Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vYShfhgxma5ARYn6cUOKIjwOitY.roa
File:                     vYShfhgxma5ARYn6cUOKIjwOitY.roa (raw, json)
Hash identifier:          xQqAzoRmJNYmXTi2U8Z4MrE5W8q+EbxFd3x+5FQf4vk=
Subject key identifier:   BD:84:A1:7E:18:31:99:AE:40:45:89:FA:71:43:8A:22:3C:0E:8A:D6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0474
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vYShfhgxma5ARYn6cUOKIjwOitY.roa
Signing time:             Tue 31 Mar 2026 08:12:34 +0000
ROA not before:           Tue 31 Mar 2026 08:12:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        123.98.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BD84A17E183199AE404589FA71438A223C0E8AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:76:c9:2a:00:3a:ec:44:c9:c7:23:07:30:
                    7f:74:24:0f:ac:5e:82:13:c7:10:82:3d:bc:9f:f8:
                    eb:26:94:f8:61:7b:6c:1a:87:40:bd:3b:a0:0f:15:
                    9a:90:e1:55:73:97:0b:20:b2:b5:f9:96:2c:81:86:
                    b3:bb:90:be:42:a0:f3:ec:54:01:96:92:2f:9a:25:
                    8d:a4:8d:e7:37:2e:b0:89:86:5a:94:8c:08:78:3e:
                    98:91:1a:3c:86:24:af:12:18:58:4d:b3:75:6b:8b:
                    3f:e5:27:88:94:9a:ec:8d:d7:4b:83:a8:f3:24:53:
                    33:12:3c:87:f7:34:7f:3d:14:37:dc:56:46:87:a0:
                    dc:f7:f9:ad:25:40:b1:8b:26:33:a3:7f:01:5d:a7:
                    80:dd:aa:17:97:a1:6c:f7:9c:df:70:d5:78:86:cb:
                    39:22:e7:7c:b9:04:22:93:41:6b:33:55:dc:45:d6:
                    3e:a0:c3:2a:af:3f:28:12:21:d4:9a:b7:4d:36:bf:
                    28:09:8a:dc:70:7d:ca:34:f3:01:4f:0a:21:cc:46:
                    b2:33:57:59:d2:6c:6f:23:4c:71:83:7b:1c:97:ec:
                    09:02:46:e0:3c:a2:af:08:a4:66:22:4a:6f:2d:5f:
                    70:2d:7f:b8:ea:3b:de:49:1a:89:5f:df:69:c7:a4:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:A1:7E:18:31:99:AE:40:45:89:FA:71:43:8A:22:3C:0E:8A:D6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vYShfhgxma5ARYn6cUOKIjwOitY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:3c:50:d8:d5:ee:b7:02:76:f1:c1:72:26:a9:20:ab:e7:e4:
         cf:2e:67:62:a0:1a:a0:ba:80:8a:a1:45:64:dc:74:69:58:82:
         88:5c:d6:d5:1b:69:07:1a:96:03:13:9b:20:22:0b:3e:b3:dd:
         03:87:df:90:78:3a:19:d4:07:26:7b:2d:bd:5d:41:59:5a:48:
         e9:e8:27:37:8a:0f:71:92:e7:1e:21:23:af:83:c5:45:7c:2e:
         c9:05:e8:a2:19:b6:cd:3c:c9:d6:71:40:1e:02:0e:ff:cb:71:
         96:94:f2:75:e5:cc:4a:c3:75:65:61:b7:40:67:11:c2:c1:8f:
         e6:7d:a1:ca:e6:57:34:d7:c5:d1:ea:7a:90:b2:51:70:ed:e3:
         87:51:5f:7c:ff:15:f0:ea:ac:00:30:20:dc:46:1e:8b:d8:93:
         c8:b8:28:66:9f:80:25:fe:00:f2:f6:fc:db:7b:73:2f:f0:12:
         4f:fb:93:9e:23:13:fa:0e:cf:e7:c1:4a:c7:01:f9:3d:fc:4f:
         a5:14:3a:8f:91:af:07:c2:c3:99:7c:08:ad:cd:8b:d1:85:d7:
         7f:d6:71:ab:1b:9a:5d:3c:05:e0:78:e4:58:46:06:00:fa:b4:
         13:f5:f1:dd:d1:6d:15:c0:60:b3:d4:8a:f4:9e:89:16:a8:96:
         0d:26:8d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:48 2026 by rpki-client