Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/knRERKK_NzLr4LseskVDkYJHzCg.roa
File:                     knRERKK_NzLr4LseskVDkYJHzCg.roa (raw, json)
Hash identifier:          2nTlwpHwc1BnK1VgS8R9Zyl1kfYvcIFBBFuC432zAlA=
Subject key identifier:   92:74:44:44:A2:BF:37:32:EB:E0:BB:1E:B2:45:43:91:82:47:CC:28
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0426
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/knRERKK_NzLr4LseskVDkYJHzCg.roa
Signing time:             Tue 31 Mar 2026 08:11:53 +0000
ROA not before:           Tue 31 Mar 2026 08:11:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9378
IP address blocks:        180.131.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=92744444A2BF3732EBE0BB1EB24543918247CC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:54:4f:e5:51:ff:4d:e3:4e:17:eb:70:88:
                    bb:94:63:5a:5b:84:13:dc:3d:d4:10:1b:43:20:85:
                    15:55:25:e2:8b:2d:a9:d5:c8:c2:09:a8:2d:c6:41:
                    06:fb:d4:5c:6f:57:a7:c4:16:9f:1d:6e:a6:a5:1c:
                    65:b9:11:84:03:1c:d8:5b:75:56:84:66:51:e1:39:
                    e2:f2:f3:62:92:6d:c1:3a:7a:f3:91:ca:be:76:09:
                    a8:1b:3f:fc:36:de:52:2b:fb:9e:36:22:61:78:e0:
                    6f:08:7d:55:ee:f1:4c:cc:01:7c:19:12:47:35:36:
                    8e:5f:e3:3b:8f:aa:e9:11:b9:1b:2b:78:34:99:7b:
                    e4:9a:a4:f7:3f:f8:07:de:9f:78:9a:98:f5:81:fd:
                    a0:28:5f:c7:2b:b8:75:c8:9a:de:58:8f:0c:0c:88:
                    47:01:d3:6b:9b:73:06:fe:49:fc:23:64:a2:63:cf:
                    ff:af:1a:69:66:7b:24:85:c6:c4:7e:ea:77:70:4d:
                    45:2e:b6:c9:60:5b:a0:65:47:6e:36:0c:b6:b7:19:
                    c9:09:93:5a:2c:b2:7f:f0:93:ab:19:24:14:da:bb:
                    50:f5:9e:4a:aa:c0:d6:70:c6:54:f3:4b:e3:ee:24:
                    2b:a0:c4:ca:3c:2d:ac:28:ab:84:24:9f:da:00:2e:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:44:44:A2:BF:37:32:EB:E0:BB:1E:B2:45:43:91:82:47:CC:28
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/knRERKK_NzLr4LseskVDkYJHzCg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:1b:54:a7:03:1b:e2:e0:e4:f2:5a:3d:42:88:5e:90:65:
         21:ac:ce:c2:53:4f:cd:6b:8f:0a:90:28:23:cf:01:48:02:89:
         9c:86:21:73:94:90:0e:17:62:7c:1a:ef:c5:1e:68:61:5c:35:
         87:50:ab:95:66:55:0e:7e:f1:6d:a8:01:44:ce:a3:92:5c:3d:
         95:02:c7:e0:c0:cd:7d:f8:b4:0b:c5:76:9f:60:55:e2:e5:f0:
         9e:96:42:7b:3a:21:9e:04:ae:bd:97:91:22:3f:9d:cf:0d:11:
         32:d4:8c:6e:fb:d4:a6:1c:38:75:e3:c5:03:bc:18:c5:ab:0c:
         0b:b3:57:a4:f8:72:f5:88:d7:f7:f9:19:4f:66:0b:5f:9a:96:
         06:b5:b8:47:69:62:f0:77:af:e1:f6:da:f7:bc:e3:46:96:a8:
         40:c8:c3:52:6e:94:eb:12:d4:b8:cd:37:37:62:dc:9c:e6:3f:
         d6:37:28:6b:ac:04:99:79:6b:38:a7:d5:83:36:42:69:c5:80:
         7e:6f:80:32:e5:13:a8:ce:0b:e0:be:ed:81:a5:df:aa:1c:bb:
         6d:b4:0b:c9:2d:2d:f9:5c:c7:06:1e:b8:48:93:34:82:58:c3:
         65:69:16:9a:9e:c8:78:58:c7:33:44:53:53:e0:c1:c3:d9:98:
         1f:a3:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:44:15 2026 by rpki-client