Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/swwAhVpk3BRaekFASnDRa_S4-Cg.roa
File:                     swwAhVpk3BRaekFASnDRa_S4-Cg.roa (raw, json)
Hash identifier:          Y28qLfuLVpVMiS22EQmuvNejr04SgRxkElPeNPo/Nz0=
Subject key identifier:   B3:0C:00:85:5A:64:DC:14:5A:7A:41:40:4A:70:D1:6B:F4:B8:F8:28
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03FF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/swwAhVpk3BRaekFASnDRa_S4-Cg.roa
Signing time:             Tue 31 Mar 2026 08:11:35 +0000
ROA not before:           Tue 31 Mar 2026 08:11:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        203.114.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B30C00855A64DC145A7A41404A70D16BF4B8F828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d2:8c:f2:b0:2a:f2:08:1c:87:27:02:ab:6c:
                    7a:3e:28:9d:98:80:14:77:12:5f:a0:94:1f:15:50:
                    b5:4e:58:98:9c:c8:4e:b1:2f:bb:63:52:ba:c5:75:
                    74:bb:69:b2:03:76:89:bc:fc:6f:f3:55:f8:b3:a8:
                    c8:7f:9a:13:d1:35:62:cd:37:2f:e6:9a:88:a1:a6:
                    56:66:6e:b3:a3:4d:30:19:fc:9c:08:f3:34:f4:e6:
                    a7:59:ee:16:6e:8d:fe:af:93:00:5b:6f:86:6f:24:
                    83:78:23:15:6b:7b:06:63:d9:44:98:48:f9:a8:c0:
                    40:40:76:e0:e0:38:5f:e4:9e:11:1f:f9:4f:d7:88:
                    75:09:ba:3e:d8:bd:c9:a3:14:61:67:4e:a2:de:f2:
                    e6:6e:3f:b1:b9:17:63:f1:19:1d:ea:e4:50:a5:97:
                    ff:b8:11:19:52:89:41:7e:cb:32:e6:82:b5:be:69:
                    ba:d0:93:9e:12:94:46:ba:00:38:59:b5:9d:e7:ea:
                    5c:e9:88:d6:cf:05:29:d8:9d:e1:05:75:5f:02:5d:
                    fe:16:22:70:b2:9e:43:65:49:54:74:6f:fa:88:26:
                    d4:6d:cd:47:9d:75:57:d7:3f:2a:47:ab:73:a9:d0:
                    c7:92:77:a7:1e:2d:47:eb:08:a7:eb:fb:aa:b2:6a:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0C:00:85:5A:64:DC:14:5A:7A:41:40:4A:70:D1:6B:F4:B8:F8:28
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/swwAhVpk3BRaekFASnDRa_S4-Cg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:fc:aa:14:c4:7e:62:e7:a5:66:fc:ab:9a:1d:d9:2a:56:1c:
         41:98:a8:0a:2d:85:b0:21:93:7e:79:27:00:e6:b6:fc:0d:02:
         33:c3:95:ae:e4:58:75:7f:17:5a:07:98:55:40:08:e0:ae:49:
         94:4d:c0:10:6f:48:a9:4d:ac:ca:4c:b4:69:e4:d4:90:4d:fb:
         0c:da:2d:52:48:36:f2:9e:f5:0c:5e:b8:42:78:4c:8d:26:7a:
         da:c0:dc:11:10:98:69:2d:c3:32:d1:1a:ae:53:a6:f7:98:cc:
         ed:6f:bf:a8:f0:08:ba:b8:3c:11:b3:51:0f:80:f2:7a:30:2a:
         ee:f8:53:01:91:82:6d:91:85:74:c5:1e:50:e3:29:34:db:5e:
         6d:88:49:8e:ab:55:47:2f:37:c6:64:fd:e3:e6:7d:d4:1b:5d:
         b2:8d:7d:ca:cf:2b:66:d4:fb:ea:63:e2:22:53:97:4d:c0:68:
         2e:29:e7:27:47:62:0f:2f:6b:a2:9b:b9:2e:3b:0c:bb:6d:90:
         de:f3:f5:7d:ba:2a:34:8f:42:3b:e9:c4:9a:05:a0:f5:68:8c:
         35:6c:45:23:ac:83:17:f8:2c:eb:d5:0e:95:c5:08:de:75:9e:
         29:a9:8d:7d:ec:54:2b:5e:20:78:84:dd:75:17:8b:42:73:d2:
         b6:ad:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:08 2026 by rpki-client