Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dcLyaDh8bZXsTy7z6U09Lc9MtKo.roa
File:                     dcLyaDh8bZXsTy7z6U09Lc9MtKo.roa (raw, json)
Hash identifier:          nZ8LkRtcJwxM58G9i3aNzf5OguNl53h4Pb7whpjKAOg=
Subject key identifier:   75:C2:F2:68:38:7C:6D:95:EC:4F:2E:F3:E9:4D:3D:2D:CF:4C:B4:AA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       044D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dcLyaDh8bZXsTy7z6U09Lc9MtKo.roa
Signing time:             Tue 31 Mar 2026 08:12:15 +0000
ROA not before:           Tue 31 Mar 2026 08:12:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        119.161.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=75C2F268387C6D95EC4F2EF3E94D3D2DCF4CB4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:01:ee:ec:f4:b3:3c:b8:51:90:eb:bb:18:
                    87:90:a3:fa:f9:cb:e2:f3:f2:68:7f:56:e8:f5:9f:
                    bc:b3:8b:be:ca:b9:de:89:1e:50:ee:fe:35:76:27:
                    85:2b:18:fa:ab:61:24:21:ee:60:e8:ae:0f:4e:1f:
                    a6:cf:ac:b0:a4:22:84:84:fb:28:15:f6:0a:ca:68:
                    ab:9c:68:d4:45:37:0b:7d:f3:ab:30:f3:d7:58:80:
                    c1:a9:7b:63:d5:a2:b4:c3:14:44:07:61:3b:68:98:
                    5e:c9:d5:f2:d4:ae:86:54:90:d7:ed:a0:09:06:60:
                    d7:df:91:7c:69:10:9e:82:61:2d:86:f7:85:d6:49:
                    29:ff:64:28:37:69:d3:85:e7:f8:3c:30:52:56:60:
                    c9:b6:ae:76:2e:fa:f0:87:e0:5f:12:22:75:cf:7c:
                    40:b6:89:54:df:54:3b:06:dd:c7:ca:8b:e2:62:9e:
                    9e:65:01:3a:db:58:6f:02:d4:ab:38:90:8a:46:8f:
                    05:ac:14:8b:b4:91:6c:e8:7e:7f:62:0d:b8:3f:1f:
                    81:80:cc:25:6a:04:03:f9:86:54:26:fc:2e:a6:dd:
                    2e:e5:c1:eb:9a:87:44:53:e2:ad:b6:bf:24:ba:ca:
                    b2:a3:92:2b:cd:34:dd:6b:6b:7d:4c:aa:ab:fe:c1:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C2:F2:68:38:7C:6D:95:EC:4F:2E:F3:E9:4D:3D:2D:CF:4C:B4:AA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dcLyaDh8bZXsTy7z6U09Lc9MtKo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:a1:6c:23:42:58:6c:79:7d:32:a8:c3:c9:3b:52:da:dd:
         a3:5e:a7:1a:06:f7:5b:d5:0c:a8:74:b0:94:3b:33:bc:cd:04:
         82:59:ba:7e:c7:35:70:b2:9a:79:38:dc:23:de:7a:36:6a:39:
         0b:32:a2:30:b7:8d:6d:47:17:24:71:01:1d:3e:30:65:e3:64:
         15:2e:ea:26:f0:47:81:94:c1:d6:37:d8:db:62:db:9e:b2:a5:
         9a:21:e7:ca:37:37:e6:59:e6:e0:e0:af:fe:ad:39:3b:a9:a6:
         79:11:0c:15:e2:8a:18:47:ab:f2:69:d3:b6:8f:08:d3:8e:62:
         95:82:6d:b8:cb:62:f1:fc:5f:73:62:79:b1:14:3b:d9:39:56:
         62:87:d1:f8:d5:e2:4c:c5:36:5c:8e:b5:04:8d:63:28:34:ca:
         6d:b1:3f:bf:0e:fa:fd:e7:a5:2b:74:3b:2c:39:b4:e9:5a:26:
         f3:c6:fa:37:56:ba:15:67:18:bc:e6:b1:c3:67:96:3f:15:ae:
         6f:2f:3c:65:0a:d1:fd:8c:43:3e:c4:e6:c4:eb:ff:b1:c6:2c:
         ff:fe:2a:00:d5:33:d8:ce:e2:2c:00:8e:0f:62:2d:cd:71:08:
         b0:f9:82:dc:84:4f:8f:3c:89:19:55:74:91:87:5b:e6:da:06:
         14:75:f2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:37 2026 by rpki-client