Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/htKluaS6z5kok1UxeyQXuEZechs.roa
File:                     htKluaS6z5kok1UxeyQXuEZechs.roa (raw, json)
Hash identifier:          CULIrQpVljbY07vbxSM5bG/a0ZsdWSbRzTiL+MunvQs=
Subject key identifier:   86:D2:A5:B9:A4:BA:CF:99:28:93:55:31:7B:24:17:B8:46:5E:72:1B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       041E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/htKluaS6z5kok1UxeyQXuEZechs.roa
Signing time:             Tue 31 Mar 2026 08:11:50 +0000
ROA not before:           Tue 31 Mar 2026 08:11:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        61.215.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=86D2A5B9A4BACF99289355317B2417B8465E721B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:25:ae:ac:03:20:df:85:22:bc:99:1e:d9:5c:
                    1b:86:02:e0:1d:06:51:c3:c5:b0:05:04:ea:7b:67:
                    1b:b5:ba:bf:34:a1:15:75:1b:eb:a6:b2:17:4c:74:
                    cc:ab:89:15:34:7e:4b:e8:83:a9:3f:8a:3a:a4:9c:
                    4e:89:14:b1:d1:fb:8c:1a:ec:73:de:47:6a:c5:5e:
                    1a:1f:a9:72:3a:3e:dc:59:86:c1:f9:c6:9f:3c:90:
                    a0:df:a5:39:05:68:96:0f:e5:b2:1f:35:3a:87:e9:
                    5d:94:c5:56:7a:04:ef:e9:9d:ed:76:db:ed:aa:04:
                    09:5b:cd:a2:ec:07:8a:31:aa:c5:35:c9:1b:39:4a:
                    e9:38:cf:ac:7a:be:27:32:47:ac:4c:83:48:01:e7:
                    f2:f4:bf:92:25:71:20:b2:ab:55:ac:e4:0c:bc:fc:
                    5a:c2:27:24:5a:53:02:e8:11:df:18:49:d0:6f:a5:
                    e5:99:f6:91:8c:08:91:3e:a4:a3:d9:93:11:f1:ea:
                    35:0b:23:72:74:79:a9:96:c2:09:e8:20:ce:16:62:
                    a3:56:6a:08:15:28:07:be:27:ac:c0:78:d4:b5:fc:
                    d3:8e:57:8c:0b:67:a4:41:19:d4:d9:af:e6:08:e7:
                    c0:af:98:ed:37:b3:e5:77:31:39:a3:c6:9f:0a:6a:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D2:A5:B9:A4:BA:CF:99:28:93:55:31:7B:24:17:B8:46:5E:72:1B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/htKluaS6z5kok1UxeyQXuEZechs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:95:66:20:68:f8:9b:a7:d1:91:94:a5:bd:0f:7c:1f:71:
         3f:49:78:06:da:f1:f1:41:6f:65:39:88:ad:19:84:8a:f9:ef:
         57:5a:98:09:03:f5:4b:c2:28:9f:ff:76:30:d8:8a:f9:ae:10:
         9d:17:05:2c:ab:85:72:16:3b:a5:e3:79:6c:f7:02:1a:79:8d:
         55:1f:e6:ca:47:8b:c5:12:d7:06:52:19:83:4a:00:cc:e2:cb:
         c8:b1:e8:0f:bc:18:82:de:af:ea:6c:fe:31:d7:52:b1:0b:69:
         da:0c:be:ff:64:29:3a:00:25:6e:87:51:f5:a8:09:1a:99:58:
         c9:db:0a:7d:98:0a:1d:76:0b:3b:61:f0:94:bd:01:46:17:0a:
         bf:6a:ac:96:d3:4a:d8:a8:71:5d:bf:c9:92:32:3a:a5:01:e5:
         de:19:51:4e:63:f3:9b:2b:62:05:e8:b0:01:99:86:9b:ce:a5:
         f0:06:5d:73:31:b8:e7:b2:e3:8d:e5:58:30:28:3d:33:69:79:
         69:3c:ea:f2:84:99:37:f6:ec:45:3a:4e:d1:be:7b:66:22:87:
         87:1f:06:5e:bd:3f:af:8c:ce:42:b6:75:27:04:43:25:ac:e3:
         90:36:88:30:54:21:54:b9:a2:b1:81:59:9c:2a:ba:cd:78:83:
         06:52:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:54:21 2026 by rpki-client