Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_6zzkosFW2V9T2H9aBBVrZyxV0U.roa
File:                     _6zzkosFW2V9T2H9aBBVrZyxV0U.roa (raw, json)
Hash identifier:          uRvDfulffpe7PjmW7QBZ4f7RRnojzDFLzC3kMLUlqeY=
Subject key identifier:   FF:AC:F3:92:8B:05:5B:65:7D:4F:61:FD:68:10:55:AD:9C:B1:57:45
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04BD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_6zzkosFW2V9T2H9aBBVrZyxV0U.roa
Signing time:             Tue 31 Mar 2026 08:13:09 +0000
ROA not before:           Tue 31 Mar 2026 08:13:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        211.135.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213 (0x4bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FFACF3928B055B657D4F61FD681055AD9CB15745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bf:01:3f:52:1c:52:bc:30:58:35:b1:e9:d8:
                    c0:e0:31:5b:a8:34:56:d5:39:3b:35:92:05:28:95:
                    3e:ec:3f:bb:86:c8:6c:dd:e1:03:06:dc:1b:54:8c:
                    b3:59:8f:4c:cd:88:86:f1:9c:0b:fe:67:b3:2e:ad:
                    50:19:49:01:8f:b0:ae:ac:62:57:32:60:8a:bf:17:
                    1a:be:60:34:a3:e2:c4:cc:a7:2e:27:57:25:2a:a5:
                    48:d7:4e:c9:f7:3b:89:d6:f3:8d:fc:22:01:40:9f:
                    10:01:df:56:20:6e:1c:0d:2b:c5:d2:e0:90:7f:6a:
                    cf:af:92:5b:00:43:ea:48:39:70:21:f2:6b:cf:bf:
                    3f:08:e5:76:dc:56:55:26:62:c0:24:5f:aa:e0:08:
                    e9:22:1f:2f:e5:b8:ed:c0:0a:45:4f:af:04:da:e3:
                    0b:29:91:ab:6e:94:8b:26:70:87:2b:bd:be:84:a8:
                    8f:23:69:aa:1c:ae:20:54:7d:bf:aa:d6:72:ba:50:
                    c2:a0:ef:af:15:07:38:7e:cb:d0:b5:f1:b6:68:0d:
                    04:64:ea:4b:e0:b7:82:21:cd:73:27:16:38:7c:96:
                    ac:bc:d0:cd:5d:3b:33:25:f9:34:b1:1d:cc:1e:38:
                    f2:12:64:66:04:54:9a:ce:57:b2:cf:1b:0d:bd:f7:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AC:F3:92:8B:05:5B:65:7D:4F:61:FD:68:10:55:AD:9C:B1:57:45
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_6zzkosFW2V9T2H9aBBVrZyxV0U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.135.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         12:31:83:31:31:ab:00:ed:e3:63:32:91:9c:21:62:61:01:ce:
         6e:ff:67:7c:a1:3e:fa:81:fa:f4:3d:0d:23:8e:7e:12:88:86:
         28:19:8e:f7:88:53:db:6c:07:81:86:99:11:db:b7:17:1f:c1:
         13:e0:cb:23:c8:27:6d:95:05:44:78:e6:58:e0:28:80:ce:c3:
         0d:81:be:b7:71:82:19:86:d2:fe:28:0f:16:bc:46:6f:7b:13:
         9c:3b:1b:34:b6:b9:9e:2e:4d:b0:68:39:96:ae:a9:be:b9:30:
         ff:8b:2a:f0:80:9a:31:8e:87:a9:19:25:61:1b:42:3d:ec:10:
         fb:88:37:45:33:b8:9a:94:5c:e1:d5:7c:eb:66:3a:15:4c:84:
         64:ce:f3:83:7b:93:e4:79:25:fb:3d:e3:c0:cf:d8:fc:d6:b8:
         6d:14:0b:c6:15:b8:a6:57:46:9d:20:34:5e:50:6f:94:31:b0:
         0d:95:b8:c1:8f:e3:b4:08:51:38:90:62:93:94:fc:08:3c:44:
         02:37:0a:93:db:d1:ae:17:ad:95:74:89:b4:c3:4f:6d:7a:99:
         a4:f1:44:ac:8a:39:92:75:35:53:de:cf:28:0b:98:44:40:c9:
         a5:62:0f:d0:bf:a0:43:2e:b3:10:2d:0c:a6:c7:78:08:fd:7d:
         7f:cb:ea:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:59 2026 by rpki-client