Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cBfVqDGPatWr4hhngGq-NdGT1Ns.roa
File:                     cBfVqDGPatWr4hhngGq-NdGT1Ns.roa (raw, json)
Hash identifier:          GOBaFEmZYcEWV1OVCCSuFDk028wR02HnczJ8CvKyaME=
Subject key identifier:   70:17:D5:A8:31:8F:6A:D5:AB:E2:18:67:80:6A:BE:35:D1:93:D4:DB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04C1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cBfVqDGPatWr4hhngGq-NdGT1Ns.roa
Signing time:             Tue 31 Mar 2026 08:13:11 +0000
ROA not before:           Tue 31 Mar 2026 08:13:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        219.115.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7017D5A8318F6AD5ABE21867806ABE35D193D4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3f:3b:43:bf:e1:51:82:cc:cc:89:40:30:b8:
                    8d:e9:41:d1:f4:38:9d:bb:7c:d2:ce:c5:e4:28:fb:
                    dc:62:89:92:5c:e0:c7:c9:bf:b4:07:5e:0e:94:e3:
                    9e:bb:01:ad:fb:51:28:08:d4:1b:e1:ce:ab:7e:fd:
                    16:6d:11:76:7c:5e:40:08:96:b6:17:32:d4:46:8c:
                    9b:57:48:08:fe:66:d2:17:e9:2c:cf:7c:d5:be:22:
                    8d:82:ec:c9:72:e4:f2:4b:16:22:ec:07:e6:d3:c2:
                    fd:7d:15:d4:dc:c1:29:34:1c:f5:68:5c:09:27:09:
                    dc:f7:aa:29:d8:63:08:6e:fa:21:e5:8d:69:24:3a:
                    6c:1c:68:f7:46:c3:e2:7c:8b:17:6b:34:b1:b9:a7:
                    59:53:23:4d:d5:46:90:df:67:1b:04:e5:81:c9:07:
                    11:fe:a2:13:47:b1:39:2b:6c:84:88:99:35:9d:d1:
                    69:48:27:19:05:d6:22:1b:f9:14:ba:8a:91:fb:04:
                    cc:56:67:db:06:b6:87:94:6d:a6:21:63:c8:35:4d:
                    f7:60:06:d6:e3:46:2d:22:d4:39:ae:f4:2c:c6:02:
                    31:46:1d:75:e9:cc:0c:2b:7c:58:34:75:0e:ee:36:
                    b6:37:c9:dc:98:3d:be:a3:4e:4f:04:f1:14:5c:47:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:D5:A8:31:8F:6A:D5:AB:E2:18:67:80:6A:BE:35:D1:93:D4:DB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cBfVqDGPatWr4hhngGq-NdGT1Ns.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:49:ac:28:c5:9a:c6:1f:35:dc:a6:ae:90:24:cb:61:84:7e:
         d5:e5:45:db:f1:47:89:6b:da:36:fa:5e:5b:23:3d:91:22:bf:
         7e:93:5f:86:95:1b:5c:5e:23:31:54:77:90:82:9c:6e:68:8a:
         05:0d:65:c8:4f:0f:a6:cf:70:c3:39:32:1f:b5:52:69:af:5f:
         ef:7e:fb:16:fd:bc:15:1a:38:01:96:46:9e:a7:18:33:63:7d:
         50:ca:94:20:e4:b6:5d:fb:99:08:74:b7:33:ed:44:a2:fe:b8:
         91:96:94:45:b0:fb:e5:4f:d6:f2:15:53:ae:7d:a1:75:33:9e:
         98:17:92:3a:bd:b2:5e:21:25:7e:e9:c9:ff:1e:12:ab:9a:8e:
         47:2f:7d:3f:f1:a2:68:e9:da:a3:a0:8f:b5:73:ed:d8:a5:13:
         78:82:a4:ee:95:5a:43:dd:bf:11:f0:ca:38:56:7e:d4:ca:a4:
         e1:05:80:3d:f1:ca:37:ad:e3:a5:9d:9c:13:1e:bf:27:c2:59:
         70:25:e8:82:28:e9:5d:88:1a:62:d8:e3:11:d9:40:a2:8b:f4:
         e4:b3:ea:24:f4:6b:e7:0e:2a:7d:99:af:b3:81:59:f7:a0:65:
         fe:53:b7:23:e4:3e:61:97:5d:29:20:d2:83:bb:6b:ed:96:40:
         9d:74:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:50 2026 by rpki-client