Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VVaSrb1SV0sdTzVcca7KRSSxrBM.roa
File:                     VVaSrb1SV0sdTzVcca7KRSSxrBM.roa (raw, json)
Hash identifier:          S248QBN+vf4jkXqisLRmxVWvA241RwtiuCCE5Fys+Z0=
Subject key identifier:   55:56:92:AD:BD:52:57:4B:1D:4F:35:5C:71:AE:CA:45:24:B1:AC:13
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0416
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VVaSrb1SV0sdTzVcca7KRSSxrBM.roa
Signing time:             Tue 31 Mar 2026 08:11:45 +0000
ROA not before:           Tue 31 Mar 2026 08:11:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7686
IP address blocks:        210.228.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=555692ADBD52574B1D4F355C71AECA4524B1AC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:78:66:c0:db:19:b9:e9:e4:43:9c:e0:e0:
                    1c:e0:e1:49:c7:e9:52:5f:e3:bd:65:11:a1:07:20:
                    f9:33:26:8c:dc:2b:87:a5:a1:32:90:ec:9a:a1:e3:
                    97:b0:b2:57:56:cc:43:06:ec:24:a3:93:75:29:16:
                    3e:16:ff:af:dc:fb:69:2f:36:7b:45:ce:f6:37:a3:
                    fe:9e:2e:dc:e8:69:a7:d2:6c:4f:a2:00:87:4e:eb:
                    fa:8c:bb:e0:30:3e:92:aa:6b:2e:85:61:a8:94:94:
                    96:40:6f:9a:3e:49:20:24:14:90:97:ca:3b:79:82:
                    9e:17:e6:94:ae:5d:16:de:d6:c5:08:75:5e:f1:ee:
                    58:ff:47:96:bd:a8:72:33:0c:1c:a7:1d:98:27:43:
                    ea:f1:09:68:f5:de:41:50:c2:73:41:44:16:64:ea:
                    ad:52:13:92:81:ad:6d:20:d6:6e:b2:5f:04:23:cc:
                    5a:63:24:0b:63:20:28:63:2a:8f:3c:40:e8:ee:f0:
                    f4:71:8f:18:fe:33:67:c5:d5:01:7d:bc:0e:f4:a6:
                    b5:95:20:27:58:62:93:e6:5c:67:24:a8:bc:ac:17:
                    04:0f:92:6b:5d:d4:fd:07:f5:7a:f1:80:a5:27:16:
                    86:01:ac:8f:ab:20:77:7e:47:e8:58:c6:15:33:91:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:92:AD:BD:52:57:4B:1D:4F:35:5C:71:AE:CA:45:24:B1:AC:13
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VVaSrb1SV0sdTzVcca7KRSSxrBM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:1b:33:23:6b:e9:fb:cc:bc:ca:ec:f2:43:76:24:80:2e:
         f1:72:2c:54:0f:a5:29:ce:77:fe:f2:c9:e1:2d:89:10:55:25:
         69:14:6b:ab:dc:6f:e0:2a:cd:1d:8a:b1:29:b5:f9:a3:23:8d:
         a7:eb:42:24:43:7a:28:58:0d:6a:b1:0a:13:a0:ad:67:b9:19:
         c1:aa:67:70:34:0e:a9:a5:73:87:9a:5e:c7:21:59:d4:11:10:
         b1:2a:14:1e:b4:cf:6c:d5:68:7f:d5:da:15:c0:37:22:9a:bf:
         e5:c8:ed:e3:55:b1:78:81:4b:6d:e7:ec:20:c3:69:68:70:fa:
         13:e8:3f:f7:a2:91:53:30:52:54:6f:58:a1:09:76:95:19:38:
         63:27:68:a9:94:04:fb:1f:08:66:7c:19:f4:fb:e4:4b:76:e3:
         60:fc:2d:d6:d9:e2:74:27:b3:e8:aa:8b:20:76:5d:56:eb:82:
         1a:17:d1:9d:2a:c1:ac:60:78:fe:a4:f3:db:e4:d4:75:8d:09:
         05:82:9b:4b:7c:48:74:c4:d1:92:c4:02:24:52:45:63:b6:20:
         10:70:8c:66:e5:51:e0:14:84:c7:52:0c:3d:e6:6b:6f:6c:e1:
         43:5e:6a:d4:0c:65:ef:71:aa:a0:22:eb:4a:d5:02:2b:2d:b3:
         b5:77:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:13 2026 by rpki-client