Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/f7ANeS23mNXyQEeBGQeM0VTbZdA.roa
File:                     f7ANeS23mNXyQEeBGQeM0VTbZdA.roa (raw, json)
Hash identifier:          /AOY6zN6zuVhkuuahgGhNfZF+txPRCcBTY26Xv2Ix3k=
Subject key identifier:   7F:B0:0D:79:2D:B7:98:D5:F2:40:47:81:19:07:8C:D1:54:DB:65:D0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       042F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f7ANeS23mNXyQEeBGQeM0VTbZdA.roa
Signing time:             Tue 31 Mar 2026 08:11:57 +0000
ROA not before:           Tue 31 Mar 2026 08:11:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        113.197.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7FB00D792DB798D5F240478119078CD154DB65D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:7b:ad:83:75:d9:55:c7:e5:c5:1f:c7:43:
                    bc:25:84:70:02:a7:f0:fc:89:3c:20:c6:41:bb:c1:
                    cd:6b:51:c8:4d:88:59:6a:3d:ed:fc:ca:96:79:c6:
                    f1:f8:5f:18:15:df:06:d0:45:74:b0:3c:b9:a2:c1:
                    7d:d5:7a:ed:fb:98:0f:3c:3c:e9:9a:f9:58:22:2f:
                    01:b9:ed:01:ab:90:a1:a6:da:54:58:6a:db:5f:b0:
                    72:68:50:1a:00:0f:d2:1a:7b:5c:2d:f3:56:94:f7:
                    9c:4d:5d:7d:35:d9:da:e7:ea:f0:6b:ee:1c:68:35:
                    2a:10:ba:25:d0:05:85:f9:7f:b1:2f:f1:6a:cf:37:
                    f8:b6:9f:ec:61:97:ef:d6:6e:6a:d2:14:76:e1:b3:
                    74:e9:3c:e4:4d:ba:82:fd:9a:fb:9c:b2:83:a3:1b:
                    27:49:87:3e:52:90:3e:2d:18:bf:1f:a1:b6:86:11:
                    e8:0a:e8:45:92:95:da:0b:ff:45:34:5f:03:97:3f:
                    74:f2:3b:00:5c:1d:2d:ff:45:22:3e:38:e1:c2:3a:
                    f8:bf:39:ce:34:d9:4f:0e:ce:bb:9c:f9:c5:30:98:
                    c6:dd:7b:0a:4f:3d:c8:52:89:20:f3:25:be:7e:cd:
                    06:f7:25:fc:02:cd:d6:18:b3:c0:ce:a4:9d:35:49:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B0:0D:79:2D:B7:98:D5:F2:40:47:81:19:07:8C:D1:54:DB:65:D0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/f7ANeS23mNXyQEeBGQeM0VTbZdA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:86:bb:46:a2:0c:31:94:60:5f:d0:fc:6d:65:da:23:c1:1d:
         dd:e0:6d:24:b2:da:3d:83:12:5b:ee:95:34:00:7d:55:74:31:
         82:de:da:4b:3b:43:51:98:10:27:0c:39:b6:24:b4:0b:fd:6f:
         8e:ad:21:3d:ca:d4:8a:2a:53:65:27:01:c3:42:bf:f0:ae:5a:
         de:27:51:8c:93:06:77:7a:b8:60:1e:de:d9:ed:bf:49:c9:77:
         80:db:ea:5b:ce:b7:51:7c:16:84:47:b0:30:34:ca:ee:ae:7d:
         20:ba:bf:f6:a0:ec:84:54:23:cf:16:6f:bf:39:81:b8:8b:10:
         7e:0e:7f:0e:6e:ce:19:4b:4c:70:57:39:46:27:ee:ba:33:e7:
         33:9d:ff:45:1f:8e:67:6b:bd:ba:63:66:4b:72:53:d5:28:ff:
         d0:d6:01:ea:d6:6b:0b:76:36:b7:c0:ee:6b:a0:cc:a1:88:1c:
         70:ae:b5:ce:14:81:ac:4f:99:1d:f1:20:04:ab:69:44:10:46:
         da:4d:ba:87:50:d6:68:35:ae:a2:77:30:1c:b9:5a:79:46:d9:
         e0:06:d8:19:d1:1f:09:33:9e:99:68:8e:f9:f7:bb:6b:b6:fc:
         a7:a5:ab:ef:40:17:ad:74:c3:b0:a2:cf:91:e1:6c:72:1c:a8:
         77:63:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:06 2026 by rpki-client