Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/bi4pAIgwc6oBu-CB3rK9Qtq-C2Q.roa
File:                     bi4pAIgwc6oBu-CB3rK9Qtq-C2Q.roa (raw, json)
Hash identifier:          ce3WNf9K6VSvojBPXS/Ka6KOceeKzD6Q/sFKVMhOcI4=
Subject key identifier:   6E:2E:29:00:88:30:73:AA:01:BB:E0:81:DE:B2:BD:42:DA:BE:0B:64
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0417
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bi4pAIgwc6oBu-CB3rK9Qtq-C2Q.roa
Signing time:             Tue 31 Mar 2026 08:11:46 +0000
ROA not before:           Tue 31 Mar 2026 08:11:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        210.228.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6E2E2900883073AA01BBE081DEB2BD42DABE0B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:73:3e:c8:d0:c6:8f:66:b2:cd:e9:8a:d8:
                    e7:32:64:29:5b:e6:4d:a0:31:38:c1:31:41:d3:d1:
                    66:c9:03:5b:e7:0d:21:cf:2a:90:1b:ac:83:c1:84:
                    e8:42:fd:d7:4d:be:33:6e:87:ff:28:37:36:63:f1:
                    e1:57:54:92:c1:d5:35:87:9c:24:e4:be:46:86:c8:
                    89:7b:4b:1d:9f:f4:e2:d9:7f:9e:25:bd:33:02:fc:
                    24:4b:9f:4b:c3:cf:c3:75:22:9a:8e:6d:3e:62:40:
                    6d:b0:19:bb:ef:23:07:1e:b8:df:1b:5f:2b:e4:05:
                    0b:a4:2c:8c:52:40:e4:14:5b:cf:1b:47:5b:ad:ae:
                    42:5d:31:5b:b0:40:b0:5d:61:db:09:0e:b1:6b:d1:
                    e1:e1:6e:57:5a:15:fb:9e:46:ed:c1:95:14:fb:51:
                    12:be:88:31:35:ba:4a:c9:2e:09:73:02:34:23:77:
                    25:38:82:56:8d:e3:e6:69:aa:c8:a9:e0:0c:e3:34:
                    15:92:e9:a6:5e:ff:ee:29:7c:ba:27:e7:17:97:7e:
                    42:2b:99:0f:59:5a:83:cd:1a:7a:93:13:73:7d:c1:
                    e3:72:59:a2:f9:2c:70:bb:5a:9d:a1:76:a3:43:6c:
                    db:bf:48:d3:42:a5:b3:11:f8:46:36:9b:17:0f:25:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2E:29:00:88:30:73:AA:01:BB:E0:81:DE:B2:BD:42:DA:BE:0B:64
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bi4pAIgwc6oBu-CB3rK9Qtq-C2Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:70:a6:16:2f:48:4e:cf:3b:13:28:de:34:01:97:7d:b1:d3:
         92:ab:c8:7e:8c:c2:be:83:82:ea:22:36:cf:51:4e:98:b1:09:
         ce:b9:bf:1f:2e:73:18:4e:02:3c:2a:44:fc:11:f9:08:5a:eb:
         13:d6:9d:2e:98:df:14:32:31:be:2c:33:44:71:d1:8d:26:59:
         77:33:07:e1:4f:84:05:f0:3a:2e:49:96:f6:cc:12:c2:8f:69:
         aa:1e:cf:32:39:0e:ff:72:99:5b:66:db:9e:57:da:d2:61:35:
         e2:6e:da:65:fc:cc:da:6e:7b:2f:87:cd:e4:fd:78:dc:d3:bc:
         97:7d:13:32:7e:4f:69:62:0f:20:82:79:ef:55:c4:35:23:d3:
         b8:fe:ae:87:e2:c9:39:4d:8b:ee:21:ad:1f:e7:b5:5b:42:e6:
         39:f2:f3:18:21:15:6c:3c:2a:0f:f0:89:17:62:c9:6f:e6:10:
         4b:c1:12:a7:8f:89:a7:75:9c:4b:d1:17:75:72:11:af:f5:db:
         2c:c3:68:18:8d:08:09:68:18:f6:6a:04:12:4e:cd:a4:11:2e:
         a2:71:46:33:2b:1f:5a:da:c9:be:dd:b1:10:64:46:3a:24:3a:
         2b:a0:5d:e6:10:c6:b9:af:d0:1d:4b:50:7e:37:55:ef:57:f5:
         2e:c0:53:19
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODExNDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZFMkUyOTAwODgzMDcz
QUEwMUJCRTA4MURFQjJCRDQyREFCRTBCNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZg3M+yNDGj2ayzemK2OcyZClb5k2gMTjBMUHT0WbJA1vnDSHP
KpAbrIPBhOhC/ddNvjNuh/8oNzZj8eFXVJLB1TWHnCTkvkaGyIl7Sx2f9OLZf54l
vTMC/CRLn0vDz8N1IpqObT5iQG2wGbvvIwceuN8bXyvkBQukLIxSQOQUW88bR1ut
rkJdMVuwQLBdYdsJDrFr0eHhbldaFfueRu3BlRT7URK+iDE1ukrJLglzAjQjdyU4
glaN4+Zpqsip4AzjNBWS6aZe/+4pfLon5xeXfkIrmQ9ZWoPNGnqTE3N9weNyWaL5
LHC7Wp2hdqNDbNu/SNNCpbMR+EY2mxcPJXHbAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbi4pAIgwc6oBu+CB3rK9Qtq+C2QwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL2JpNHBBSWd3YzZvQnUtQ0Izcks5UXRxLUMyUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS5AAwDQYJKoZIhvcNAQELBQADggEB
AGlwphYvSE7POxMo3jQBl32x05KryH6Mwr6DguoiNs9RTpixCc65vx8ucxhOAjwq
RPwR+Qha6xPWnS6Y3xQyMb4sM0Rx0Y0mWXczB+FPhAXwOi5JlvbMEsKPaaoezzI5
Dv9ymVtm255X2tJhNeJu2mX8zNpuey+HzeT9eNzTvJd9EzJ+T2liDyCCee9VxDUj
07j+rofiyTlNi+4hrR/ntVtC5jny8xghFWw8Kg/wiRdiyW/mEEvBEqePiad1nEvR
F3VyEa/12yzDaBiNCAloGPZqBBJOzaQRLqJxRjMrH1rayb7dsRBkRjokOiugXeYQ
xrmv0B1LUH43Ve9X9S7AUxk=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:41 2026 by rpki-client