Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/fZ6PSqbtUm-od6GPPGChStdNJg8.roa
File:                     fZ6PSqbtUm-od6GPPGChStdNJg8.roa (raw, json)
Hash identifier:          1jHMR0IIGfbkgZlESmVfTq84vRVb5d5PR/wiGkyOISY=
Subject key identifier:   7D:9E:8F:4A:A6:ED:52:6F:A8:77:A1:8F:3C:60:A1:4A:D7:4D:26:0F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0494
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fZ6PSqbtUm-od6GPPGChStdNJg8.roa
Signing time:             Tue 31 Mar 2026 08:12:49 +0000
ROA not before:           Tue 31 Mar 2026 08:12:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        219.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7D9E8F4AA6ED526FA877A18F3C60A14AD74D260F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:21:bb:62:32:4a:7c:a3:d0:79:b6:00:aa:
                    f7:c6:1e:73:07:f0:19:a2:5d:ce:8f:55:43:cd:40:
                    e0:51:ab:34:00:64:79:45:dc:b1:77:cc:7c:f7:39:
                    62:75:b6:bd:1a:99:19:02:b5:8b:ab:13:3a:e0:5f:
                    13:7e:3b:16:f4:c0:ba:86:14:f5:8e:46:97:83:51:
                    cd:45:45:c3:27:16:3a:3a:fc:f2:c7:33:65:80:77:
                    e1:ac:c3:58:bd:27:75:f0:d0:68:c1:f3:3c:6b:5d:
                    00:cf:e5:2a:15:9c:40:f1:2e:cb:b1:27:0d:1b:58:
                    db:98:52:70:bf:43:74:40:3e:4f:56:21:20:66:53:
                    fd:93:75:51:93:7d:dc:ef:34:7f:23:d0:5f:8c:27:
                    a3:1b:09:8c:67:71:3d:93:98:b0:5c:96:64:d7:10:
                    8e:14:2e:a5:29:08:c8:28:1a:68:3c:6e:a7:e9:c8:
                    26:5a:bc:02:8d:7c:8b:4f:a7:17:20:76:0e:74:5c:
                    3f:6e:fd:8d:bd:d6:c6:79:0b:a6:20:0c:19:04:92:
                    5a:36:93:e5:10:84:43:e6:bb:65:48:73:d3:9a:07:
                    77:ef:59:69:3e:dc:24:24:1e:6f:3b:75:e5:a3:53:
                    68:d3:e0:bf:dc:94:7f:c2:70:0d:51:ff:94:78:c7:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:8F:4A:A6:ED:52:6F:A8:77:A1:8F:3C:60:A1:4A:D7:4D:26:0F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/fZ6PSqbtUm-od6GPPGChStdNJg8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:84:c0:72:7b:70:7e:3f:dc:27:a7:9c:69:c4:ba:3a:dd:f2:
         c7:ef:f2:03:61:2e:7a:a1:7c:99:55:91:c6:a6:ba:05:3b:c0:
         75:36:21:39:fd:9a:69:2e:c9:aa:2f:e8:a4:d1:e2:fd:b3:dd:
         47:6a:10:c3:42:eb:6d:89:aa:a4:d4:4e:06:bc:56:3a:34:d9:
         47:d7:be:18:20:57:11:06:46:b5:a7:20:a3:bd:b2:f0:c9:98:
         73:2a:6d:69:1f:67:88:86:b7:6d:00:bf:87:b6:ff:a3:08:67:
         d8:4f:93:67:29:a9:cd:8d:78:8d:7e:cc:f7:9a:36:7d:37:1f:
         3e:1e:37:97:7e:54:94:5e:0d:ac:1e:90:6e:0b:45:e1:13:31:
         1f:e6:75:24:94:ab:d1:a0:c8:ad:50:ad:c2:d2:ff:8a:ae:45:
         3d:eb:fb:45:35:6f:3c:bb:c1:f3:65:47:23:c3:62:ed:66:46:
         b1:88:20:a7:32:03:0d:8c:8e:f6:f2:14:01:30:1c:80:5b:dd:
         6a:1a:a8:f6:d1:d5:ac:3a:10:14:c3:3a:d7:cd:17:fb:0b:f6:
         26:81:0c:78:5b:52:d3:54:2c:e4:d8:df:15:bf:c9:5f:5f:eb:
         9f:9d:96:93:19:d3:7d:94:4f:d6:ab:8c:d4:57:48:87:32:20:
         b5:4c:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:38 2026 by rpki-client