Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VdJHDzIl-dYMrKiNEMsdPgZaPZc.roa
File:                     VdJHDzIl-dYMrKiNEMsdPgZaPZc.roa (raw, json)
Hash identifier:          5/evVCUTd+mo46uC+lBC/z4Emtzx3qBGUBKKm1NJI6o=
Subject key identifier:   55:D2:47:0F:32:25:F9:D6:0C:AC:A8:8D:10:CB:1D:3E:06:5A:3D:97
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04C8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VdJHDzIl-dYMrKiNEMsdPgZaPZc.roa
Signing time:             Tue 31 Mar 2026 08:13:14 +0000
ROA not before:           Tue 31 Mar 2026 08:13:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        112.137.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=55D2470F3225F9D60CACA88D10CB1D3E065A3D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:c3:51:34:66:dd:05:dd:2b:e2:b8:cc:75:
                    d9:aa:cc:87:23:49:8e:35:7b:38:05:98:8f:06:d4:
                    4a:e3:fa:b0:2f:57:0b:99:00:08:40:95:9a:10:1b:
                    21:92:e6:99:17:96:86:10:96:53:f5:9b:50:3e:f0:
                    eb:c0:ca:bb:c4:67:e2:ff:4f:88:c3:3b:25:3f:c3:
                    98:73:3f:69:97:89:7e:b7:04:3f:38:a9:bf:a8:09:
                    a8:dd:9f:ab:49:92:b7:43:48:12:56:a7:1b:7b:95:
                    4f:86:97:33:73:19:59:50:cc:0b:18:3b:44:3c:1f:
                    ad:90:3c:68:71:6f:ac:87:93:e7:b7:52:a4:71:d6:
                    dc:e0:74:99:d6:66:cc:40:b0:18:12:05:cd:82:f5:
                    34:82:75:bd:5d:77:32:06:66:02:79:27:6b:e3:72:
                    71:56:b5:04:74:4b:e6:19:89:ce:db:08:ac:6c:f4:
                    68:f8:98:e6:22:4a:03:78:c6:6e:55:aa:c3:0d:67:
                    63:99:62:1f:93:76:68:74:f0:a9:4a:cf:e1:6f:ba:
                    e0:56:56:6b:66:e6:9f:d2:1e:63:df:ad:cb:a2:33:
                    ab:4a:fb:e5:eb:77:28:2f:1d:46:47:20:40:5f:99:
                    a3:78:35:a9:a3:8d:d4:e7:7d:6f:f2:fb:3c:c0:c5:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D2:47:0F:32:25:F9:D6:0C:AC:A8:8D:10:CB:1D:3E:06:5A:3D:97
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VdJHDzIl-dYMrKiNEMsdPgZaPZc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:f2:91:41:d9:e9:d6:16:cf:cb:be:3b:b9:92:11:de:12:f9:
         c2:97:21:72:46:b1:d2:14:f5:93:ee:c3:87:77:79:92:14:c6:
         ed:83:7c:0c:d6:db:e4:42:25:f4:10:86:a7:d6:4c:67:27:01:
         0a:71:9e:18:d9:98:f1:09:3e:a1:d8:4c:58:79:17:33:6f:84:
         77:b6:13:36:cb:3b:9c:5b:9b:ca:7c:7e:d1:6f:50:a3:e5:11:
         d0:87:15:7a:9a:6a:a7:f2:87:67:07:f8:62:33:6e:0c:82:8d:
         27:38:c7:47:0d:db:18:77:ea:be:09:78:44:8b:ae:df:b2:13:
         8c:4a:ae:2e:79:3d:6a:88:1c:e0:3e:62:aa:0b:f4:42:74:6e:
         37:9c:71:ad:a2:8e:31:d2:3c:b2:a3:14:d3:e5:8a:bb:9f:d9:
         1d:17:50:54:6f:42:26:2a:95:bb:6e:e9:f3:84:5f:10:aa:2f:
         44:63:84:29:94:bf:ca:a1:b8:30:6d:da:b0:da:81:8b:c1:8b:
         85:19:6f:02:fc:7f:c3:e7:56:95:0d:f0:1c:23:86:4e:5f:a5:
         b9:f9:7e:fb:5c:7d:70:e3:92:77:41:d6:08:1a:20:50:dd:f9:
         90:79:fe:54:73:56:41:40:dd:11:76:25:cc:a9:c5:82:e9:ff:
         98:88:25:8b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEzMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU1RDI0NzBGMzIyNUY5
RDYwQ0FDQTg4RDEwQ0IxRDNFMDY1QTNEOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy5sNRNGbdBd0r4rjMddmqzIcjSY41ezgFmI8G1Erj+rAvVwuZ
AAhAlZoQGyGS5pkXloYQllP1m1A+8OvAyrvEZ+L/T4jDOyU/w5hzP2mXiX63BD84
qb+oCajdn6tJkrdDSBJWpxt7lU+GlzNzGVlQzAsYO0Q8H62QPGhxb6yHk+e3UqRx
1tzgdJnWZsxAsBgSBc2C9TSCdb1ddzIGZgJ5J2vjcnFWtQR0S+YZic7bCKxs9Gj4
mOYiSgN4xm5VqsMNZ2OZYh+Tdmh08KlKz+FvuuBWVmtm5p/SHmPfrcuiM6tK++Xr
dygvHUZHIEBfmaN4NamjjdTnfW/y+zzAxSIVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVdJHDzIl+dYMrKiNEMsdPgZaPZcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL1ZkSkhEeklsLWRZTXJLaU5FTXNkUGdaYVBaYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZwiUAwDQYJKoZIhvcNAQELBQADggEB
ACTykUHZ6dYWz8u+O7mSEd4S+cKXIXJGsdIU9ZPuw4d3eZIUxu2DfAzW2+RCJfQQ
hqfWTGcnAQpxnhjZmPEJPqHYTFh5FzNvhHe2EzbLO5xbm8p8ftFvUKPlEdCHFXqa
aqfyh2cH+GIzbgyCjSc4x0cN2xh36r4JeESLrt+yE4xKri55PWqIHOA+YqoL9EJ0
bjecca2ijjHSPLKjFNPliruf2R0XUFRvQiYqlbtu6fOEXxCqL0RjhCmUv8qhuDBt
2rDagYvBi4UZbwL8f8PnVpUN8Bwjhk5fpbn5fvtcfXDjkndB1ggaIFDd+ZB5/lRz
VkFA3RF2JcypxYLp/5iIJYs=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client