Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa
File:                     YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa (raw, json)
Hash identifier:          vLeqoWkcvaFIxxwsN5IYW9u5a4BD9egBiGpD3nyj35k=
Subject key identifier:   62:80:3D:91:6C:72:8E:46:66:4E:B3:6C:21:5A:76:7C:A3:A8:49:78
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04B6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa
Signing time:             Tue 31 Mar 2026 08:13:06 +0000
ROA not before:           Tue 31 Mar 2026 08:13:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        125.4.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=62803D916C728E46664EB36C215A767CA3A84978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:28:d5:1a:19:99:23:19:fe:2a:a7:44:e1:
                    c8:93:9e:a2:0b:4e:7b:e1:f0:fc:06:9f:51:f6:ca:
                    e1:18:36:09:f2:13:a7:66:a4:0f:d4:be:21:05:99:
                    48:e2:26:f5:dc:3f:a7:4f:8b:fa:e7:2e:d2:42:33:
                    85:af:b0:b4:f6:51:92:a8:ab:6a:27:fc:d1:1a:0a:
                    fc:0a:58:a8:1c:ed:54:c1:64:85:0b:ee:f4:ba:7f:
                    0d:0a:0c:08:91:88:54:64:c3:0f:77:80:7e:0e:ac:
                    60:d6:1c:c9:f4:5d:08:79:d1:80:31:52:bb:6a:e3:
                    ea:53:ad:96:9f:b1:1b:a9:de:58:14:5a:83:64:6d:
                    86:77:f9:88:65:8c:ea:db:1c:b1:8a:e8:74:f7:62:
                    e1:40:84:4c:98:2b:08:52:54:b8:67:7b:67:e5:b8:
                    15:e7:96:d9:07:a6:7b:e0:e1:cc:65:f5:b2:a0:18:
                    f3:29:9b:d6:f3:cf:e0:a4:15:53:4d:31:d2:cc:41:
                    bc:a8:1b:49:46:e3:23:92:d0:1f:e1:dd:a2:1a:f4:
                    8a:10:48:d7:6a:e5:c5:da:82:9e:f8:44:42:61:0e:
                    74:a8:a6:6b:1d:b8:5e:cb:41:1b:4b:67:a7:45:5f:
                    bb:ec:08:83:23:2c:6c:ce:18:33:a0:06:9b:cb:a2:
                    47:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:3D:91:6C:72:8E:46:66:4E:B3:6C:21:5A:76:7C:A3:A8:49:78
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:8c:00:75:19:9d:a1:f7:2d:7d:7f:3f:f9:62:9d:c7:46:e1:
         71:ba:1d:5f:ae:44:e5:54:53:c5:56:27:6b:91:bc:fd:bc:f2:
         a1:8e:d8:24:5f:db:2b:50:08:74:b2:76:bc:bb:10:a2:4d:3d:
         f7:1f:d9:8b:fa:66:67:ee:63:86:25:a0:cc:0f:95:b9:cd:b6:
         cb:19:ed:3d:a5:79:8f:7f:8d:a1:d1:22:ba:39:11:12:9d:41:
         11:cb:5b:2f:b2:4c:4c:3c:f1:0a:d1:cf:53:10:b1:98:28:4c:
         53:38:f9:95:55:b5:82:0a:db:be:0a:91:3b:1f:c0:26:f0:f4:
         4f:e6:77:e1:a2:17:3b:b1:d4:99:73:30:4c:88:a8:65:e1:25:
         11:2c:10:5d:89:9b:b2:b7:3a:ce:bb:f0:43:5d:ee:a6:d5:3f:
         b3:d2:6f:f5:82:e9:7b:e3:24:97:b3:f5:64:f4:c2:46:6b:34:
         68:bd:0e:4a:90:ec:8d:1e:2f:68:fa:e3:a3:d4:b8:2f:96:46:
         88:dd:d4:63:b4:ae:7b:75:51:a8:fd:fc:d0:f2:82:bd:b5:cb:
         96:53:26:31:ab:bd:f0:3c:e1:28:5f:c4:36:9f:b1:1c:64:3f:
         ca:11:d0:7a:28:3d:16:cf:53:42:3c:97:f9:15:ac:f9:07:50:
         f1:f3:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:10 2026 by rpki-client