Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wqpGwEWa-0Oqutr21x2XCIPHD6c.roa
File:                     wqpGwEWa-0Oqutr21x2XCIPHD6c.roa (raw, json)
Hash identifier:          cMQR3tOjV0dULaWMrGHCUUhF7UMaOYRrbYnVSPAW5Z0=
Subject key identifier:   C2:AA:46:C0:45:9A:FB:43:AA:BA:DA:F6:D7:1D:97:08:83:C7:0F:A7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04BE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wqpGwEWa-0Oqutr21x2XCIPHD6c.roa
Signing time:             Tue 31 Mar 2026 08:13:09 +0000
ROA not before:           Tue 31 Mar 2026 08:13:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        218.220.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C2AA46C0459AFB43AABADAF6D71D970883C70FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fd:28:a8:f5:a8:ff:61:d6:e5:b2:e7:cb:a1:
                    45:bd:cf:42:00:3b:ef:b1:e8:b3:50:df:9f:7d:a4:
                    b7:01:f0:5f:26:6f:e6:92:1e:17:eb:f5:3c:32:a8:
                    fe:a6:21:d4:27:75:c1:b7:a7:7c:65:e5:61:36:5d:
                    3f:2f:2d:1d:8e:61:01:f9:0d:02:91:70:1b:f2:34:
                    b8:c2:94:67:e6:30:f7:b3:68:a3:de:3d:2e:4d:1a:
                    0f:c1:ad:b1:54:f3:ba:60:87:c9:f7:5c:26:ba:3b:
                    ae:e2:bf:31:c9:01:f6:03:b0:68:99:ed:9e:0f:8b:
                    29:c8:78:14:ca:a9:f2:fb:1a:a7:03:e2:7f:0e:a0:
                    8d:40:2d:f1:d2:e0:84:95:d1:be:ec:ca:5e:a0:1f:
                    fe:7d:d6:ff:82:0f:70:79:9b:c5:e6:6f:0a:ec:e6:
                    21:27:99:c7:e1:f8:d8:f8:74:c4:83:fe:b3:cb:ae:
                    e4:b1:b3:a5:a3:50:87:87:1b:6b:99:52:16:88:1d:
                    65:f3:c1:be:d5:d8:8d:8d:b1:e7:5b:ea:4a:1d:40:
                    13:ea:28:2d:7e:ad:14:6f:7f:ee:80:a8:67:80:21:
                    23:ae:9e:50:9e:82:12:5d:24:e9:97:c0:f5:c0:50:
                    ff:ac:a1:dc:46:0e:3d:79:a5:e7:18:11:76:3b:1a:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AA:46:C0:45:9A:FB:43:AA:BA:DA:F6:D7:1D:97:08:83:C7:0F:A7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wqpGwEWa-0Oqutr21x2XCIPHD6c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.220.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:c3:f0:32:e4:bc:a5:c6:11:5d:8d:d5:46:87:65:cf:fb:
         38:f5:a2:06:a6:7e:85:ab:67:d7:2c:b7:f5:3e:70:02:7d:23:
         66:cf:de:1f:d7:8a:67:01:a3:d9:39:19:64:d9:68:54:7c:c4:
         59:6b:ee:22:14:af:62:40:ca:47:42:bd:ba:b0:82:5f:67:a9:
         10:fc:2a:36:1a:c8:80:14:c4:47:3c:00:ca:00:da:30:99:d5:
         8a:65:c9:a9:d9:1a:5e:81:3b:e4:50:e1:f4:88:5b:ae:ea:24:
         bb:90:1a:2c:36:98:54:8c:31:4a:28:3e:de:04:ae:37:4e:1e:
         89:23:a2:10:cf:f3:c3:1b:3a:c5:e5:17:68:0c:f8:2a:b3:9d:
         94:a2:cf:dd:57:cb:f8:e3:57:db:90:fa:14:1d:3c:29:05:4d:
         99:50:f2:7c:b4:ad:cb:48:e5:7c:2a:2f:27:ee:03:c3:32:b1:
         15:de:e9:17:8b:7d:f5:01:1f:07:84:44:4c:c2:b2:06:76:8c:
         f2:33:ba:fa:7f:e6:38:bb:7e:56:5a:83:b7:cb:ab:9e:af:88:
         74:7c:33:ec:3e:46:17:9f:27:65:17:c6:52:49:26:36:d5:01:
         0f:b8:80:3d:74:5e:af:ff:5f:79:ee:73:56:c9:7d:8e:36:fa:
         de:6e:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:43:54 2026 by rpki-client