Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ekFLyCu3x-oTn1cuMoE0jvQ1sf0.roa
File:                     ekFLyCu3x-oTn1cuMoE0jvQ1sf0.roa (raw, json)
Hash identifier:          L74FwPNfJKfuuSXIJsWMbK7utlo97U3uMIxZ4v6xeHo=
Subject key identifier:   7A:41:4B:C8:2B:B7:C7:EA:13:9F:57:2E:32:81:34:8E:F4:35:B1:FD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       046B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ekFLyCu3x-oTn1cuMoE0jvQ1sf0.roa
Signing time:             Tue 31 Mar 2026 08:12:30 +0000
ROA not before:           Tue 31 Mar 2026 08:12:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        114.134.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A414BC82BB7C7EA139F572E3281348EF435B1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:ae:0b:49:a9:82:24:36:38:dc:85:fe:48:
                    a9:89:8e:a5:20:c1:8a:e7:d1:6e:b6:a5:b8:50:ed:
                    c6:22:2f:21:35:23:d7:7a:66:85:94:fe:00:99:db:
                    ec:02:5b:03:85:f6:73:0d:43:27:9f:26:7c:75:b9:
                    fa:ee:2a:35:12:0a:84:35:15:f1:9a:f3:e0:dc:67:
                    bc:37:69:2a:75:db:46:99:20:cf:52:f7:c9:b7:d6:
                    ef:c8:84:0f:cd:d4:f9:75:2a:7c:49:ce:0d:38:6d:
                    3e:ef:23:18:45:8d:03:aa:38:82:88:29:52:4a:a2:
                    e7:22:4f:30:f0:5a:6f:59:1b:fd:5b:a8:55:b7:74:
                    d5:59:47:39:31:e1:68:0a:9f:38:0c:fb:0c:f0:57:
                    6a:14:9e:11:30:af:12:dd:e0:ea:ce:b2:02:f5:06:
                    52:60:d3:e2:f6:c7:7a:25:da:d0:01:4d:c8:75:e4:
                    cc:79:50:21:76:4c:69:e2:09:95:c9:f0:64:05:29:
                    3f:66:58:f7:dc:2e:f0:68:56:bb:e7:42:96:83:54:
                    19:e6:cc:22:79:48:bd:cd:df:fa:b4:02:3c:1b:75:
                    e5:26:f6:26:ea:4d:fa:14:3e:d3:c9:6d:16:d5:d2:
                    04:91:d4:77:86:83:29:70:8a:59:86:a2:82:a0:e0:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:41:4B:C8:2B:B7:C7:EA:13:9F:57:2E:32:81:34:8E:F4:35:B1:FD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ekFLyCu3x-oTn1cuMoE0jvQ1sf0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:10:ee:73:84:e8:f1:b0:2a:54:c7:02:98:80:75:4e:cc:
         bf:c0:61:54:fb:96:a1:cf:13:69:97:e5:88:b0:88:ed:58:5f:
         f2:52:ce:d0:33:8e:04:a3:3c:8b:bd:94:44:b1:16:4a:7a:ed:
         32:ca:43:10:63:60:e8:6c:15:fd:03:1d:cf:a7:09:55:9b:ed:
         c0:08:2d:1e:22:4b:6d:aa:ea:5f:62:d8:4e:73:25:15:a6:8c:
         78:9e:23:9f:09:9a:3f:38:58:b0:c2:2d:34:8f:07:02:04:d0:
         89:d7:48:92:76:d9:dd:f6:0d:52:ed:c8:5c:2c:2b:ef:6e:4a:
         b2:9b:70:17:4f:1d:ce:9e:d7:63:45:a6:4f:87:60:f2:d7:7e:
         11:18:c1:6f:ff:1a:4d:b2:23:4d:0f:32:ff:e4:eb:23:99:b6:
         b1:77:8f:37:02:fa:dc:d8:92:d6:4c:c8:95:3b:24:ad:30:f6:
         49:b9:6a:9e:4b:c1:df:0c:38:b8:8d:2b:b9:a9:e7:c8:bd:d4:
         6e:d4:6b:b1:c4:fd:b0:29:97:4c:a9:fe:01:11:cd:00:b0:05:
         e6:3b:47:a6:13:7b:ce:69:34:59:f7:46:79:ee:a3:26:1b:80:
         76:35:ad:59:0d:ff:42:fd:fc:d7:1f:00:10:80:20:87:72:11:
         18:cf:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:40 2026 by rpki-client