Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rmUd1ZLejyPDM9jct4j9lU_y65g.roa
File:                     rmUd1ZLejyPDM9jct4j9lU_y65g.roa (raw, json)
Hash identifier:          nZROCFsEITCRyekWlUM7X7m4g/mbpAD6YFcRviQdkpY=
Subject key identifier:   AE:65:1D:D5:92:DE:8F:23:C3:33:D8:DC:B7:88:FD:95:4F:F2:EB:98
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0480
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rmUd1ZLejyPDM9jct4j9lU_y65g.roa
Signing time:             Tue 31 Mar 2026 08:12:39 +0000
ROA not before:           Tue 31 Mar 2026 08:12:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        202.43.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AE651DD592DE8F23C333D8DCB788FD954FF2EB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:86:b5:35:74:a3:4e:f7:97:9f:ff:94:65:
                    c2:42:be:be:d5:91:20:8f:48:f3:d8:10:4b:3d:31:
                    bf:5c:20:5d:81:20:2d:32:35:36:cd:33:2d:7e:4b:
                    ef:9f:d9:a4:5f:67:3f:b0:f6:0a:62:67:ae:f9:da:
                    01:26:97:da:3d:79:ee:b4:04:5f:04:58:03:45:c6:
                    b2:cd:67:45:08:55:fc:83:3f:44:31:6b:f0:1f:9e:
                    83:11:1b:14:61:d4:61:76:06:da:40:25:d4:be:dc:
                    7d:d2:cd:4a:aa:36:d3:20:51:59:1d:85:95:d9:77:
                    df:a8:91:12:e3:52:07:09:c9:0d:d5:9c:81:c5:7d:
                    5f:5f:5e:e5:0e:00:93:ef:28:fb:04:f8:06:3f:a2:
                    a6:ce:ef:da:9c:6b:12:52:ff:4f:74:95:be:4c:f2:
                    56:06:34:c9:e4:e5:01:23:95:63:2b:69:f1:a7:7f:
                    f5:fc:f1:18:49:0f:c5:fc:05:ea:cf:4e:ff:da:c9:
                    96:af:aa:2f:60:d1:26:ae:38:68:e2:06:72:c7:6e:
                    17:5b:15:1b:da:0e:57:27:50:99:26:a8:ab:eb:89:
                    e6:03:aa:9d:39:93:e9:cf:3e:e9:56:46:c6:b9:7f:
                    3d:03:7c:be:fb:6d:eb:46:70:95:2d:82:4a:44:58:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:65:1D:D5:92:DE:8F:23:C3:33:D8:DC:B7:88:FD:95:4F:F2:EB:98
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rmUd1ZLejyPDM9jct4j9lU_y65g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:57:c3:94:99:ed:95:9f:63:85:d4:cd:4f:d2:fd:04:38:
         a6:73:19:0d:80:fd:90:60:1a:89:e8:ab:99:80:1f:91:60:81:
         a8:f2:e0:39:20:33:2d:49:e2:8e:dd:fe:7e:4e:1c:da:7b:08:
         01:81:32:ec:48:79:cb:c6:20:c7:b9:5a:a7:83:fe:53:1f:e5:
         99:62:d0:84:03:76:93:c7:db:dc:1b:c0:9a:f0:f8:8c:7f:d5:
         0a:19:06:33:ab:7c:c5:a9:42:ac:4b:b4:10:93:91:02:65:7d:
         51:82:c0:fb:ae:49:07:24:79:88:f9:73:8a:bd:2d:0d:81:4e:
         a0:de:dc:57:5e:85:1e:7a:cd:d4:3a:41:d1:83:6f:39:a6:f0:
         7a:d7:d2:15:f5:c9:fa:70:e8:bc:d5:2f:90:3b:d8:ca:82:e0:
         d1:c2:de:87:50:7f:2f:79:28:e9:87:26:4d:c7:35:a1:07:c2:
         1f:e1:b5:99:8b:c0:78:ec:cb:78:22:de:6f:d9:53:54:78:02:
         7c:1c:10:c2:c6:15:c0:2c:0a:46:57:a5:bc:bd:12:c8:b1:92:
         5a:af:0b:26:02:28:a7:c2:1b:88:e6:f2:e4:3c:bb:a1:b9:5a:
         e6:43:f2:93:75:7a:0b:61:ba:aa:e0:6d:c6:97:6d:06:24:a9:
         58:e6:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:30 2026 by rpki-client