Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YwhDKSekaZigdGS6uln-mRlXTXw.roa
File:                     YwhDKSekaZigdGS6uln-mRlXTXw.roa (raw, json)
Hash identifier:          QytaROLbSLhg/y+3CBYjiu2vmiYNHBwBuMx/PFkmY48=
Subject key identifier:   63:08:43:29:27:A4:69:98:A0:74:64:BA:BA:59:FE:99:19:57:4D:7C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03FC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YwhDKSekaZigdGS6uln-mRlXTXw.roa
Signing time:             Tue 31 Mar 2026 08:11:34 +0000
ROA not before:           Tue 31 Mar 2026 08:11:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        202.83.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6308432927A46998A07464BABA59FE9919574D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:92:f9:b6:40:74:26:e4:29:02:42:fd:14:
                    96:74:c6:a5:6d:dd:6d:5b:5b:15:7d:a5:c2:4f:13:
                    e1:ef:10:a3:7f:58:a6:fe:fe:e9:99:e5:dc:20:9f:
                    9f:62:c1:35:ad:62:dd:f9:87:72:9a:32:02:f4:23:
                    ea:5d:bb:57:89:f2:d5:61:4d:81:4b:68:85:8e:ae:
                    ba:a8:ce:f3:24:5b:ef:8e:48:03:f9:5a:15:b2:51:
                    34:7f:7b:52:97:93:88:2d:28:ed:5c:de:0d:68:45:
                    63:73:a1:de:94:b0:9e:bd:99:db:f3:6b:06:0d:47:
                    1c:2d:03:af:cc:ba:d0:a2:95:b5:3c:72:f0:3f:56:
                    4c:b1:d8:98:97:e2:60:73:ba:31:81:42:c2:76:0b:
                    2b:3e:8a:04:e1:ca:b6:83:4c:0b:3d:9f:c6:96:c6:
                    cb:ef:72:6d:c1:8e:61:03:5b:a9:7d:09:8a:4c:9c:
                    13:af:e3:13:af:27:36:b8:4b:16:96:fc:f9:16:87:
                    bd:96:af:7e:5d:76:11:84:43:b1:e1:8a:c7:a1:87:
                    92:2c:02:79:5b:11:96:d8:d9:15:ec:6b:f4:48:65:
                    4c:d1:b1:b7:e9:34:92:a2:db:c1:7d:94:a9:22:47:
                    db:1a:50:ba:01:31:2e:fa:04:17:b7:f9:59:d8:f6:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:43:29:27:A4:69:98:A0:74:64:BA:BA:59:FE:99:19:57:4D:7C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YwhDKSekaZigdGS6uln-mRlXTXw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:ec:a7:0d:62:37:e8:db:2f:87:69:0f:b2:80:2a:06:a9:c5:
         02:81:b2:8b:b2:8e:09:d1:e3:36:fa:26:4c:ac:e1:a0:6a:29:
         24:04:02:6d:65:46:5b:1f:80:ce:e5:3d:68:df:68:37:39:f5:
         77:67:79:79:1c:67:53:8e:81:39:9b:f8:44:c1:0c:e1:61:0a:
         7c:db:93:0d:9d:24:86:b0:10:d9:20:08:11:be:af:4f:84:25:
         1a:85:bc:eb:0b:e7:6f:c3:05:6f:03:38:6b:1c:96:8b:6b:15:
         bf:9d:a3:79:0f:84:15:1d:93:60:21:32:07:ef:c3:f0:a1:f7:
         8e:a5:3e:26:3e:30:de:9a:c3:7f:af:15:52:ff:ee:9a:08:50:
         7b:c2:39:62:73:fa:9d:53:d2:d0:86:ee:05:91:23:28:b7:ac:
         db:b4:8b:64:a7:d7:c2:be:f1:06:68:96:d6:39:12:bb:d6:87:
         52:6e:a6:54:d8:60:7b:6d:93:a8:56:51:5c:0f:d4:e3:6b:fb:
         0b:29:55:68:ec:df:94:63:ab:ba:4b:b0:b1:43:23:93:3d:99:
         95:2a:c6:82:b3:7f:c3:37:68:00:e7:9a:d8:16:b9:fa:a5:8c:
         2d:00:f3:f9:10:96:bc:9c:58:e2:3a:a5:38:c8:4b:ef:80:02:
         f9:29:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client