Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jNwpnZ37tGRsgaTY5xHblakySCI.roa
File:                     jNwpnZ37tGRsgaTY5xHblakySCI.roa (raw, json)
Hash identifier:          w3VFe6xmzT8knR0kxCcUhNyuKh7/vii0S6Ub2zriMI0=
Subject key identifier:   8C:DC:29:9D:9D:FB:B4:64:6C:81:A4:D8:E7:11:DB:95:A9:32:48:22
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04AA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jNwpnZ37tGRsgaTY5xHblakySCI.roa
Signing time:             Tue 31 Mar 2026 08:12:58 +0000
ROA not before:           Tue 31 Mar 2026 08:12:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        61.125.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8CDC299D9DFBB4646C81A4D8E711DB95A9324822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:2d:71:fc:57:ff:89:dd:80:d4:84:9e:2c:
                    c1:49:13:60:3c:3f:98:81:f2:8e:dd:3a:35:35:24:
                    67:9a:8f:44:7d:2b:8f:f7:5b:da:c9:9c:c3:0f:e6:
                    50:e7:5c:40:11:78:a9:87:83:19:3c:61:49:0f:17:
                    73:0b:44:8f:16:30:f7:51:cf:79:1a:cc:5f:07:d7:
                    f1:9e:9c:30:82:fc:c9:74:34:79:f6:68:cc:fc:69:
                    b0:cf:63:1b:7d:aa:0c:a3:22:41:e4:c7:7e:1f:f3:
                    02:42:13:ec:04:f5:35:56:db:55:be:f9:42:34:bd:
                    38:b1:74:17:ac:ff:fb:ce:7f:10:95:d3:a4:f9:92:
                    b0:ac:8f:db:e4:f5:7e:6b:b8:2e:57:d9:c9:1a:b8:
                    47:b0:08:c1:98:b0:de:6f:f8:4e:f0:14:e9:13:e9:
                    2c:7e:db:93:6d:07:03:10:5d:cf:55:26:8c:19:92:
                    fe:4d:3a:cb:cf:e8:70:12:90:ec:4f:20:bc:93:05:
                    67:ce:67:76:00:9e:15:41:35:93:08:62:79:04:b3:
                    a8:6d:8a:46:65:70:97:3f:c0:55:e1:27:bd:2b:e9:
                    81:8b:5a:f5:4c:fb:d6:71:40:0c:fe:50:60:25:fa:
                    85:31:12:12:ac:c9:ee:8f:31:a4:6d:22:35:e8:d6:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:29:9D:9D:FB:B4:64:6C:81:A4:D8:E7:11:DB:95:A9:32:48:22
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jNwpnZ37tGRsgaTY5xHblakySCI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:3b:44:88:7c:72:84:3e:af:1c:58:81:2b:d5:a2:b6:65:b2:
         75:8f:c1:e6:b1:7b:f1:8e:4c:16:e1:70:e8:27:ff:96:8a:22:
         ed:a8:0a:c9:93:3d:16:fc:7e:62:2e:f1:a8:1a:af:2a:81:f9:
         c4:2a:6b:5d:b4:66:db:14:e8:bb:8c:a3:f5:df:40:ed:3a:95:
         50:b4:8d:b7:b8:10:31:24:18:d0:21:f7:1d:75:77:72:2d:6f:
         91:8c:c1:ad:02:75:2b:92:72:21:a9:8b:ae:e0:d3:9f:76:38:
         75:33:3e:17:85:b2:b9:ea:ac:a6:dc:ce:89:6f:b1:8c:95:ad:
         d0:b1:90:a2:67:f9:16:7e:8d:59:d1:8a:20:94:ed:e0:ac:cc:
         57:24:c1:04:bb:a5:fc:39:05:df:52:c8:b1:4e:f9:35:49:42:
         99:74:06:37:a9:14:e5:63:d1:43:3e:c7:14:7f:a0:78:20:a0:
         c8:c2:9d:0b:0d:ce:d4:33:9d:98:93:a1:e6:fa:44:4b:1b:75:
         59:9e:09:9d:17:90:fa:a7:90:76:23:b2:e3:ef:b1:1a:a7:23:
         7c:ce:1b:fe:89:5c:9c:ad:d7:a0:99:a4:8f:cd:59:ca:c4:a8:
         05:f7:66:c7:b7:60:27:45:31:f4:f8:d3:4a:33:52:ba:33:d3:
         f8:a4:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:17 2026 by rpki-client