Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa
File:                     Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa (raw, json)
Hash identifier:          I8SB/wu6YPXgYMx31ouAIIwWSq0R5D9hxSh8eJQEITk=
Subject key identifier:   67:CA:DD:72:0C:0E:34:0C:47:AB:69:B1:B4:9E:53:DB:8C:B0:BE:66
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04BA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa
Signing time:             Tue 31 Mar 2026 08:13:07 +0000
ROA not before:           Tue 31 Mar 2026 08:13:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        211.124.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=67CADD720C0E340C47AB69B1B49E53DB8CB0BE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:a1:a2:20:83:1b:f1:33:a0:2e:ba:f2:dc:
                    f3:cb:5e:c5:c4:af:fa:bc:f9:25:95:0d:d1:5a:56:
                    51:38:d9:5e:97:f0:33:0a:ad:f0:ba:d4:b7:f4:8a:
                    92:20:b8:ab:74:cd:df:a7:6d:cd:0a:3e:68:e0:dd:
                    cb:e2:60:63:80:68:5e:b0:cb:26:79:84:95:50:6c:
                    17:39:c3:a2:9e:4f:ef:d3:d7:33:18:35:b8:30:c5:
                    27:7c:5c:f6:6a:41:0d:3e:05:f1:4d:80:2b:d9:5b:
                    6d:8a:0b:f7:db:15:f4:b3:1a:b4:f4:f6:47:81:c1:
                    c2:ae:b5:e9:42:1b:0f:e4:16:98:a7:d3:3d:05:ab:
                    37:0e:65:93:9f:8f:f6:19:78:e3:dd:b1:bf:34:e0:
                    d4:dc:e2:9c:b5:de:b3:4e:8f:86:f4:7e:4c:05:3a:
                    56:57:50:25:15:3e:0b:66:54:28:9b:3b:99:26:20:
                    0e:a1:6b:e2:6a:66:e1:63:37:06:4d:8a:82:04:b0:
                    04:08:e5:12:c5:f0:ba:45:cc:01:28:60:13:f2:0d:
                    00:f7:a9:51:73:1f:ec:2d:b6:b3:5f:eb:49:94:9b:
                    76:09:55:72:bd:78:37:fb:80:90:29:92:da:63:69:
                    fc:af:b1:fc:0a:4a:e8:13:b4:f5:1f:fe:c5:f3:24:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:DD:72:0C:0E:34:0C:47:AB:69:B1:B4:9E:53:DB:8C:B0:BE:66
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ec:d4:0c:a3:74:c8:f3:2d:b7:e0:64:5d:f7:d1:9f:b5:98:2c:
         ce:10:9a:74:63:2d:b4:7c:0b:e2:be:a2:c6:f6:97:79:71:7d:
         b7:5b:46:d4:1f:05:79:b2:4c:6e:38:48:4b:64:89:d9:71:9d:
         4f:11:f2:b0:22:64:29:5c:9a:d3:99:b7:b9:38:1b:6a:93:54:
         f0:f0:42:38:70:76:56:65:bf:26:9e:dc:f6:12:68:38:63:ee:
         00:04:56:c8:10:f1:67:ac:10:e9:9f:0b:90:27:b9:92:01:c1:
         17:30:d3:4c:6c:c0:cd:c0:09:f2:cd:e8:08:a2:fd:53:f9:4e:
         89:14:38:b4:2e:34:6b:c4:7e:d8:25:b6:bd:32:ef:ae:36:95:
         1f:e4:6b:c9:b1:e0:1d:3d:49:eb:2d:4c:95:14:ef:1f:9a:61:
         65:09:ad:49:26:fb:80:37:91:7f:52:2f:03:e9:7e:c0:3d:ce:
         4e:0a:b3:f1:f5:cb:eb:2d:8a:b4:a3:2d:78:37:64:97:ad:9a:
         ec:56:56:ae:1e:a3:a3:76:de:ec:30:86:74:03:54:17:39:4b:
         c3:4b:0a:fd:3d:a4:0b:8f:fd:1f:1d:b5:dd:b4:69:4c:16:aa:
         08:0b:3c:ee:b5:ad:70:e0:a3:88:50:14:97:ef:09:0b:ac:10:
         08:2a:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client