Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/xq11O4dcaKdEV3NFXiNfKf0eSyo.roa
File:                     xq11O4dcaKdEV3NFXiNfKf0eSyo.roa (raw, json)
Hash identifier:          zSCCtgh6byacFJpLnFywHJqN/jq4WjX1p+2AwYJRWOc=
Subject key identifier:   C6:AD:75:3B:87:5C:68:A7:44:57:73:45:5E:23:5F:29:FD:1E:4B:2A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03F0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xq11O4dcaKdEV3NFXiNfKf0eSyo.roa
Signing time:             Tue 31 Mar 2026 08:11:29 +0000
ROA not before:           Tue 31 Mar 2026 08:11:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        203.114.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C6AD753B875C68A7445773455E235F29FD1E4B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:1b:a7:98:07:0a:54:f2:6b:c2:65:2d:59:
                    8a:dd:1f:09:47:dd:a7:c5:92:cd:ed:e7:69:ed:55:
                    4c:c3:e8:e2:f0:6d:16:34:0f:71:d6:d4:72:4f:00:
                    70:7a:d5:b9:1d:58:09:8b:69:09:9d:d8:41:5d:04:
                    9c:9a:cb:f9:86:4d:cf:c3:97:f9:e9:97:58:02:d1:
                    7a:ad:54:fe:c1:73:72:69:0e:e8:fd:d1:ce:ca:ed:
                    58:77:69:41:bb:ee:f2:9a:10:f5:e3:73:d0:67:a5:
                    62:a2:15:b8:fd:e0:60:e9:6b:a8:39:3a:6e:39:4b:
                    bd:72:26:2f:6a:b0:17:32:25:04:df:49:64:63:16:
                    9f:b8:6c:f6:92:95:b0:75:7c:0b:a1:42:a1:3d:b0:
                    05:ff:77:a8:19:87:e9:aa:ab:42:5b:07:d5:e8:88:
                    d9:58:1e:41:4e:cb:17:35:91:97:71:41:5a:8a:15:
                    89:05:db:5b:76:64:af:f0:03:22:05:42:39:b0:6a:
                    f1:36:23:9e:17:ca:94:2a:09:1a:c8:52:0f:e9:d4:
                    cd:a1:df:2f:a6:6c:9f:d0:36:01:c6:45:70:50:58:
                    c8:90:a2:69:09:15:c6:5e:6b:d5:e0:09:23:25:94:
                    cf:98:88:2b:24:f7:25:8b:be:f3:97:36:87:66:e5:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AD:75:3B:87:5C:68:A7:44:57:73:45:5E:23:5F:29:FD:1E:4B:2A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xq11O4dcaKdEV3NFXiNfKf0eSyo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:a9:78:b5:79:c1:b6:cb:cc:cc:c0:69:35:04:94:6a:22:
         80:41:21:6a:46:bc:b6:ed:6b:67:a5:70:7e:31:ad:30:1f:50:
         c5:c6:b9:c8:2e:4e:ca:d7:67:e0:9d:8c:fd:49:a6:56:64:c2:
         c5:e7:fc:51:af:ff:61:0c:b9:e0:bc:0e:34:1b:be:b7:53:c5:
         3c:05:e9:0f:57:9e:0f:21:e8:70:d6:da:4a:69:04:97:91:66:
         fa:93:1f:80:1d:9b:04:41:63:ee:d8:2a:3a:37:1a:e1:81:cb:
         b3:2e:42:8c:e8:63:3f:0d:65:ff:79:ef:03:ae:bf:17:3d:53:
         d5:2b:63:3c:da:d1:58:b7:46:af:b4:ba:04:2d:52:28:0f:b0:
         28:36:a9:03:38:67:31:e6:19:1d:c1:0d:60:4d:b5:80:a8:63:
         77:98:61:81:1f:32:01:f0:0e:1d:fd:d7:2e:02:93:f5:c4:7b:
         ee:94:22:bd:9f:07:02:b2:5a:3b:95:4d:64:79:bc:5c:ea:11:
         d7:e6:e9:83:8d:cd:7e:dc:95:dc:62:b5:32:68:39:ee:19:db:
         9e:2b:a4:d6:58:b5:0e:94:5a:90:73:4d:25:c3:5d:dc:54:fb:
         7a:58:c9:c0:15:61:01:0e:11:55:a2:07:b1:9b:0a:0c:56:45:
         7d:41:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:39 2026 by rpki-client