Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ndya8z69TM7lMBWbd7wjXDta4b0.roa
File:                     ndya8z69TM7lMBWbd7wjXDta4b0.roa (raw, json)
Hash identifier:          N+1TEKtXLRe8uZT5wZCky5z+7NVSBwgxfBNk4WOKbjM=
Subject key identifier:   9D:DC:9A:F3:3E:BD:4C:CE:E5:30:15:9B:77:BC:23:5C:3B:5A:E1:BD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       044A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ndya8z69TM7lMBWbd7wjXDta4b0.roa
Signing time:             Tue 31 Mar 2026 08:12:14 +0000
ROA not before:           Tue 31 Mar 2026 08:12:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23788
IP address blocks:        202.162.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098 (0x44a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9DDC9AF33EBD4CCEE530159B77BC235C3B5AE1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:4c:d7:ba:82:3b:cc:e9:7d:32:af:35:5f:
                    4b:ee:24:87:93:78:21:8f:b6:e7:be:0f:79:57:18:
                    e4:7d:21:9c:e4:d8:81:20:75:b6:89:5c:e9:8c:4a:
                    92:7f:22:0f:66:82:98:02:3a:5b:ce:42:e8:03:9c:
                    7a:67:60:64:7c:96:11:82:48:74:0f:99:ab:74:91:
                    6b:94:47:7d:90:5a:c8:83:4c:55:88:7c:c0:4b:fc:
                    96:01:85:f7:c7:de:c1:ce:4c:cf:52:3b:62:23:d9:
                    15:0f:7d:63:88:fb:61:4e:88:79:9a:3e:85:e6:0c:
                    4e:01:c9:ed:a2:1a:6d:b2:45:4a:ed:b8:fc:ea:d8:
                    64:34:87:a2:a4:a8:be:49:4f:e0:59:05:da:79:1f:
                    cb:b2:f1:af:16:d5:c8:3c:94:a2:84:a6:ce:ad:c1:
                    55:34:61:a9:f1:3a:af:c3:9c:fb:33:c6:69:56:80:
                    2c:13:c8:2f:5e:6c:5c:1d:58:99:56:9b:ca:df:ab:
                    89:9d:67:0b:dc:26:27:6d:1f:d8:32:63:9a:27:35:
                    03:f9:a5:52:ed:be:d6:68:23:26:b4:35:19:4d:37:
                    c9:0d:65:0c:52:90:eb:5f:40:03:86:4a:ae:ed:67:
                    9d:4a:6f:5e:7c:12:fb:43:5d:7c:17:fd:e9:cc:9b:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DC:9A:F3:3E:BD:4C:CE:E5:30:15:9B:77:BC:23:5C:3B:5A:E1:BD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ndya8z69TM7lMBWbd7wjXDta4b0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:1e:b5:e2:23:e0:3b:6a:2c:bf:97:7f:62:88:20:65:d4:e9:
         d3:b0:73:cd:da:f6:6c:6c:12:a5:00:12:bb:05:c8:d0:d0:35:
         ac:5b:23:cb:62:6c:71:bf:fb:ee:6b:af:af:5f:27:87:47:5c:
         be:b6:11:d7:09:85:7c:88:3f:d8:c7:0a:7b:c1:1d:64:5d:d8:
         f3:a7:d2:d8:14:7e:21:ed:d2:c1:8e:d9:0b:8d:64:ff:c3:a5:
         14:84:b4:56:90:49:5d:17:88:66:c2:08:90:1c:1d:54:0f:16:
         86:8c:b1:56:20:da:32:2f:41:96:5c:01:37:3b:6b:d9:eb:db:
         a5:fb:dc:9c:d0:b2:6c:59:80:74:6a:29:d9:5a:81:a6:54:c3:
         dc:39:fe:7f:e0:4e:cd:68:92:47:f0:9a:33:e4:60:33:ae:d2:
         f7:45:18:82:1a:bb:2d:4b:59:aa:cc:41:28:94:d7:e5:89:6e:
         ba:71:c3:8d:be:d1:09:c0:bd:25:de:bd:4e:6d:63:36:9b:ee:
         ab:21:ef:00:eb:c8:7e:bc:a8:d5:44:0f:c9:b3:bf:f2:58:19:
         f6:56:27:5a:87:3f:a9:22:28:fc:ec:fa:30:b8:3c:09:17:6c:
         09:72:a3:00:14:a3:ea:0d:e4:c3:3d:c6:1a:38:21:1a:1d:d1:
         c9:09:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:38 2026 by rpki-client