Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_XTkKKVzFJilYhuSigmzQ7Tlkgo.roa
File:                     _XTkKKVzFJilYhuSigmzQ7Tlkgo.roa (raw, json)
Hash identifier:          NPL++ySnBOq2udY5loV6nigGWICfoHsL26iqvUqNJl8=
Subject key identifier:   FD:74:E4:28:A5:73:14:98:A5:62:1B:92:8A:09:B3:43:B4:E5:92:0A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0499
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_XTkKKVzFJilYhuSigmzQ7Tlkgo.roa
Signing time:             Tue 31 Mar 2026 08:12:50 +0000
ROA not before:           Tue 31 Mar 2026 08:12:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        219.117.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FD74E428A5731498A5621B928A09B343B4E5920A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:6f:68:12:2a:20:11:6e:43:55:c5:0e:14:
                    77:0b:13:1d:6e:fb:06:ea:61:28:be:4b:7a:21:fd:
                    c2:1f:aa:1e:5a:07:e9:f8:6f:71:bb:83:5c:3b:92:
                    cd:7e:6e:ee:51:86:5f:4c:e2:36:07:48:75:9a:a7:
                    f8:6f:ef:0e:e8:8c:4f:11:6e:18:dd:f0:52:e5:99:
                    2f:04:2e:c7:c1:eb:da:26:77:35:fe:c2:04:7d:ce:
                    86:c8:b3:a7:1b:1e:4f:8f:ed:77:0f:b0:97:e0:dc:
                    a6:11:16:52:5d:05:cc:99:dd:b2:08:6e:a1:49:0b:
                    d8:39:1f:7f:73:57:ad:8e:cb:d5:c0:b6:32:dc:55:
                    ed:61:2b:b5:de:b0:23:3f:64:70:cc:82:40:49:6e:
                    ce:e7:47:b4:29:9a:97:38:9c:3f:32:15:3d:ee:2a:
                    6a:41:05:ab:a9:75:0e:3c:b4:62:d5:76:7d:1e:ff:
                    a6:30:97:9f:31:5c:e7:2b:be:dc:af:6d:6d:9d:c0:
                    5c:98:e6:01:c7:29:d0:76:8c:39:29:17:c5:f6:19:
                    4d:9c:cf:ce:c8:9f:fb:6f:90:5b:bf:da:ec:d2:8f:
                    ec:23:07:d0:b9:37:46:51:58:9d:94:11:1a:b9:49:
                    af:24:35:d9:75:f7:00:19:dc:87:97:ac:0f:7c:04:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:74:E4:28:A5:73:14:98:A5:62:1B:92:8A:09:B3:43:B4:E5:92:0A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_XTkKKVzFJilYhuSigmzQ7Tlkgo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:c3:59:fd:99:d9:a7:55:d5:e5:14:52:08:3a:8b:7a:10:d7:
         06:50:a2:d8:b0:38:b1:b7:57:f8:f5:f7:3f:b4:d8:14:99:e1:
         2f:72:ab:8c:ff:44:d9:fa:a9:e1:c0:e2:2d:8a:23:9b:7a:e0:
         21:8a:32:2c:2f:bc:6e:0c:a0:9d:9e:14:7a:4a:0f:9c:9c:e4:
         40:0c:4b:79:ce:57:72:50:d1:76:f9:7a:2a:4f:88:1d:3b:42:
         08:3e:51:74:c6:c5:fb:c6:3c:4c:e3:14:bc:13:e6:23:d0:a9:
         18:49:1d:bc:61:e1:03:05:fa:e9:49:22:ca:e0:c5:e0:74:d3:
         d4:a7:70:a5:85:06:9e:c6:f9:86:e4:39:a9:b1:05:7d:01:44:
         5c:6f:9a:28:9c:23:27:21:de:16:fd:c5:db:05:96:a4:2b:ac:
         7c:2a:ad:48:cd:90:61:ed:2c:13:35:28:71:85:ac:72:e1:d1:
         41:8f:9c:09:b5:53:1a:f1:dd:de:6f:2f:14:a2:5f:ed:f7:43:
         98:28:03:9c:9c:d5:09:62:06:67:be:76:0b:0f:f6:e4:e6:48:
         9b:92:a8:29:51:a7:ac:dc:2a:f0:de:ac:03:1e:e2:d8:e1:69:
         ed:76:be:9f:70:c8:c9:8e:f7:06:3a:d2:f9:58:47:b2:89:07:
         d3:90:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:58 2026 by rpki-client