Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/T1DyBIh42YeLMu8CjbX3OSANkxo.roa
File:                     T1DyBIh42YeLMu8CjbX3OSANkxo.roa (raw, json)
Hash identifier:          boyjh0g+wtsMvEG3IftAgwkPFxGvvIt9ofGfPurkZYU=
Subject key identifier:   4F:50:F2:04:88:78:D9:87:8B:32:EF:02:8D:B5:F7:39:20:0D:93:1A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04B7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/T1DyBIh42YeLMu8CjbX3OSANkxo.roa
Signing time:             Tue 31 Mar 2026 08:13:06 +0000
ROA not before:           Tue 31 Mar 2026 08:13:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        125.4.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4F50F2048878D9878B32EF028DB5F739200D931A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:ce:da:a1:32:19:c7:89:37:69:e0:85:8b:
                    98:80:8f:bc:69:70:e6:7e:a4:13:c0:22:6e:f3:ad:
                    43:96:c5:a2:94:4f:12:8b:62:3b:81:cb:ba:cb:17:
                    29:7a:dd:5b:6e:ba:83:c6:e8:91:b2:65:30:e7:23:
                    f2:2c:2d:b6:5d:92:f9:44:f5:51:46:fc:c4:f0:cb:
                    88:49:b9:8f:c3:43:fb:e1:06:15:69:9e:89:02:11:
                    ef:67:bf:93:b8:c0:f4:ee:3f:47:f6:6c:f5:5d:fd:
                    bc:fa:fa:83:4b:93:15:0a:42:de:cd:d3:88:1c:d5:
                    6c:73:2d:d8:aa:d8:e4:50:05:93:80:b9:38:8d:7e:
                    12:26:55:96:67:74:25:a2:1c:0c:3f:09:c8:08:f5:
                    88:ba:0f:08:14:3a:42:e3:26:5a:92:5e:59:ff:0e:
                    8b:08:1d:f7:dd:f1:76:53:cc:f1:6b:fb:08:0d:dc:
                    97:83:cd:b7:54:f6:de:9c:07:90:e6:d3:19:53:37:
                    de:e9:70:38:f4:6c:7b:98:b9:a5:eb:5e:15:ce:ae:
                    fd:98:c7:8c:6a:63:29:96:c3:30:f6:fd:86:3c:97:
                    d4:e6:0e:ff:86:96:9d:a8:ec:0c:d3:6b:bc:e6:fb:
                    da:e2:7c:d5:e8:26:c4:19:0a:7b:de:81:70:1a:fd:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:50:F2:04:88:78:D9:87:8B:32:EF:02:8D:B5:F7:39:20:0D:93:1A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/T1DyBIh42YeLMu8CjbX3OSANkxo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:7b:5a:3d:6c:69:b1:0b:e7:e0:73:3e:1f:5b:ab:de:8b:
         9f:c7:fa:19:45:67:fd:a0:dc:80:39:a5:8b:8c:db:1a:1c:c7:
         28:f7:e1:5d:77:09:6f:b7:78:17:15:b4:b1:c4:0c:6f:e3:31:
         c6:ee:7c:b2:0e:56:15:d4:b9:27:32:c4:72:e9:47:35:2d:37:
         f1:68:4a:b7:02:45:2a:d6:7f:74:06:ab:89:61:79:b9:1e:06:
         54:e3:76:2d:4b:96:07:ba:41:29:fa:0b:ec:dd:7b:67:54:2b:
         14:e2:2a:b3:c0:1f:22:ab:e6:3f:2c:40:a1:94:b1:c6:ff:d6:
         b0:e1:80:3e:01:7c:0c:64:35:b7:f5:f5:3b:44:67:fa:9f:1c:
         6f:5c:74:bf:b6:e5:fa:dd:ee:43:7a:2e:18:9f:ec:b8:eb:86:
         df:a1:0c:16:9b:e2:6f:37:52:4d:7b:99:46:fc:55:ec:72:eb:
         e0:c9:f3:38:6e:3f:93:a0:e3:1c:44:77:4b:ee:58:e7:62:ad:
         d5:c9:be:6a:ad:b3:0c:84:8d:be:27:c2:ce:df:a1:21:e2:52:
         36:58:25:99:5d:7e:b9:8d:69:f1:20:b4:b7:58:b3:3c:76:f5:
         cc:f3:17:1a:3a:8b:33:92:78:69:15:7f:2f:58:53:ea:a2:71:
         37:0e:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:58 2026 by rpki-client