Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/xCh1fPDmwEYDwVbXpAC2I5o0NTA.roa
File:                     xCh1fPDmwEYDwVbXpAC2I5o0NTA.roa (raw, json)
Hash identifier:          hjyqv2L0B3TJcza4WhyuqM+bPTgutYlZ0sakedjvHiw=
Subject key identifier:   C4:28:75:7C:F0:E6:C0:46:03:C1:56:D7:A4:00:B6:23:9A:34:35:30
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0406
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xCh1fPDmwEYDwVbXpAC2I5o0NTA.roa
Signing time:             Tue 31 Mar 2026 08:11:38 +0000
ROA not before:           Tue 31 Mar 2026 08:11:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18134
IP address blocks:        103.55.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C428757CF0E6C04603C156D7A400B6239A343530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:ba:ff:5e:77:10:07:2e:a8:cb:e2:f2:48:
                    e0:67:92:8f:df:8e:f7:9d:55:e2:35:37:af:0d:0c:
                    32:ba:92:5b:a7:83:8a:3a:74:06:fd:50:de:ed:bb:
                    7a:6f:d7:db:38:71:0c:2a:50:9d:d2:ae:0e:87:0e:
                    80:88:a1:62:da:b0:34:eb:6d:1f:1e:5b:d0:24:cd:
                    ff:89:68:d9:ab:4d:75:13:94:80:f3:b0:ea:9c:a0:
                    19:19:98:67:bb:e2:34:29:ff:86:be:65:91:70:d4:
                    d9:f5:79:ad:63:00:b0:51:5e:11:88:8b:e1:48:1f:
                    23:1e:2b:2b:1d:66:d3:da:1c:83:6c:9d:44:d9:d9:
                    af:9e:a9:0a:51:b6:de:79:b8:26:3d:c3:07:47:66:
                    ce:ba:36:37:0e:32:29:1a:7e:8a:8c:62:e9:76:14:
                    9b:8f:b9:e6:61:94:87:b5:17:fe:7e:f2:27:be:cb:
                    98:79:ff:e4:b4:ee:a3:8c:26:40:d1:69:09:50:df:
                    6d:4a:db:9f:f3:ed:25:92:00:af:d0:f8:10:5e:cd:
                    5a:a6:20:64:2e:7c:ce:1c:df:03:bd:56:db:1b:f7:
                    66:9d:e5:5b:6a:2b:db:b7:4d:26:37:14:a9:fb:2f:
                    d9:2d:37:37:99:b3:87:56:19:36:7e:d0:fa:a3:75:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:28:75:7C:F0:E6:C0:46:03:C1:56:D7:A4:00:B6:23:9A:34:35:30
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xCh1fPDmwEYDwVbXpAC2I5o0NTA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:ac:f4:bf:94:fc:26:b2:9e:4a:21:50:f0:1d:19:04:44:
         06:f1:d8:62:08:23:3e:80:dc:d3:59:4a:5c:9c:3b:4e:e7:eb:
         67:05:eb:69:84:22:11:bc:7d:d5:4f:4a:f7:77:cc:e2:6b:e7:
         af:38:c9:5e:a6:8e:ab:73:e1:46:9b:89:9c:d8:0b:5d:a8:8b:
         33:17:ee:be:22:3b:9d:dd:91:60:18:50:6c:eb:e8:07:a1:b0:
         67:87:54:48:ac:19:27:cc:14:bb:4f:b6:c6:73:ad:e3:8d:25:
         de:bb:0c:03:28:2a:db:99:28:cc:32:ca:ae:71:db:b3:82:f7:
         44:67:c4:12:08:30:5b:90:33:ac:92:81:96:4b:dc:6f:a7:a8:
         d5:cd:92:15:4d:06:a6:e0:b8:06:88:46:af:d1:6b:1e:3d:c5:
         01:54:fb:bd:f9:3b:ab:af:60:e6:3d:4b:d0:7f:98:0e:35:85:
         90:cd:75:92:6e:39:d4:12:c0:e5:74:ce:cc:18:2c:1e:3c:39:
         84:f5:f2:e0:69:c3:ae:ec:ee:61:1d:4d:73:3c:f5:dd:e1:df:
         f8:b2:d7:ab:19:49:c5:7c:e3:32:fa:de:0a:2f:b7:be:7c:2c:
         b9:ab:83:3c:b6:43:f0:2e:9b:e9:84:89:9c:a1:fb:03:b3:e0:
         36:ad:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client