Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/liYp-OIY7vuOU_dDsUwAaClQbAo.roa
File:                     liYp-OIY7vuOU_dDsUwAaClQbAo.roa (raw, json)
Hash identifier:          WLpmZuhVs6dHEzIhivwSeKyC2m9WXS1WLeZvm5RhJ1M=
Subject key identifier:   96:26:29:F8:E2:18:EE:FB:8E:53:F7:43:B1:4C:00:68:29:50:6C:0A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0402
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/liYp-OIY7vuOU_dDsUwAaClQbAo.roa
Signing time:             Tue 31 Mar 2026 08:11:36 +0000
ROA not before:           Tue 31 Mar 2026 08:11:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        223.165.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=962629F8E218EEFB8E53F743B14C006829506C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:b4:13:20:a4:23:fd:7e:df:35:ba:e8:81:
                    8c:80:2c:67:0d:78:08:0f:f9:3b:27:aa:df:e4:33:
                    d6:15:9f:53:2c:f4:5f:2c:7b:01:a7:33:a5:43:68:
                    15:09:61:18:d9:79:e8:68:79:69:da:14:4d:88:97:
                    e0:3c:41:5c:bd:95:21:25:e6:74:5e:12:2c:bb:ab:
                    ff:4b:e3:d3:8e:06:f8:80:6d:0f:de:01:b3:07:40:
                    5d:4c:ed:49:1b:ed:d7:b0:17:32:22:01:0b:b1:45:
                    33:52:d3:a0:ec:b0:ed:6a:ef:78:05:bd:ee:2b:57:
                    2c:44:bc:c0:86:34:6d:92:b6:3f:45:c0:c3:c3:1e:
                    26:64:ba:5f:0a:f1:4a:e5:4a:38:9c:56:af:71:ab:
                    2f:3d:4b:a1:2e:21:00:29:43:77:6b:08:c4:88:2e:
                    7d:ea:96:5d:b4:f1:34:2d:18:69:42:1c:3b:f3:96:
                    24:f3:22:0e:90:cf:c0:04:15:6d:80:87:c2:36:7a:
                    05:60:b0:40:a2:23:db:6c:91:46:29:30:63:c8:20:
                    b5:6b:33:e0:a9:6f:e8:4c:3d:16:cb:18:71:78:f2:
                    db:82:07:e2:8c:27:a4:0e:2b:6b:80:2f:56:5a:f3:
                    7a:dd:9c:32:99:95:f1:a6:4a:cf:b3:10:d0:cd:a1:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:26:29:F8:E2:18:EE:FB:8E:53:F7:43:B1:4C:00:68:29:50:6C:0A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/liYp-OIY7vuOU_dDsUwAaClQbAo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:37:d5:47:a9:df:1f:5a:51:73:2d:d4:51:29:dd:11:a9:c0:
         9a:5b:3c:07:1b:0f:d2:29:37:ee:c5:23:6c:8c:9e:d5:cf:69:
         45:e4:f6:ce:e4:18:c2:14:18:85:6d:fb:d6:1c:56:8a:dc:19:
         24:2b:50:27:54:4b:3c:63:da:3b:fb:3d:1d:51:5e:9b:6f:40:
         af:06:f9:f9:3a:39:20:c3:63:69:0a:61:e2:60:24:62:2b:3e:
         2f:6f:5d:15:03:a6:cb:ff:86:84:bc:e3:db:b4:cd:b5:a6:47:
         9c:a8:42:e9:e4:df:e2:81:47:33:e7:03:75:32:02:12:c5:dd:
         66:61:f0:6d:8a:3a:59:65:e5:63:df:d1:56:3e:fe:49:81:3d:
         7a:8c:d9:24:ac:a1:b5:b6:18:39:1a:a7:e4:ea:ac:eb:a4:9f:
         43:17:a4:06:72:12:db:d5:8c:c0:8d:ea:d0:74:2b:ea:b8:dd:
         d4:ff:59:f2:e6:c2:a6:fe:52:39:d8:98:32:e7:a2:be:6a:17:
         ad:df:4a:82:f4:53:c7:96:88:da:65:d3:97:3d:3a:9d:7d:fb:
         de:3b:cb:d7:cd:2d:bc:f2:61:25:1d:e3:6b:9f:e9:bc:62:ad:
         81:98:95:a7:f4:ed:1f:2d:40:84:cf:22:00:3e:0f:71:a3:bd:
         a9:93:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:47 2026 by rpki-client