Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_HGfUalqBgQRKS1nL_MHDdjmdPs.roa
File:                     _HGfUalqBgQRKS1nL_MHDdjmdPs.roa (raw, json)
Hash identifier:          2gB1lQleLMHsIesdD2feUOUdIb7MqIT0DdrO/pnf6XA=
Subject key identifier:   FC:71:9F:51:A9:6A:06:04:11:29:2D:67:2F:F3:07:0D:D8:E6:74:FB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03F6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_HGfUalqBgQRKS1nL_MHDdjmdPs.roa
Signing time:             Tue 31 Mar 2026 08:11:32 +0000
ROA not before:           Tue 31 Mar 2026 08:11:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        110.93.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC719F51A96A060411292D672FF3070DD8E674FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:2a:c5:ed:40:10:69:32:db:d5:90:80:1e:
                    cc:03:f1:71:0b:08:77:2b:07:61:92:52:20:78:44:
                    7d:da:e4:ce:3c:58:da:e4:e5:5e:9b:70:68:87:96:
                    f7:8e:ea:24:b4:01:0b:4a:7c:32:60:46:d1:f7:eb:
                    0d:68:7d:2f:cb:b6:86:46:21:20:d3:ef:6e:50:72:
                    fd:3f:40:84:f3:32:1f:0a:5b:eb:f9:9f:26:13:7a:
                    3d:22:de:5d:d1:13:87:6f:25:9d:65:b7:6a:f4:d0:
                    4b:91:0e:cc:c1:b2:89:9f:33:1f:b6:ad:97:d8:41:
                    ba:f9:6e:8e:38:e9:f9:69:73:6c:be:5a:f5:82:26:
                    45:8b:dc:19:b2:6b:44:01:ea:11:78:e9:26:ba:99:
                    cd:34:72:1a:06:28:9c:f7:3e:48:40:52:2e:24:8f:
                    04:38:d1:00:2d:b7:97:ac:47:f9:1c:25:60:54:26:
                    cb:fd:db:ad:61:ed:15:c6:f3:76:c5:fa:06:59:6d:
                    f8:a8:ca:6b:d1:23:76:57:eb:9e:d6:0c:e1:a6:5c:
                    9c:fa:37:81:a1:91:90:2a:51:4d:14:ee:17:91:75:
                    d2:73:eb:da:c4:b6:a5:3e:f6:d2:8a:40:56:9d:2f:
                    c0:87:3e:73:52:4e:82:eb:ee:09:56:a3:bf:0f:94:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:71:9F:51:A9:6A:06:04:11:29:2D:67:2F:F3:07:0D:D8:E6:74:FB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_HGfUalqBgQRKS1nL_MHDdjmdPs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d3:f8:0a:82:1e:34:4e:17:05:6f:56:ee:68:9d:ab:2d:e6:99:
         ef:8f:5f:fb:2c:b0:c1:0d:12:df:88:eb:6f:04:13:51:76:9f:
         37:d8:3e:1a:f0:cd:ce:2e:6c:ae:d6:d6:af:bb:ab:7e:66:8a:
         e9:3c:31:01:ed:8f:6f:92:43:29:03:d4:16:ac:9a:0b:a5:36:
         42:ab:a5:b6:0d:a0:aa:8d:25:47:e8:d1:75:a3:c3:57:bc:d7:
         e9:0c:94:e9:a7:ac:96:32:ea:45:d2:41:ac:f3:63:3c:bf:f2:
         21:44:9e:2f:48:b1:cb:3f:d5:f7:e5:e8:2f:ba:c7:68:1e:56:
         7d:ac:fb:12:c0:96:3f:aa:20:a2:e5:f6:bb:7e:fc:1c:d6:9a:
         d3:8a:10:8e:6e:c2:9a:ab:cf:bb:af:3d:74:c8:4a:d6:db:5b:
         3d:37:45:7d:38:3f:84:cd:4c:ab:63:33:41:dc:39:d7:9b:83:
         69:64:22:3d:fc:cf:79:f8:64:9f:ac:a2:3a:b5:74:65:51:2c:
         4b:9b:01:d1:f1:5f:41:10:b3:97:26:51:54:db:31:c3:28:b4:
         b9:10:89:1e:bc:6a:62:b4:18:ef:8b:47:e6:5a:67:26:93:4b:
         ab:e7:19:2d:b7:9c:43:43:15:2f:7d:ca:e8:4f:e7:b9:b6:f9:
         68:d1:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client