Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vbcg-kWVVyOcrkC_dsRvacsuRLE.roa
File:                     Vbcg-kWVVyOcrkC_dsRvacsuRLE.roa (raw, json)
Hash identifier:          4VENVsQXI9+WvCV/0b5Fqay2f52cuuUcxRltbo/gnck=
Subject key identifier:   55:B7:20:FA:45:95:57:23:9C:AE:40:BF:76:C4:6F:69:CB:2E:44:B1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04B1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vbcg-kWVVyOcrkC_dsRvacsuRLE.roa
Signing time:             Tue 31 Mar 2026 08:13:01 +0000
ROA not before:           Tue 31 Mar 2026 08:13:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        119.26.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=55B720FA459557239CAE40BF76C46F69CB2E44B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:a6:ae:af:1e:01:9a:d3:64:09:b5:0a:c5:
                    c1:03:fa:45:19:6a:d3:bf:5e:07:9b:66:d8:d5:d8:
                    47:c8:a8:aa:52:eb:c7:e8:aa:47:f2:7a:c0:9a:c6:
                    14:fd:a6:36:a0:7f:e7:d1:98:6d:6d:66:3c:c2:b0:
                    af:55:db:c3:91:2d:90:df:70:44:95:6f:59:eb:5a:
                    43:3f:c7:6a:e2:71:22:b3:23:46:e7:eb:61:72:e5:
                    34:eb:64:c4:7f:5e:38:67:00:66:72:61:b3:36:3f:
                    7f:f8:72:1d:49:3e:64:4c:5a:4a:dc:c4:64:3d:e8:
                    6e:9d:82:76:d6:f1:25:78:4b:84:81:fd:d3:7c:66:
                    55:42:2d:49:c9:9b:23:4e:88:3a:94:98:bb:d7:4c:
                    34:44:df:51:24:6b:82:87:88:6a:d1:a2:fa:6d:20:
                    6c:30:78:be:dc:97:ae:bd:c3:dc:1d:3e:39:69:9b:
                    68:c5:31:c8:f5:c3:a2:16:e8:08:0f:3a:53:12:3a:
                    43:66:b8:93:76:29:b1:d1:08:f1:1f:f1:a5:3d:a2:
                    3a:8e:f8:88:45:42:12:fb:38:b7:11:47:d1:97:25:
                    bc:7c:a9:11:6d:09:22:f6:ed:3b:6e:9f:ea:51:c7:
                    7c:43:25:f5:53:e5:87:c6:bc:35:99:c9:f5:91:e4:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B7:20:FA:45:95:57:23:9C:AE:40:BF:76:C4:6F:69:CB:2E:44:B1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Vbcg-kWVVyOcrkC_dsRvacsuRLE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:4c:cf:57:8d:d4:64:13:0a:9c:e2:31:08:62:85:9a:67:
         9c:c8:c3:cb:d9:32:7f:be:fc:69:f4:56:31:31:31:6a:63:40:
         40:3b:c2:86:07:c6:1e:7d:be:c2:47:45:13:ab:e9:cf:05:e5:
         ac:cb:fb:d9:a6:4c:4d:ea:e5:96:09:34:33:5f:60:f1:91:f8:
         3a:85:60:5c:eb:ae:dc:e4:5f:34:74:3d:c5:c8:39:b7:5b:ea:
         43:70:cf:3b:d7:92:bc:e9:6e:45:b9:c1:09:f5:44:29:8a:0f:
         5f:57:b9:3b:e5:c8:65:3a:cf:41:c4:5d:2d:33:b8:eb:45:75:
         eb:95:c4:8b:3b:03:fb:32:5b:c2:a2:cf:f9:c6:38:0d:cf:29:
         db:cb:3a:dc:cf:bb:c0:98:7d:5b:be:07:4f:1e:d9:f1:2d:1c:
         27:09:e9:ea:ad:a2:82:30:61:4a:e1:9c:94:18:74:b2:a3:57:
         d0:fb:69:a1:51:e9:e0:37:fc:73:66:af:60:8c:7e:21:99:70:
         75:5a:f7:14:28:67:a9:f5:e1:2e:0e:ad:37:8b:39:4f:e8:a9:
         cb:1e:f2:fb:6e:09:be:99:c1:e2:c2:38:97:99:da:54:4b:2f:
         f9:c0:0d:fa:c0:7d:3d:51:b8:a2:20:7f:c3:7a:2d:db:fd:0c:
         64:92:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:35 2026 by rpki-client