Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ey20W1T3Ug8d7BxlXdqLMH8PJNo.roa
File:                     ey20W1T3Ug8d7BxlXdqLMH8PJNo.roa (raw, json)
Hash identifier:          4zPElmMdcBYS0KpmGFWlqxRk87QMWBhmYmzadIkGDyA=
Subject key identifier:   7B:2D:B4:5B:54:F7:52:0F:1D:EC:1C:65:5D:DA:8B:30:7F:0F:24:DA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04AD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ey20W1T3Ug8d7BxlXdqLMH8PJNo.roa
Signing time:             Tue 31 Mar 2026 08:12:59 +0000
ROA not before:           Tue 31 Mar 2026 08:12:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        61.192.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7B2DB45B54F7520F1DEC1C655DDA8B307F0F24DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:07:ad:5b:a6:9e:fe:c1:08:86:48:89:9a:
                    b2:6d:dc:ee:4a:7a:b3:06:4d:30:53:6b:57:ad:60:
                    db:30:89:27:e2:52:a9:e2:87:74:23:72:8c:d4:1e:
                    89:d3:e5:21:61:52:e4:cd:40:50:93:38:5b:91:5d:
                    0e:0b:7d:3f:7d:eb:7d:c6:6c:32:9e:0a:c0:c8:39:
                    f8:73:e2:86:e9:5f:e9:ff:35:a3:42:af:37:6a:41:
                    a9:46:c9:5a:0e:b8:fa:d3:24:1c:4b:51:95:ff:71:
                    10:76:d9:d5:3d:d2:07:5c:ae:4f:de:71:5e:0e:00:
                    9d:49:1a:18:87:4c:60:a9:38:86:37:1e:d8:98:40:
                    83:d3:bd:2e:60:1c:ae:52:58:7d:b7:c3:13:0a:17:
                    a6:72:40:aa:10:6e:da:f3:40:c6:e9:5a:de:0d:ac:
                    76:1e:e7:30:93:cd:51:d3:62:b8:29:93:4a:f0:6d:
                    6f:43:c7:89:ec:38:c0:b6:4c:24:22:57:25:59:21:
                    53:f6:87:43:44:b7:bf:08:a0:0c:9b:0f:0f:d8:7f:
                    a7:26:8c:09:64:f2:50:de:1f:23:c9:1a:a3:d2:d9:
                    64:cf:9f:03:fe:40:fc:32:20:85:f3:16:f8:28:49:
                    cc:d5:82:8c:97:ab:18:74:e2:fa:ff:a4:ec:6f:d6:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2D:B4:5B:54:F7:52:0F:1D:EC:1C:65:5D:DA:8B:30:7F:0F:24:DA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ey20W1T3Ug8d7BxlXdqLMH8PJNo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:23:57:71:b6:32:2d:86:45:08:3f:35:e6:0f:88:5c:8c:
         7d:39:92:64:76:55:a5:c1:98:e6:81:0d:8c:8e:98:96:81:56:
         7e:9c:47:f8:04:7a:b0:7c:e4:83:cc:c2:7c:2e:1b:c5:6b:90:
         dc:ea:0a:da:c7:ae:92:e2:c0:ad:d4:b8:bd:23:74:38:60:5d:
         1f:5b:ce:c7:bd:69:e7:2f:07:5a:bf:99:0e:e2:b8:2b:dc:5d:
         5f:0a:f0:c0:18:b5:b0:fc:06:f3:0a:1d:54:f1:45:9d:68:c6:
         0f:a9:64:1c:f4:fe:01:7f:ff:33:f5:84:78:a8:c5:8d:af:ef:
         fd:04:d4:61:c3:19:12:f3:67:4e:ab:64:bc:2f:95:31:f9:6d:
         16:3d:59:85:7c:a0:97:29:23:ab:1e:41:c7:5e:44:d8:c5:72:
         71:12:92:13:77:23:69:25:8a:36:c7:05:5d:7f:1d:5c:b3:93:
         e1:a7:c2:bc:e7:8c:b2:0f:1b:b5:cf:b2:bb:f4:46:35:ae:30:
         b1:22:d1:c5:62:fe:04:88:20:6d:3f:ba:df:f3:f2:7b:da:d7:
         89:29:75:26:5b:67:49:98:be:af:d5:bf:54:ce:54:00:37:f3:
         97:24:4a:d8:56:b5:eb:13:17:d7:b4:87:04:6f:62:b8:b7:f6:
         d5:cd:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:26 2026 by rpki-client