Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/c7k9lT_n3NWNyz9YYQKGFI3VASc.roa
File:                     c7k9lT_n3NWNyz9YYQKGFI3VASc.roa (raw, json)
Hash identifier:          acMByDXHtqB64ExsnZUNmKJ88AIiMNqrh0T1OYszHj8=
Subject key identifier:   73:B9:3D:95:3F:E7:DC:D5:8D:CB:3F:58:61:02:86:14:8D:D5:01:27
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       048A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c7k9lT_n3NWNyz9YYQKGFI3VASc.roa
Signing time:             Tue 31 Mar 2026 08:12:44 +0000
ROA not before:           Tue 31 Mar 2026 08:12:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        203.124.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=73B93D953FE7DCD58DCB3F58610286148DD50127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:52:7d:26:70:25:69:20:86:14:62:2a:54:
                    86:cc:33:8a:dd:6d:8b:4f:3a:52:30:74:6f:de:c4:
                    b1:13:11:f0:f1:71:a5:f5:01:2a:2a:25:ff:ea:4a:
                    c6:01:58:e7:40:8d:8c:2d:2a:24:e0:36:01:ed:05:
                    68:84:18:35:c6:c0:66:a5:60:ed:c1:2d:b0:e5:44:
                    e6:d2:7b:f3:de:4f:78:5d:34:30:f7:5a:80:b5:91:
                    65:75:d5:ad:85:25:ae:0d:9f:d1:d3:d1:32:1e:f2:
                    dc:03:37:a2:fc:20:aa:f8:3b:49:a8:8e:98:98:7b:
                    1d:7e:e2:4b:e0:47:6a:a5:a8:8f:38:e1:de:ab:15:
                    0b:59:89:39:b8:56:a1:34:f9:bf:8b:0d:5d:a7:ed:
                    b1:ca:85:4c:d8:c0:b1:3c:e1:39:0c:1a:e2:95:0e:
                    ee:a5:8c:55:4e:29:3f:97:fb:85:f7:a0:dc:05:7d:
                    9a:de:62:99:7c:ca:41:3a:60:bd:67:3b:95:aa:3e:
                    4c:6e:63:df:bd:05:f5:77:18:f2:03:19:c6:ef:02:
                    b7:fa:89:42:3a:d3:3e:c9:80:a3:0f:96:ad:89:ad:
                    a5:fd:f6:c4:89:e3:97:5c:d9:c1:69:b9:9e:30:df:
                    f6:74:04:54:99:3c:b6:69:3a:58:f7:62:99:e6:55:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B9:3D:95:3F:E7:DC:D5:8D:CB:3F:58:61:02:86:14:8D:D5:01:27
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c7k9lT_n3NWNyz9YYQKGFI3VASc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c6:51:57:bb:4f:56:29:c9:06:7d:d1:9b:60:4c:09:bc:3f:ad:
         22:7d:a2:59:6e:00:34:d1:2f:9a:e3:a3:db:8b:27:3b:b6:0b:
         fb:2d:3a:d3:00:66:d9:0b:02:d9:30:e4:1e:d1:c4:f5:c6:8e:
         65:1d:22:67:23:c7:a8:40:b1:ba:a4:7a:6a:20:b5:c6:92:44:
         3d:75:0e:af:40:6b:fc:33:cb:d2:24:3b:fe:f2:02:b2:fd:59:
         18:3a:2e:75:c6:77:45:64:31:8f:65:9e:a8:21:2f:c3:c9:37:
         83:0c:8e:77:48:e1:17:5e:c3:cf:68:cd:ac:9a:51:79:1c:ec:
         7b:56:7e:c0:25:81:ca:02:bb:8d:16:ad:e0:10:b0:dd:95:c6:
         eb:4b:3a:b4:98:5a:85:8a:d4:19:68:ca:15:3e:73:fe:3a:40:
         1c:1e:31:50:10:2d:e7:0d:10:a1:92:13:20:26:1a:ff:2d:c0:
         13:ce:60:11:f4:a0:4f:cf:4e:ff:27:bb:21:eb:4b:c9:94:f1:
         40:23:6f:97:87:c6:fc:e0:38:50:1e:0e:b9:b2:0a:8d:90:58:
         1d:ec:d3:6d:b9:78:1c:51:d6:14:7d:02:3b:c6:d2:d0:d4:6e:
         15:f3:13:c9:c9:17:5c:17:81:b6:fb:7d:50:10:8e:fc:fc:18:
         f6:2b:60:79
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczQjkzRDk1M0ZFN0RD
RDU4RENCM0Y1ODYxMDI4NjE0OERENTAxMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/wlJ9JnAlaSCGFGIqVIbMM4rdbYtPOlIwdG/exLETEfDxcaX1
ASoqJf/qSsYBWOdAjYwtKiTgNgHtBWiEGDXGwGalYO3BLbDlRObSe/PeT3hdNDD3
WoC1kWV11a2FJa4Nn9HT0TIe8twDN6L8IKr4O0mojpiYex1+4kvgR2qlqI844d6r
FQtZiTm4VqE0+b+LDV2n7bHKhUzYwLE84TkMGuKVDu6ljFVOKT+X+4X3oNwFfZre
Ypl8ykE6YL1nO5WqPkxuY9+9BfV3GPIDGcbvArf6iUI60z7JgKMPlq2JraX99sSJ
45dc2cFpuZ4w3/Z0BFSZPLZpOlj3YpnmVTI1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUc7k9lT/n3NWNyz9YYQKGFI3VAScwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL2M3azlsVF9uM05XTnl6OVlZUUtHRkkzVkFTYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXLfEAwDQYJKoZIhvcNAQELBQADggEB
AMZRV7tPVinJBn3Rm2BMCbw/rSJ9olluADTRL5rjo9uLJzu2C/stOtMAZtkLAtkw
5B7RxPXGjmUdImcjx6hAsbqkemogtcaSRD11Dq9Aa/wzy9IkO/7yArL9WRg6LnXG
d0VkMY9lnqghL8PJN4MMjndI4Rdew89ozayaUXkc7HtWfsAlgcoCu40WreAQsN2V
xutLOrSYWoWK1BloyhU+c/46QBweMVAQLecNEKGSEyAmGv8twBPOYBH0oE/PTv8n
uyHrS8mU8UAjb5eHxvzgOFAeDrmyCo2QWB3s0225eBxR1hR9AjvG0tDUbhXzE8nJ
F1wXgbb7fVAQjvz8GPYrYHk=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:55 2026 by rpki-client