Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/fXa5IgT9Czhg-rzKXvxGUb9SsAg.roa
File:                     fXa5IgT9Czhg-rzKXvxGUb9SsAg.roa (raw, json)
Hash identifier:          6kUysvJNMLafY72T7+kH4H6AwhWxx55LqiJ/5itlZ2M=
Subject key identifier:   7D:76:B9:22:04:FD:0B:38:60:FA:BC:CA:5E:FC:46:51:BF:52:B0:08
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04CB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fXa5IgT9Czhg-rzKXvxGUb9SsAg.roa
Signing time:             Tue 31 Mar 2026 08:13:15 +0000
ROA not before:           Tue 31 Mar 2026 08:13:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        116.70.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7D76B92204FD0B3860FABCCA5EFC4651BF52B008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a6:43:6a:92:36:f2:a7:f6:ed:56:91:61:6f:
                    10:0a:d6:57:c9:a6:d2:87:98:24:99:fc:d2:ef:e4:
                    83:c0:cd:78:9a:73:2b:99:09:3e:de:9b:8b:c7:72:
                    e7:60:36:be:7e:90:dd:cf:39:05:8c:5c:a1:1f:fc:
                    22:3f:e3:25:78:8a:1d:9d:ca:cd:2a:02:9d:43:b3:
                    8e:f5:cb:33:c6:5b:bb:62:f2:34:67:e8:39:42:b0:
                    6d:9c:2b:1f:43:90:89:94:53:f2:7e:55:a9:6d:e5:
                    7b:c5:d3:51:00:16:eb:31:90:0a:d5:64:6f:cc:78:
                    a8:98:e4:77:c6:e6:75:8f:e8:0e:6c:29:14:d4:1b:
                    34:16:67:3f:9a:0b:5f:6a:d6:f7:89:04:57:80:3b:
                    ad:d0:81:1e:18:87:fd:4b:13:94:2a:bc:16:6e:e2:
                    d6:cd:bb:f5:11:15:03:0f:0f:97:e7:da:97:59:3b:
                    5c:7b:51:58:ad:44:4e:d0:5e:df:3d:1d:71:5f:d3:
                    d0:b3:5c:fb:0c:78:c1:9c:e6:72:7b:a5:67:08:09:
                    07:0c:86:18:ad:b5:a8:bf:1e:54:1b:c0:34:7f:cf:
                    da:71:3d:02:eb:c2:22:0a:28:4b:83:51:49:25:53:
                    d7:a4:1a:e9:c4:38:cd:8e:86:93:a7:84:e7:03:35:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:76:B9:22:04:FD:0B:38:60:FA:BC:CA:5E:FC:46:51:BF:52:B0:08
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fXa5IgT9Czhg-rzKXvxGUb9SsAg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.70.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cb:5a:79:b8:56:5e:60:17:79:cc:b9:e5:8b:0d:d0:e6:dc:96:
         48:8c:45:d1:ef:0b:0b:56:4b:34:8e:7f:45:22:b5:3b:e5:74:
         37:50:25:af:71:ad:a0:8d:b6:f6:0c:20:54:0b:f5:50:ba:d3:
         cf:8b:40:35:fa:c5:69:f6:62:bc:db:6f:7c:9e:bd:6f:ff:f6:
         1e:0a:7f:33:f6:dd:65:4a:e7:7d:96:25:65:d6:50:d1:7c:91:
         6e:9d:04:79:a4:ad:d9:3e:73:86:9e:a1:8e:15:be:28:09:1b:
         73:55:13:0f:52:32:15:1a:1e:28:96:7f:7d:ec:16:c6:53:9c:
         67:a8:2c:31:39:72:1e:27:c4:c6:d0:19:65:1e:a9:ad:5a:13:
         1f:7b:28:e6:ed:88:d7:8e:b6:bd:8b:ac:46:07:30:67:f5:bd:
         d9:bf:fa:09:ea:e4:79:8f:89:3c:ba:46:11:6b:72:4d:8f:8a:
         e4:4d:7c:49:96:e3:06:f4:53:bd:a8:77:e3:30:2e:bc:12:f9:
         49:5f:ef:d9:0f:91:5e:e7:3b:10:0b:27:74:91:51:82:e9:77:
         56:01:8a:23:fd:53:2d:ac:e3:25:bf:ec:61:24:b6:9f:b0:82:
         2e:40:49:78:a9:c1:f9:d1:bb:3b:3f:20:39:52:7c:4c:c9:7c:
         6c:a7:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:39 2026 by rpki-client