Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mSJ1ckQDFjmV3AjBqzGwc0Cxqsg.roa
File:                     mSJ1ckQDFjmV3AjBqzGwc0Cxqsg.roa (raw, json)
Hash identifier:          7sa+BdgNVK7hwXRIe/ZwXJWkyeUN6iu7sdyDFYlZqaA=
Subject key identifier:   99:22:75:72:44:03:16:39:95:DC:08:C1:AB:31:B0:73:40:B1:AA:C8
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04B4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mSJ1ckQDFjmV3AjBqzGwc0Cxqsg.roa
Signing time:             Tue 31 Mar 2026 08:13:03 +0000
ROA not before:           Tue 31 Mar 2026 08:13:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        122.196.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=992275724403163995DC08C1AB31B07340B1AAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:a1:c3:b0:a5:39:a7:b5:78:85:06:48:8e:
                    d6:13:b2:66:0a:ec:2f:e6:f4:8f:3f:08:e9:14:0e:
                    d6:f9:bc:e9:de:ff:cf:69:fa:a1:a5:64:45:8f:93:
                    0c:be:37:99:61:29:57:2f:4c:4a:85:70:e5:9f:01:
                    a7:b9:4f:5a:87:f6:b4:12:00:b2:e2:df:7f:62:10:
                    bc:be:59:08:c4:59:f8:63:82:9a:4f:05:f7:a6:6c:
                    62:be:b6:02:db:8c:9d:2b:a1:e6:d9:00:eb:58:d4:
                    5e:a9:29:ab:c7:2a:b4:51:60:33:45:cb:8b:11:fa:
                    0a:92:36:fe:3e:92:2f:03:99:13:05:4b:fd:50:52:
                    d0:22:08:c0:e9:d9:06:44:5b:d4:ae:4e:41:d9:a5:
                    95:5a:81:95:ae:d2:05:7c:c3:4f:44:1d:03:c8:0b:
                    44:3d:04:74:71:6e:c8:4d:2d:cb:62:8b:e5:f2:e2:
                    e3:7d:16:9e:f9:9e:cb:ac:0d:04:72:e3:3e:f5:67:
                    66:b4:84:5e:7a:44:19:e2:4e:aa:7d:84:75:19:d4:
                    86:b7:63:19:c5:d4:24:25:5a:bd:77:b4:32:cf:63:
                    1f:0b:3e:95:ed:1c:e0:75:c7:b8:7b:10:ef:12:19:
                    02:b2:04:f9:6c:81:3e:3b:ed:b8:dd:e4:a6:fb:a7:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:22:75:72:44:03:16:39:95:DC:08:C1:AB:31:B0:73:40:B1:AA:C8
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mSJ1ckQDFjmV3AjBqzGwc0Cxqsg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.196.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         aa:b6:3a:21:a5:fa:20:a5:4d:0d:bb:d0:9a:fc:d8:ed:fc:e7:
         98:3a:b3:db:95:dc:0f:9d:2a:1d:48:c0:56:a6:28:c3:77:07:
         fe:54:75:06:14:92:b8:f3:a8:40:97:31:16:57:d3:9a:af:0e:
         91:5d:39:a5:e3:c4:7b:3c:fe:6e:42:76:41:6e:b6:37:b0:6b:
         c9:e9:48:31:73:c0:3f:5c:51:8a:ef:7b:16:1d:be:5e:b2:ae:
         58:e9:2d:3b:75:cf:d0:a1:a2:d7:21:8a:b3:b9:05:86:a6:df:
         c5:4d:a2:28:4d:aa:01:c9:2a:52:bf:be:03:e9:09:e4:05:99:
         7d:ee:dd:03:13:ca:79:42:27:f1:f8:79:21:3e:e4:89:be:66:
         8f:a6:e6:66:41:d7:2d:d1:fa:40:6c:f5:a7:0b:fa:de:cb:d9:
         c3:17:78:ac:a6:97:a8:fe:66:ce:fb:52:41:c7:a3:58:66:7f:
         5a:82:3b:ee:21:28:2f:66:4e:69:10:3f:e6:ec:9a:e0:1a:03:
         86:0c:3c:a0:78:4a:60:8f:aa:c0:b2:89:6b:f2:09:4d:db:14:
         db:cc:ec:44:71:cd:4e:d8:1e:05:15:fd:3b:13:9c:cc:90:e4:
         78:b3:8c:32:44:bc:75:ac:41:d1:5c:aa:06:84:70:46:cb:83:
         49:46:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:44:13 2026 by rpki-client