Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/p6Tvrfx1dqvOC0C-hWD6p0JiqTY.roa
File:                     p6Tvrfx1dqvOC0C-hWD6p0JiqTY.roa (raw, json)
Hash identifier:          KSoUV1CzYHIBCc/4TeJMGFQE671VLPxW6vydE29/9Xw=
Subject key identifier:   A7:A4:EF:AD:FC:75:76:AB:CE:0B:40:BE:85:60:FA:A7:42:62:A9:36
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0469
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/p6Tvrfx1dqvOC0C-hWD6p0JiqTY.roa
Signing time:             Tue 31 Mar 2026 08:12:29 +0000
ROA not before:           Tue 31 Mar 2026 08:12:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        113.61.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A7A4EFADFC7576ABCE0B40BE8560FAA74262A936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:ac:c7:0f:94:83:47:a4:70:68:d5:c8:f6:
                    f4:5e:7d:79:fe:c0:44:6f:44:d2:7e:99:7a:d6:a5:
                    29:3a:17:7e:c8:8a:93:fb:fe:36:b3:17:16:f9:4e:
                    18:3f:4b:f4:79:1d:16:d0:11:40:af:4e:f3:92:d8:
                    33:78:9c:3b:b1:98:30:5b:25:aa:0b:8c:50:06:29:
                    fd:62:df:03:d1:6b:d6:5b:1e:1d:c2:9a:b7:07:35:
                    62:fb:5a:50:03:01:67:ed:19:5e:b5:2d:0c:07:ca:
                    af:98:66:4d:8e:ab:a0:6c:57:16:b4:b0:31:fc:b0:
                    2b:45:47:cf:8c:a9:3b:4e:ee:d2:d0:a5:5a:34:45:
                    cc:58:3b:82:e5:38:6b:2a:30:31:07:3c:6c:a5:71:
                    74:d1:4c:68:48:5f:ec:0d:4a:e4:5d:72:7b:61:46:
                    e2:40:ef:e5:ae:fa:f0:69:15:c4:3f:ac:b2:94:91:
                    bd:94:f5:2c:22:d2:e2:ac:b8:9b:2e:e9:33:6b:0d:
                    f2:4f:9b:40:62:9d:10:4d:3d:9d:8c:a4:2b:13:20:
                    3d:4b:73:f8:d8:35:9f:88:0b:a9:4f:59:5d:8b:68:
                    a7:af:fe:8d:c4:7c:3b:e5:08:c5:92:3d:4d:a1:ea:
                    49:7f:b3:77:b0:01:34:26:6c:f2:99:5c:f6:6e:ab:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:EF:AD:FC:75:76:AB:CE:0B:40:BE:85:60:FA:A7:42:62:A9:36
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/p6Tvrfx1dqvOC0C-hWD6p0JiqTY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:1f:ea:e7:b1:fd:43:6a:4b:a7:08:d2:ec:24:d2:3e:04:20:
         ef:4b:6a:a4:8f:db:2b:b6:ca:dd:26:af:0b:dc:5f:3f:df:59:
         7e:0a:cf:88:e2:5b:14:97:31:5e:8b:58:c0:c5:a4:27:47:f0:
         40:8d:19:81:3d:c7:7c:34:04:1a:df:40:22:27:0a:2b:b4:d4:
         3d:86:2d:19:17:41:6b:d8:71:7d:50:77:d9:75:fb:1f:6b:53:
         ae:d7:88:f1:62:98:02:33:e3:65:24:2a:b7:9b:1e:83:3d:dd:
         72:51:43:93:4e:e1:c9:eb:77:28:34:20:96:f5:3c:1a:10:93:
         cc:f2:be:93:a8:4e:1a:76:0a:b2:78:c2:f8:03:b1:4e:d4:66:
         7e:16:eb:b7:fe:85:7a:03:65:9a:5a:c9:72:8e:bf:2e:94:de:
         92:6a:4e:f8:fc:a0:cf:c9:a9:97:20:8b:5e:6b:65:80:61:0c:
         78:d0:d8:90:d5:b8:82:80:51:fb:3a:e6:c7:cf:c7:e5:9c:e1:
         83:a2:7d:46:aa:0a:0a:6a:43:41:21:e4:20:bf:60:49:95:f5:
         2c:d5:0e:ca:82:dc:df:26:52:7e:bb:91:82:a3:aa:fd:5b:81:
         8e:94:b3:b0:02:32:97:85:c9:05:73:22:68:de:dd:75:dd:a4:
         2c:29:8c:c7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyMjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE3QTRFRkFERkM3NTc2
QUJDRTBCNDBCRTg1NjBGQUE3NDI2MkE5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBHqzHD5SDR6RwaNXI9vRefXn+wERvRNJ+mXrWpSk6F37IipP7
/jazFxb5Thg/S/R5HRbQEUCvTvOS2DN4nDuxmDBbJaoLjFAGKf1i3wPRa9ZbHh3C
mrcHNWL7WlADAWftGV61LQwHyq+YZk2Oq6BsVxa0sDH8sCtFR8+MqTtO7tLQpVo0
RcxYO4LlOGsqMDEHPGylcXTRTGhIX+wNSuRdcnthRuJA7+Wu+vBpFcQ/rLKUkb2U
9Swi0uKsuJsu6TNrDfJPm0BinRBNPZ2MpCsTID1Lc/jYNZ+IC6lPWV2LaKev/o3E
fDvlCMWSPU2h6kl/s3ewATQmbPKZXPZuq4/HAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUp6Tvrfx1dqvOC0C+hWD6p0JiqTYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL3A2VHZyZngxZHF2T0MwQy1oV0Q2cDBKaXFUWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARxPXAwDQYJKoZIhvcNAQELBQADggEB
AMQf6uex/UNqS6cI0uwk0j4EIO9LaqSP2yu2yt0mrwvcXz/fWX4Kz4jiWxSXMV6L
WMDFpCdH8ECNGYE9x3w0BBrfQCInCiu01D2GLRkXQWvYcX1Qd9l1+x9rU67XiPFi
mAIz42UkKrebHoM93XJRQ5NO4cnrdyg0IJb1PBoQk8zyvpOoThp2CrJ4wvgDsU7U
Zn4W67f+hXoDZZpayXKOvy6U3pJqTvj8oM/JqZcgi15rZYBhDHjQ2JDVuIKAUfs6
5sfPx+Wc4YOifUaqCgpqQ0Eh5CC/YEmV9SzVDsqC3N8mUn67kYKjqv1bgY6Us7AC
MpeFyQVzImje3XXdpCwpjMc=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:39 2026 by rpki-client