Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/e9UUNtXZvPffg-qAxVA9Z_QKSGY.roa
File:                     e9UUNtXZvPffg-qAxVA9Z_QKSGY.roa (raw, json)
Hash identifier:          OFkqv6B30ZVT1nR0HbICbIszdotQg/Rqz2Gk5fpZyDs=
Subject key identifier:   7B:D5:14:36:D5:D9:BC:F7:DF:83:EA:80:C5:50:3D:67:F4:0A:48:66
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0403
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e9UUNtXZvPffg-qAxVA9Z_QKSGY.roa
Signing time:             Tue 31 Mar 2026 08:11:36 +0000
ROA not before:           Tue 31 Mar 2026 08:11:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        223.165.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7BD51436D5D9BCF7DF83EA80C5503D67F40A4866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:35:8a:13:25:3e:33:6a:e4:f5:2f:19:55:
                    09:30:31:7c:e3:2b:65:0a:5f:d8:36:15:3b:de:20:
                    e5:21:ae:75:7d:08:fe:7d:70:af:ba:6b:26:99:84:
                    10:1b:21:62:7e:7c:45:96:2d:8e:8c:82:0b:d0:de:
                    f5:7a:04:31:7b:17:ea:9f:72:b5:2e:da:a5:e5:bc:
                    7a:97:9f:f9:ac:b3:85:d5:a5:85:9d:c1:24:5e:27:
                    96:51:75:8e:4e:d8:d1:e4:dc:bd:9c:43:67:b0:1f:
                    0f:e1:ca:2f:33:7c:d6:4d:b1:95:ac:44:3a:76:79:
                    0f:36:eb:41:a2:9a:07:4b:3c:c2:40:7f:72:11:ef:
                    0f:76:62:28:8b:21:d0:c9:f5:9d:84:cd:be:9b:18:
                    35:37:5b:73:57:9e:54:47:b4:dd:17:79:ad:b1:4d:
                    53:44:7d:5e:47:2d:ea:4c:cf:3d:3b:bc:8f:dc:e5:
                    fa:8d:4c:36:f7:32:4e:e0:98:66:2c:d5:a6:1a:cc:
                    28:b6:d9:3f:c0:a5:6e:f5:6c:3c:90:1b:17:29:cd:
                    44:47:aa:6f:58:d0:db:c8:56:57:c4:3e:fc:d3:7d:
                    51:7f:5b:d4:4e:08:94:9b:30:14:ff:ac:c9:14:65:
                    43:91:5d:a1:d3:36:a5:81:90:70:ac:25:0a:c7:ab:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:14:36:D5:D9:BC:F7:DF:83:EA:80:C5:50:3D:67:F4:0A:48:66
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e9UUNtXZvPffg-qAxVA9Z_QKSGY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:d0:83:32:2b:80:5e:a2:07:74:69:f9:3a:38:4d:f7:c8:19:
         bc:6f:ae:f2:2e:89:6d:17:90:d9:9f:6d:7b:f2:fb:fa:53:8f:
         a3:68:1d:4c:b9:91:67:96:b4:ef:2b:28:f5:05:8c:31:fb:ed:
         8a:de:a2:65:4b:d6:4c:99:1a:3b:82:be:e2:7a:da:77:5f:fb:
         ff:dc:40:af:dd:21:62:d1:21:ea:f0:fb:cb:10:ad:d3:04:cb:
         f0:9a:54:0f:21:54:db:cf:63:a2:45:c0:d8:4f:e4:6c:09:02:
         23:f0:a9:cf:54:8c:fb:bb:92:59:29:2b:52:e2:ff:2c:dd:0a:
         a7:ba:34:de:ab:ed:8b:94:3f:1c:d3:ba:ec:a0:ff:94:a6:01:
         8d:28:c9:bd:57:5b:80:e7:33:4c:d3:46:31:e6:81:68:e8:02:
         1e:70:f5:d5:49:f4:c4:2e:1a:0c:95:c1:bf:85:d1:41:24:c8:
         98:37:4a:25:02:7e:ed:38:3f:5b:8f:95:d8:a9:7e:8b:66:c6:
         61:3c:0c:79:7c:d4:a2:1c:8c:b1:14:67:31:f0:ba:43:eb:76:
         10:6f:fd:50:29:60:39:3b:d8:f0:b6:91:3c:01:40:1c:b7:62:
         d3:09:fc:32:ae:97:81:08:9e:a7:4a:9b:5e:da:0e:06:0a:07:
         6e:b3:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:22 2026 by rpki-client