Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa
File:                     tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa (raw, json)
Hash identifier:          b1MGzupZaV29wvdPFLieXc8XFQc9C00jjF2f9nXc2l0=
Subject key identifier:   B5:88:F5:FE:DE:AD:9B:DC:EA:9B:C7:96:C6:82:AF:66:9D:DB:C3:0A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       042C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa
Signing time:             Tue 31 Mar 2026 08:11:56 +0000
ROA not before:           Tue 31 Mar 2026 08:11:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9378
IP address blocks:        219.124.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B588F5FEDEAD9BDCEA9BC796C682AF669DDBC30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:b0:05:a6:2f:be:79:0c:1c:70:0c:d3:2d:
                    c9:02:03:28:d7:54:ff:c8:39:97:23:26:a5:8a:24:
                    a3:7f:2c:64:70:f4:9c:cf:54:16:a9:4b:b4:64:7d:
                    1f:c4:f8:b6:af:99:5a:75:20:2d:53:93:f9:ae:e2:
                    35:a1:f4:03:df:f3:41:4f:70:65:f4:bf:cf:cc:e7:
                    24:65:73:b1:9a:74:d1:2f:7d:d8:a9:78:86:14:d6:
                    cd:be:b9:bb:4c:1f:e6:26:b2:42:b2:46:c2:0e:7b:
                    bb:95:64:6c:b5:f5:e2:ee:d9:6d:37:76:6d:53:f7:
                    2a:08:9c:db:57:9f:b1:01:68:f0:7f:7f:22:52:06:
                    6f:fc:a1:07:71:6c:b7:67:b1:09:b5:e1:6e:fc:ce:
                    b7:26:3f:94:1b:10:df:98:a5:7b:c2:20:08:ad:20:
                    80:40:be:e3:65:c8:ea:c4:f0:3d:b5:c1:2f:eb:df:
                    99:44:12:d5:67:dd:5a:56:37:bb:b4:c4:50:74:c5:
                    86:27:89:cb:b4:a5:93:ae:35:01:d1:87:64:0d:58:
                    97:f0:c4:71:30:12:8c:dc:f4:ff:55:cc:61:21:3b:
                    3c:2e:9a:97:a2:51:14:6f:8e:75:d1:35:4a:04:8b:
                    00:14:4d:23:85:5d:28:4b:bc:40:0e:a0:73:29:3f:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:88:F5:FE:DE:AD:9B:DC:EA:9B:C7:96:C6:82:AF:66:9D:DB:C3:0A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:11:dd:a5:02:e7:0e:36:e0:b0:f1:3e:08:fa:e8:b2:a4:04:
         f4:57:9d:b6:5e:d3:16:3d:57:be:f7:3f:c0:7a:8d:f8:6c:5f:
         ad:b8:c7:fa:35:97:e2:dc:7e:31:f2:89:b9:28:bd:52:f1:be:
         70:6f:98:d1:5a:33:f1:8d:a7:f2:82:6c:94:c7:8f:27:bf:12:
         ff:87:33:cd:16:a4:ae:52:23:91:99:c6:dd:01:63:0a:a0:72:
         86:50:ce:51:ae:8b:65:ec:9c:d0:95:d1:ce:48:8d:b5:8a:38:
         75:1f:3b:bc:51:d0:f3:fe:fe:9d:11:53:51:24:97:25:5a:f6:
         b5:36:9f:25:a8:43:98:02:87:21:80:0b:1a:9c:af:e4:ea:12:
         36:9a:bb:bc:0d:77:a6:e4:02:8f:1e:e2:5a:57:73:14:8b:cd:
         71:7a:7f:2d:d0:0f:c5:8d:c6:8a:56:d6:02:b7:3f:26:ba:8d:
         3d:e0:b9:d4:44:b2:d0:28:99:f6:9a:c0:be:f7:3a:00:53:38:
         c2:fd:d7:d2:75:53:b5:fd:ff:1c:a6:71:dd:25:7e:34:a3:0c:
         5c:69:8b:13:00:60:8b:d2:e0:21:47:97:fa:54:e3:87:a8:d9:
         6d:4d:c6:2a:f5:d8:9b:00:45:82:d5:96:cb:3c:f4:71:c7:03:
         68:60:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:44:17 2026 by rpki-client