Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/uo7dYuEmwOaAkIhazTe7OKcRC7E.roa
File:                     uo7dYuEmwOaAkIhazTe7OKcRC7E.roa (raw, json)
Hash identifier:          PvAQ9JTNLKyilvAJhgYLJ91yccOGbb/FpJQdiKTZBO8=
Subject key identifier:   BA:8E:DD:62:E1:26:C0:E6:80:90:88:5A:CD:37:BB:38:A7:11:0B:B1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0437
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/uo7dYuEmwOaAkIhazTe7OKcRC7E.roa
Signing time:             Tue 31 Mar 2026 08:12:02 +0000
ROA not before:           Tue 31 Mar 2026 08:12:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18136
IP address blocks:        27.126.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BA8EDD62E126C0E68090885ACD37BB38A7110BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:6e:e1:08:f6:8a:71:51:bf:51:bf:bd:75:
                    58:6c:ec:2d:f8:35:e7:e7:74:ce:be:d7:67:90:85:
                    26:22:f1:5c:3b:7c:ed:69:1b:2f:2b:bc:a7:d4:f0:
                    dd:c9:b4:e1:27:dd:33:07:db:c0:a6:99:b7:a7:97:
                    63:c7:77:e4:09:b2:53:df:cd:3d:73:e4:a1:42:5b:
                    8f:45:94:2a:f2:01:c2:75:1e:66:28:b7:9d:1f:d1:
                    70:3b:b0:7b:2e:39:43:5a:d5:8a:15:e4:52:7f:99:
                    a7:aa:75:5d:08:7a:cf:a2:36:39:9e:29:18:47:e7:
                    90:4f:5a:31:6d:6e:85:2d:6a:53:ca:da:5a:11:6b:
                    8e:77:3f:17:eb:4d:46:b1:02:d3:9f:9a:b3:56:b6:
                    1b:cf:98:c1:35:de:0a:08:d6:fe:e1:a9:7d:32:4f:
                    f8:f9:7e:d5:d3:9b:3f:81:fb:26:1f:84:0d:06:6e:
                    48:fa:5e:5c:6e:1b:73:69:3b:87:03:b0:df:c1:63:
                    c9:50:b1:10:e7:ea:5d:f4:20:2f:80:fc:31:63:3a:
                    1f:4b:6f:33:8a:f4:bd:26:db:1d:64:b8:00:fb:71:
                    a3:f7:7a:c3:53:f3:0c:0b:68:81:9f:cc:f4:c6:b2:
                    8f:05:fe:25:46:73:87:c1:2a:e6:81:1f:28:1e:b1:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:DD:62:E1:26:C0:E6:80:90:88:5A:CD:37:BB:38:A7:11:0B:B1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/uo7dYuEmwOaAkIhazTe7OKcRC7E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:53:81:83:97:1d:69:bd:5d:30:25:05:47:8a:a8:8a:fc:63:
         51:8c:6e:71:24:0b:f7:52:79:36:49:3d:a4:b0:5e:7a:f6:43:
         e9:2f:8f:2a:54:6d:9a:a7:8d:d0:36:1f:b7:78:96:0b:48:e9:
         51:f2:ec:97:89:24:24:4e:a8:be:e1:d7:98:ce:8d:c3:4d:4a:
         98:99:f6:41:f8:3e:c3:f7:c4:26:5a:d4:43:5f:58:46:9f:86:
         2d:31:6d:9f:f1:ba:ab:95:8d:25:1c:18:e8:93:66:9b:90:5f:
         3a:c9:06:a6:03:59:21:07:17:5b:00:d5:93:b0:08:f9:45:f3:
         56:f6:2f:a9:8d:a2:ab:0f:7b:3b:c9:f9:88:bf:6a:6e:17:98:
         23:24:9f:6b:52:72:17:09:7f:e1:50:88:7f:3e:25:99:45:4b:
         f1:47:b7:e8:57:84:17:44:6c:7e:13:10:e6:03:cf:b1:76:08:
         ab:b9:12:84:3a:6e:d8:c6:76:1f:00:e8:53:b9:63:bd:26:35:
         62:09:36:27:5b:51:6a:de:c9:c9:ff:02:3c:2a:1b:c4:4b:84:
         20:db:d0:b7:46:0e:59:a5:cd:79:79:2c:80:0a:ae:d9:df:a8:
         bb:c5:12:58:fc:a0:af:24:c0:6e:a0:0f:25:47:e0:e1:e4:eb:
         a5:1a:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:08 2026 by rpki-client