Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa
File:                     XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa (raw, json)
Hash identifier:          xHayC2gLIB3mPQBdFa77ixXNjj7YsOxQIHX1XiIX5kY=
Subject key identifier:   5C:F3:91:58:69:7D:67:E5:91:71:70:D3:B7:89:B3:C0:67:85:05:7C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0454
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa
Signing time:             Tue 31 Mar 2026 08:12:19 +0000
ROA not before:           Tue 31 Mar 2026 08:12:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        61.115.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5CF39158697D67E5917170D3B789B3C06785057C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:8f:17:78:c9:b5:a2:f7:7f:d6:6d:46:82:
                    01:00:c5:e0:87:f2:22:b5:2f:89:9a:b3:1d:a5:36:
                    bd:45:7f:f4:e7:0e:3e:dc:c8:96:d5:bf:7b:85:1a:
                    f7:12:90:49:8d:67:44:d8:90:92:06:3d:79:1d:c8:
                    ed:9e:e2:8b:94:ea:0c:e1:ca:75:8c:8c:21:32:d8:
                    3a:9d:f0:0e:54:24:78:ae:00:71:4c:9f:a5:09:d9:
                    dd:ef:6c:ea:c0:00:f7:d4:ca:ef:78:35:24:53:fb:
                    9e:4d:cc:23:e9:2f:24:9e:2b:67:26:63:4d:14:5d:
                    8c:c3:56:79:d7:56:4b:78:bd:d9:81:b7:b7:78:fd:
                    91:f0:b4:c4:01:12:ef:a4:c4:de:d4:41:9e:3f:e4:
                    cf:87:25:63:c9:7b:0d:dd:f4:83:43:1f:8e:1f:b4:
                    c1:8c:86:97:bb:24:0b:01:ad:09:08:d6:93:4f:30:
                    5f:b6:f4:4b:06:bf:46:bb:7d:4b:a9:04:bb:f3:25:
                    67:06:9a:f9:1d:da:a2:2a:13:74:21:07:01:2c:7f:
                    fc:09:1f:f3:bc:22:75:6d:bc:70:a6:19:7f:ba:c2:
                    b0:b1:4f:b2:fc:a8:6f:b2:5c:e7:5a:2c:78:d8:32:
                    2f:1e:9a:93:a3:54:04:a7:e4:f8:5f:b7:d0:d3:7b:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F3:91:58:69:7D:67:E5:91:71:70:D3:B7:89:B3:C0:67:85:05:7C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:38:57:b1:64:cd:8a:11:84:d9:63:70:73:24:df:e5:0b:
         24:34:80:89:95:71:a2:8e:01:bd:5b:2f:8c:23:1c:93:05:cb:
         bf:7d:cb:e2:43:be:ee:ff:d4:21:0f:fc:2b:c8:9b:db:b5:2f:
         40:85:44:b4:6c:35:80:41:ec:f0:a7:34:8e:81:04:b5:de:a6:
         d6:65:e1:9d:77:18:77:37:e5:d8:02:56:3e:45:69:57:49:94:
         f9:35:e7:02:9c:a2:90:03:21:21:28:48:fc:b7:c0:77:d3:4b:
         22:b5:99:0d:d8:e0:ea:ca:15:0b:29:0d:ef:8c:c6:eb:94:32:
         69:43:a7:ae:07:07:57:b1:93:b8:5c:d8:ae:a6:7d:cf:af:28:
         7c:b0:6c:42:01:00:e2:1c:fe:3a:11:77:c3:47:e8:67:6e:5b:
         86:0b:5e:e4:a3:e7:89:1c:a7:42:77:18:7e:5c:88:68:ed:f9:
         8b:0b:d5:a1:52:52:12:a5:19:4b:95:c0:5c:80:71:97:02:16:
         9e:3b:d8:a5:70:cd:7a:8a:03:42:f7:b9:fa:15:ad:36:64:a1:
         01:b8:3a:70:6c:0b:1b:f5:61:be:47:d6:d2:8f:e8:7b:80:46:
         91:b8:11:70:3e:b6:b8:7f:b5:01:d0:cc:7c:59:e6:69:2f:12:
         1a:36:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:14 2026 by rpki-client