Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/uUApyVf7u0V07NNSbWgNsi5AGTM.roa
File:                     uUApyVf7u0V07NNSbWgNsi5AGTM.roa (raw, json)
Hash identifier:          VMXkNCV5unweX2Daf6vMC1BC55RcRTEggZMmaKO7AyU=
Subject key identifier:   B9:40:29:C9:57:FB:BB:45:74:EC:D3:52:6D:68:0D:B2:2E:40:19:33
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0468
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/uUApyVf7u0V07NNSbWgNsi5AGTM.roa
Signing time:             Tue 31 Mar 2026 08:12:28 +0000
ROA not before:           Tue 31 Mar 2026 08:12:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        113.61.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B94029C957FBBB4574ECD3526D680DB22E401933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:df:d3:f9:7a:fc:64:e7:2d:03:42:ad:64:
                    85:44:20:d9:43:14:4b:d7:77:11:e6:7d:a0:7f:5f:
                    2c:f9:f5:f9:30:0d:81:36:e9:81:e8:56:bc:5e:69:
                    e4:27:0a:f4:f5:50:ba:6f:99:3e:99:e3:d4:90:a2:
                    c9:2d:e9:54:2b:3b:8c:18:66:0d:da:7c:a7:c8:cd:
                    ab:a9:29:71:48:66:f8:d1:6c:c1:02:ff:0d:3b:f3:
                    7f:3c:b7:55:d0:ee:65:dc:7d:b9:ab:55:3b:d1:62:
                    dd:f9:27:4b:a6:e4:52:b4:14:72:56:5e:42:59:92:
                    ad:ca:cb:af:ad:b8:db:a3:1d:d5:13:8f:69:50:3b:
                    ec:7f:bb:07:71:79:6a:5f:3a:ae:31:61:7f:ca:7b:
                    d0:66:c8:9e:53:51:45:05:f0:28:5b:38:a9:0d:e0:
                    81:33:b8:0a:0a:58:63:ea:59:3a:f3:e9:61:0c:99:
                    d1:8e:5e:77:cc:a2:be:72:41:01:13:85:77:ed:65:
                    7b:e2:5c:fa:a2:d3:1e:15:15:99:44:42:62:97:a9:
                    ab:89:56:8e:cd:04:e5:a6:29:52:e1:6e:66:0a:b0:
                    6f:bd:15:32:a8:94:f1:11:fc:d9:d7:12:68:58:86:
                    47:b2:eb:90:ec:24:a7:a0:bb:25:16:c7:09:b2:d7:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:40:29:C9:57:FB:BB:45:74:EC:D3:52:6D:68:0D:B2:2E:40:19:33
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/uUApyVf7u0V07NNSbWgNsi5AGTM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:5e:8d:4a:be:8e:bb:46:ae:79:dd:a1:b9:5c:7d:56:c6:
         99:28:7f:5a:a1:c2:08:75:ee:b6:95:64:9a:65:8c:bb:70:1a:
         0f:7d:fb:f3:d9:1d:73:b8:03:84:da:20:ca:6f:e8:ca:e5:02:
         2f:bf:60:0f:73:c3:0b:54:e2:59:54:83:4f:49:46:ce:1d:cb:
         7a:73:c2:b5:88:dd:66:58:f4:07:0c:b1:c2:73:99:3d:5f:b4:
         0b:57:2f:e0:da:3e:f0:eb:82:c1:6d:e3:91:f1:dd:8d:ba:47:
         9f:dd:40:32:08:5e:7e:27:f4:48:4f:cf:cd:7e:14:c6:5b:44:
         0c:ca:69:07:02:f6:79:57:af:e6:a0:3f:02:72:59:0e:7e:37:
         44:1c:80:02:08:bd:87:97:7a:55:40:ee:21:28:5b:aa:76:b4:
         38:f4:fb:d9:5f:94:cf:e2:6f:bd:c8:33:32:af:3d:be:37:a5:
         82:5c:16:41:01:fc:a6:5a:66:ad:eb:0d:41:49:bc:02:0c:3a:
         cc:25:36:23:42:e5:3f:be:c5:fe:0d:98:30:13:d7:ac:ff:05:
         d1:c0:16:ee:64:a9:6d:65:9a:e8:b6:98:1c:f2:35:22:84:69:
         f8:20:94:4d:59:d1:7a:d0:84:c3:c3:a2:da:d6:42:ea:27:60:
         ab:70:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:18 2026 by rpki-client