Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VAJMyrXPmX881U-R_S-vbhm1x7I.roa
File:                     VAJMyrXPmX881U-R_S-vbhm1x7I.roa (raw, json)
Hash identifier:          EVAioG4nJIVXuWLI2r6WaHH3t3oNFhCtLoaf2E+0dPs=
Subject key identifier:   54:02:4C:CA:B5:CF:99:7F:3C:D5:4F:91:FD:2F:AF:6E:19:B5:C7:B2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04C0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VAJMyrXPmX881U-R_S-vbhm1x7I.roa
Signing time:             Tue 31 Mar 2026 08:13:10 +0000
ROA not before:           Tue 31 Mar 2026 08:13:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        219.114.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=54024CCAB5CF997F3CD54F91FD2FAF6E19B5C7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:42:52:30:cb:5f:4d:c4:23:01:1a:60:3d:
                    b6:bb:89:ba:bf:3e:15:3c:73:cb:3c:9e:5f:99:10:
                    76:50:e8:b8:bd:6f:c5:5d:13:df:1f:56:f7:1d:21:
                    40:fc:5b:2a:7b:43:3a:75:19:4b:b3:cc:65:cd:fd:
                    80:e0:c3:36:a0:03:cc:66:2a:71:1d:d3:81:b6:bb:
                    7a:02:7d:9b:76:d2:5e:0e:b3:67:b3:df:be:75:52:
                    61:4b:d1:42:52:ca:07:97:b8:9c:7b:e4:20:0c:07:
                    a4:10:f2:8f:39:7f:27:b9:86:41:35:cd:ff:e1:fd:
                    47:cb:d3:c4:55:d7:ae:8b:c6:c2:a0:4c:98:1d:a3:
                    66:dd:5c:2d:8f:ef:b2:bf:30:2f:ba:a1:4d:cb:7c:
                    b7:c7:2a:56:7a:7f:3d:2b:7e:4b:2d:e5:29:ee:7e:
                    7d:57:e0:8b:bc:8e:35:63:f7:a5:ac:09:8f:36:38:
                    56:3a:1e:a7:f9:44:a3:ef:83:68:a4:30:9b:b9:ca:
                    16:ff:d0:7c:a4:3f:87:38:a1:17:21:db:82:d6:2f:
                    ab:07:65:0c:f3:d8:46:d2:e4:b1:b4:c3:51:27:24:
                    02:80:38:04:e9:ac:06:d1:ac:16:c6:68:0f:ce:07:
                    78:d3:66:a3:6a:2b:10:cc:d1:73:e7:40:4c:04:fc:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:02:4C:CA:B5:CF:99:7F:3C:D5:4F:91:FD:2F:AF:6E:19:B5:C7:B2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VAJMyrXPmX881U-R_S-vbhm1x7I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         49:25:fa:eb:d4:5b:21:01:f3:82:7b:be:af:ee:f8:7c:88:83:
         de:0d:7b:1a:81:48:80:3f:6e:6d:35:30:97:9b:ca:9a:a6:d2:
         9e:06:7c:fb:8e:16:32:77:d4:3c:68:5f:4f:23:6c:0d:ec:5a:
         70:2c:b0:01:78:b7:f5:08:61:c2:7b:f5:c0:a8:0b:c3:cb:57:
         63:f9:0a:f4:35:36:81:5a:5a:d9:13:15:6b:c8:0a:be:1c:69:
         6f:56:e4:6a:48:2b:41:93:52:70:54:a6:13:d0:30:2e:6c:75:
         56:1a:66:7e:f5:34:ac:6b:66:04:20:f2:d3:12:a7:be:ac:22:
         d1:67:b0:bd:50:6c:74:9c:51:e8:41:6d:ce:d9:d3:92:a2:82:
         47:74:0b:44:7a:70:96:9f:a2:10:50:e5:10:ae:11:a5:31:e5:
         68:70:93:47:77:f6:3a:ef:60:eb:3b:8a:dd:17:4d:4b:5f:51:
         df:54:39:33:a9:6d:ab:cc:77:24:5f:09:3d:c7:c6:54:9b:fe:
         eb:37:04:79:55:c8:d6:48:40:10:35:4c:96:57:38:6c:09:24:
         85:d4:84:4d:ea:5d:bf:84:e0:1b:b9:52:19:15:14:10:c6:01:
         58:3f:1a:22:3a:9c:90:fb:75:75:54:4b:b1:e3:fc:39:ec:e0:
         2e:b4:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:08 2026 by rpki-client