:42:e5:65:
                    c9:10:17:64:3a:a2:b6:07:68:3e:cf:b7:13:c3:18:
                    ba:62:e4:6f:fa:ea:00:bf:b3:c6:51:d4:37:59:38:
                    48:c6:e8:c1:32:b7:d0:7a:13:e8:f0:7a:a7:ff:e5:
                    f2:51:6f:f4:a7:1f:5d:6d:0d:b2:ad:ae:ba:78:b6:
                    b6:a5:cb:08:ce:d7:91:44:cb:66:39:6f:76:6e:cf:
                    80:22:1a:ae:b6:77:9a:95:c6:8e:a4:74:e6:bf:22:
                    90:f4:52:45:b0:06:a7:20:b6:ae:b2:ac:0c:50:a8:
                    8b:2d:03:c3:6b:f7:2a:5e:6e:42:e5:81:87:e7:2e:
                    8f:49:ec:cb:c8:1b:78:6c:ae:ad:88:2f:ad:de:f8:
                    01:d7:4c:27:a8:02:15:f3:a6:d9:b6:4d:5a:32:c5:
                    f1:a6:e3:45:1e:53:91:21:a2:96:88:1d:1b:71:bf:
                    1f:c7:9a:6c:34:8f:50:02:9c:fb:d5:ac:6d:b7:03:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:C8:D8:75:E9:9A:A5:9F:AF:16:E0:01:35:7F:78:7B:A7:27:A3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QjPI2HXpmqWfrxbgATV_eHunJ6M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:78:1e:41:77:e0:69:a8:d1:33:4d:90:44:c3:52:c5:a8:58:
         f3:ca:d9:53:46:58:fa:9e:7d:c6:43:fc:fb:07:e0:05:d6:1c:
         58:46:dc:f4:01:61:56:4c:3a:54:5f:ae:d8:13:8e:a3:58:31:
         d1:11:ec:ef:53:7b:c6:1c:40:87:bd:1d:93:e6:34:4e:d8:ae:
         fb:0c:5d:04:cc:ad:21:9b:25:60:53:66:6c:1e:48:91:26:47:
         82:6a:da:0b:9e:fa:34:87:86:dc:0f:08:e2:0f:ee:77:0a:b1:
         b9:9d:03:31:cd:a1:9d:2d:41:5c:26:e1:02:18:d4:59:36:4d:
         e0:a0:a1:85:27:ce:e0:85:c8:31:c4:18:06:5a:18:b0:de:5e:
         5f:b8:11:eb:7a:10:e7:f6:c7:d0:4a:fe:95:74:b1:d4:0c:f5:
         98:cb:b6:96:02:35:9b:73:62:6c:91:15:b5:ed:8d:0d:1e:b3:
         ff:0c:11:43:1c:f5:8e:c9:99:ae:02:ab:4e:7a:27:c1:cb:2d:
         21:a4:55:47:8e:d1:5e:a7:14:1e:26:17:10:2e:26:78:33:d3:
         af:a2:da:52:d8:d3:c9:d0:22:9f:70:72:c2:ba:b3:70:50:f2:
         68:7e:07:81:c1:c9:ad:ee:a6:03:a5:cc:54:da:b7:3b:44:73:
         0b:18:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:54:21 2026 by rpki-client