Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/USersQ99cUFQo86JLlzSW1bNtS8.roa
File:                     USersQ99cUFQo86JLlzSW1bNtS8.roa (raw, json)
Hash identifier:          LZZ44z5mtn6w4Ita6zUr6oX9kZlwpglmUITmF53x4u0=
Subject key identifier:   51:27:AB:B1:0F:7D:71:41:50:A3:CE:89:2E:5C:D2:5B:56:CD:B5:2F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       048F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/USersQ99cUFQo86JLlzSW1bNtS8.roa
Signing time:             Tue 31 Mar 2026 08:12:47 +0000
ROA not before:           Tue 31 Mar 2026 08:12:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        210.172.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5127ABB10F7D714150A3CE892E5CD25B56CDB52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6e:ee:68:25:91:94:a5:5c:98:16:d3:c1:ff:
                    d8:4d:15:2b:f4:62:01:48:e9:d6:df:2c:63:65:4c:
                    f1:44:34:8d:b9:99:94:4f:29:98:a2:3b:a1:d0:8d:
                    52:54:3c:12:a5:0f:cd:32:ee:53:89:3f:1c:5c:0f:
                    5b:6e:a0:a8:ad:0d:83:55:06:9b:39:05:97:b1:45:
                    f3:47:97:d4:c9:2a:4a:35:c8:99:b6:f3:c8:ab:f7:
                    97:54:8e:d5:1d:32:f4:62:d3:1a:48:c9:e5:ad:2d:
                    70:08:bc:b6:04:be:5d:ce:f8:30:7f:25:de:00:a4:
                    8c:0e:22:67:41:0a:c6:20:fe:bc:91:88:c3:aa:c1:
                    50:ce:b1:12:dc:c8:36:1d:d8:99:ab:c9:ab:03:67:
                    3f:6b:68:95:b0:13:1f:9a:f5:98:16:1f:b4:0c:2e:
                    73:a2:1b:ac:62:37:81:19:2c:c6:cf:81:c6:43:9a:
                    e6:9e:e6:c3:12:d1:9c:ab:5a:15:60:c1:6b:be:e1:
                    e1:d9:a9:e4:dc:ae:12:db:30:25:e9:df:d7:28:dc:
                    04:0e:94:04:3f:97:98:2e:95:ad:28:47:35:2e:ca:
                    f5:f5:5f:75:1d:87:9c:bc:cf:db:0a:1a:b9:69:e5:
                    fe:21:1c:88:32:16:36:de:19:77:a4:f7:9f:ae:26:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:AB:B1:0F:7D:71:41:50:A3:CE:89:2E:5C:D2:5B:56:CD:B5:2F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/USersQ99cUFQo86JLlzSW1bNtS8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:41:17:3d:7a:7a:ec:4f:00:f1:53:77:3a:b0:5d:f9:f9:c7:
         d1:0b:17:b2:6f:25:9c:03:72:22:82:5a:60:ef:7f:93:42:a2:
         f1:41:f8:d4:c0:bd:f9:ae:71:50:1c:b2:a4:fd:96:d2:f9:0d:
         fc:1c:a4:ea:e7:09:cc:85:19:9e:d8:e6:54:fe:02:da:33:83:
         c7:f9:eb:b7:31:ce:f5:90:47:bc:72:c1:e5:fe:53:6e:44:d8:
         62:ca:d6:50:a0:16:24:b3:e7:cb:c2:32:be:85:c9:03:ee:1c:
         3e:57:db:85:cc:4f:61:5c:16:a9:f7:64:c3:96:4d:67:5a:68:
         09:c0:ff:3b:a0:11:19:43:7b:bb:08:3a:4f:52:31:a2:f1:86:
         0c:64:67:33:0f:49:fb:a9:a9:0c:a6:6b:30:5c:b1:ca:e9:be:
         53:a9:73:2f:87:2e:eb:4b:8b:e2:c4:12:ce:b4:ab:b0:49:ac:
         e5:69:02:22:93:47:2b:2a:1b:b3:30:19:77:56:f3:d1:19:3d:
         3a:49:d0:92:31:ca:4c:c4:1c:37:e0:c0:4b:d5:4c:c9:cf:ca:
         db:ee:f1:75:cf:18:fd:b7:6e:6d:64:b8:30:3e:e5:9d:3a:22:
         82:36:bf:92:b8:eb:f5:bb:97:8d:11:1b:85:5b:3f:8b:37:63:
         be:72:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:44 2026 by rpki-client