Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/SFt562Ly8vA4_JGPcyYMkGiOfrA.roa
File:                     SFt562Ly8vA4_JGPcyYMkGiOfrA.roa (raw, json)
Hash identifier:          bNymXoyJGj86wRcMcFyAjtbV8cOUQYCUGxGXLRdBrOg=
Subject key identifier:   48:5B:79:EB:62:F2:F2:F0:38:FC:91:8F:73:26:0C:90:68:8E:7E:B0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0483
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/SFt562Ly8vA4_JGPcyYMkGiOfrA.roa
Signing time:             Tue 31 Mar 2026 08:12:40 +0000
ROA not before:           Tue 31 Mar 2026 08:12:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        202.72.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=485B79EB62F2F2F038FC918F73260C90688E7EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fc:43:75:e8:11:47:6b:3b:8e:64:2e:e9:a4:
                    cd:07:d0:67:d4:96:05:6f:3d:35:78:ed:dc:b9:9c:
                    a1:e4:f8:93:f1:99:b3:74:2c:43:fd:b5:45:06:ab:
                    66:e4:3b:c4:22:6e:22:65:3e:a6:bb:fb:71:06:10:
                    07:fb:ea:e3:05:1a:93:83:2e:2e:aa:e9:ab:b7:6a:
                    d9:ae:af:07:39:e1:28:08:95:b5:4f:b4:76:5a:32:
                    8d:32:be:a3:14:de:38:38:75:5a:61:6b:2e:63:af:
                    02:ed:67:57:68:eb:e8:18:53:35:06:16:31:ff:90:
                    c0:a4:f3:9d:d9:83:90:ad:1c:8d:c7:5a:51:68:82:
                    c6:6c:09:88:c2:d7:30:f1:1d:b1:7d:44:fe:ab:4f:
                    ac:dc:b3:c1:97:5b:db:bb:c2:78:40:03:41:b8:23:
                    86:c5:a8:3a:df:e2:31:47:7f:c1:72:4f:94:17:ac:
                    28:fe:58:36:80:0a:8d:e4:53:51:c7:b1:db:6c:9f:
                    42:72:3b:28:1e:6a:4c:38:53:47:9a:cb:1e:b2:fb:
                    ac:cd:d7:ee:c5:45:3e:03:cc:2f:ee:7b:21:b6:5b:
                    68:ed:c8:6a:7b:a2:12:79:b5:9a:2c:f0:50:c1:76:
                    0d:11:cc:f7:7b:1a:54:e6:dc:95:23:44:7d:5f:ad:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5B:79:EB:62:F2:F2:F0:38:FC:91:8F:73:26:0C:90:68:8E:7E:B0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/SFt562Ly8vA4_JGPcyYMkGiOfrA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:56:f4:f8:8a:b7:b3:18:46:b2:b5:8c:14:d3:16:ea:53:
         7f:fc:fb:ea:0f:90:90:3a:5c:14:88:76:e5:71:34:b4:e1:8c:
         bb:09:d0:ae:db:39:f2:2d:89:ee:d2:1d:80:12:7d:2d:13:26:
         16:9c:00:09:9c:2b:97:26:8f:6f:7e:31:47:d8:24:de:22:dc:
         a5:ba:0e:87:23:18:06:f3:fd:ba:9f:d9:34:2e:da:88:65:04:
         1d:f3:bd:2f:18:06:98:4e:99:c7:eb:b7:15:6b:49:aa:9c:26:
         1d:af:b3:8b:c1:69:16:70:85:c0:ff:12:a4:f0:ff:e2:88:64:
         08:e9:c1:74:15:c9:cd:4d:ad:36:ef:88:8a:2e:fe:28:0a:ad:
         0a:69:ca:b3:dc:e5:9f:f9:24:c3:ad:a5:8a:b9:d1:4c:26:78:
         f4:0d:5f:07:0b:5f:0d:22:77:c7:bd:98:24:6b:fc:50:63:5f:
         cb:8c:5b:7f:54:6d:c2:77:52:49:aa:e5:46:80:a7:61:8a:97:
         27:0a:94:ad:81:a5:cd:21:d8:ef:ef:46:0e:19:4e:5b:45:87:
         fb:49:e8:7a:b9:6b:66:92:31:a9:ff:9f:9b:a2:fd:da:ff:d4:
         dd:0f:f0:ef:3e:5c:27:4c:02:db:ae:a3:50:c3:b0:42:f1:11:
         c4:d3:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:07 2026 by rpki-client