Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cCYKCs6l5PkmH4Y5VAbU_ciAcW4.roa
File:                     cCYKCs6l5PkmH4Y5VAbU_ciAcW4.roa (raw, json)
Hash identifier:          19hEEoDP20VImMQlDwem8R5mZCeWIFBuGNpm1khIqj8=
Subject key identifier:   70:26:0A:0A:CE:A5:E4:F9:26:1F:86:39:54:06:D4:FD:C8:80:71:6E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03F7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cCYKCs6l5PkmH4Y5VAbU_ciAcW4.roa
Signing time:             Tue 31 Mar 2026 08:11:32 +0000
ROA not before:           Tue 31 Mar 2026 08:11:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        110.93.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=70260A0ACEA5E4F9261F86395406D4FDC880716E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:ef:d1:43:1d:3a:b4:b6:ea:8a:85:57:c7:
                    e2:c3:9d:51:94:54:4b:71:2e:d5:02:c6:b7:7d:60:
                    8a:16:ac:c0:b1:69:a2:13:56:f6:97:fd:ef:e4:92:
                    16:c4:3c:28:39:0d:f2:9e:23:25:9d:4f:28:e9:24:
                    ea:21:2b:a3:4b:78:d7:5c:a8:e1:97:58:ee:79:4d:
                    a7:58:f2:b4:76:62:52:5d:e9:61:b2:95:b7:0d:72:
                    e4:c9:8f:f0:c0:04:d2:dc:78:fa:a5:ac:38:b3:90:
                    4e:ff:0b:98:ac:55:db:33:59:aa:48:9a:94:70:ed:
                    54:8a:c3:c5:c6:8f:ed:81:58:38:0f:12:30:61:82:
                    02:60:6a:e2:1e:2d:35:4f:3c:b6:f8:9d:c3:3e:42:
                    28:a3:e8:06:c8:79:52:58:77:01:32:33:7f:06:c6:
                    ac:99:5c:2a:e7:7e:5b:b0:2f:9c:f2:97:f4:5b:5a:
                    f9:41:48:d4:e5:83:f2:8f:1b:96:44:43:c0:6d:78:
                    48:29:7c:a6:01:5d:d9:b4:43:4e:a3:75:f3:ea:28:
                    a4:fe:97:fd:66:5c:7a:8f:a9:bf:6f:8c:65:11:2c:
                    ed:c8:70:8d:8f:1a:bc:b9:26:b0:6d:7f:d1:47:32:
                    1c:b1:d4:d8:c9:33:d3:f7:79:3e:5a:a5:fa:c7:f5:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:0A:0A:CE:A5:E4:F9:26:1F:86:39:54:06:D4:FD:C8:80:71:6E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cCYKCs6l5PkmH4Y5VAbU_ciAcW4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:00:f2:3a:4a:68:d0:97:b4:d6:31:c0:03:31:48:58:73:02:
         7e:c5:01:f5:5d:18:74:b7:4b:73:fa:1e:77:b1:94:fd:74:b8:
         8b:2d:8e:e5:87:08:55:0e:55:e1:33:80:30:8b:8c:71:1b:3e:
         23:0a:d1:aa:d2:08:df:1d:ce:68:9d:b8:3f:37:8d:fa:dc:5e:
         69:80:e8:f1:db:74:a0:13:71:0b:55:c4:07:2c:ea:ba:6d:1e:
         f3:a6:d6:da:08:f2:29:c7:62:06:74:2a:9b:ff:db:43:30:f6:
         10:b9:92:07:cd:b0:8b:1a:38:c5:f9:83:d0:57:4b:6d:bf:5c:
         0a:02:fb:1f:52:73:bd:49:ec:bd:b5:bc:e3:c3:4a:17:44:d4:
         74:81:1e:41:40:02:9c:0a:f6:57:98:2d:fb:72:af:3b:da:1b:
         b9:5c:ab:a0:22:4b:6d:11:33:ab:33:27:90:ed:f7:de:ad:37:
         25:64:3e:b6:09:69:38:d1:5c:04:76:22:6b:36:5a:3e:66:23:
         01:e6:09:66:ee:44:02:c4:e8:3f:c4:a6:5c:a9:46:6a:f9:89:
         d5:5c:11:ca:78:52:26:0a:64:96:40:36:c8:a5:f1:98:ca:54:
         8d:21:d6:47:96:81:91:1d:ef:02:f3:a9:b3:97:13:e3:e1:9f:
         19:ed:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:00 2026 by rpki-client