Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VTEP5qSz9cPBsYGsq23i0ozmF3w.roa
File:                     VTEP5qSz9cPBsYGsq23i0ozmF3w.roa (raw, json)
Hash identifier:          RtM1xwyX7Z7j0SZZGe1jxxp6Wobp+fDfDJ/xuMI1/xg=
Subject key identifier:   55:31:0F:E6:A4:B3:F5:C3:C1:B1:81:AC:AB:6D:E2:D2:8C:E6:17:7C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       048E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VTEP5qSz9cPBsYGsq23i0ozmF3w.roa
Signing time:             Tue 31 Mar 2026 08:12:46 +0000
ROA not before:           Tue 31 Mar 2026 08:12:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        210.172.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=55310FE6A4B3F5C3C1B181ACAB6DE2D28CE6177C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:0e:85:10:70:89:d8:64:e5:37:2f:31:10:
                    01:46:9f:17:3b:bf:98:61:79:de:80:b9:9e:c4:cf:
                    02:d4:bf:a9:94:86:c6:f5:2b:e2:fc:45:5f:9b:7c:
                    68:8c:8c:59:71:c0:71:51:36:93:75:28:77:25:aa:
                    dc:67:d1:c4:ea:7c:aa:72:30:72:2d:82:4d:3a:b2:
                    1c:47:be:26:88:3d:10:26:d1:7a:03:24:4c:ab:a2:
                    53:fa:71:61:a3:e0:7b:43:6d:dc:72:fd:ce:68:29:
                    69:a5:6f:92:10:89:9a:04:34:96:dc:db:6e:44:ae:
                    7c:7a:5a:a1:8a:7e:2f:f4:34:27:92:56:c9:d3:d2:
                    26:a3:08:5d:c0:9f:1e:dd:65:a0:2c:a3:14:93:9c:
                    9c:6c:69:6e:fd:ea:e3:bf:6f:b2:ba:1c:a0:71:1a:
                    63:33:f2:10:b1:21:fa:c0:50:a8:75:81:a0:06:94:
                    88:96:ec:19:cc:81:14:d9:11:94:a7:bf:14:fb:f0:
                    e2:a5:e8:14:63:74:50:32:97:47:4e:28:1a:45:37:
                    48:ab:f9:0e:4a:e4:eb:ad:a5:28:ba:7f:fd:b5:66:
                    fc:c1:98:5b:3f:66:18:af:64:b7:5a:80:74:ce:0a:
                    e5:00:ba:30:d1:27:46:19:8d:97:63:59:eb:fa:51:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:31:0F:E6:A4:B3:F5:C3:C1:B1:81:AC:AB:6D:E2:D2:8C:E6:17:7C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VTEP5qSz9cPBsYGsq23i0ozmF3w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:14:e8:1f:b7:c5:6a:dc:94:38:31:ae:7b:0b:6e:04:21:
         5b:1a:d5:ef:98:36:0b:ba:7a:83:61:7f:66:a6:1d:f9:64:04:
         25:34:5c:ae:54:2b:8c:a4:7c:59:1d:8c:71:33:09:5a:9d:89:
         90:d2:5e:21:a0:73:bb:21:67:f9:6c:fb:e9:d5:db:3c:1a:7e:
         5f:f4:95:5e:fb:f1:fa:86:9b:12:55:73:32:9b:16:0d:2f:78:
         bb:d3:6d:0c:2f:16:4c:21:c1:59:2e:2f:c5:7c:32:75:af:f5:
         44:51:e7:f5:09:b9:4a:41:c1:82:bd:68:28:98:61:dd:f7:4f:
         6d:a1:6c:65:18:aa:c7:78:13:53:be:a6:9f:f2:8c:1c:1b:52:
         20:ae:35:8a:81:68:aa:f2:08:8d:09:93:06:3c:ae:e0:e5:8d:
         07:e8:69:b6:67:ae:4a:a5:74:9e:d6:3c:87:69:aa:af:2c:8a:
         9a:58:c8:91:c4:1c:e1:5c:a1:5f:3c:0d:d8:6b:87:1f:16:29:
         b3:4a:fb:7b:d4:aa:3d:2e:d8:2a:df:49:16:94:29:55:12:c1:
         f8:ae:af:3a:5a:4f:ef:fc:85:27:62:74:65:bd:7f:a8:53:99:
         51:77:8a:b7:23:da:55:c2:d2:07:45:62:1d:d9:c8:ab:65:06:
         79:1b:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:40 2026 by rpki-client