Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yBK8p0GQ1aROE1yjv9hQ547LA6I.roa
File:                     yBK8p0GQ1aROE1yjv9hQ547LA6I.roa (raw, json)
Hash identifier:          VTr11PxgSB/nbUxJiHJ3kiLTniCsmckNPKBtF6CFcfI=
Subject key identifier:   C8:12:BC:A7:41:90:D5:A4:4E:13:5C:A3:BF:D8:50:E7:8E:CB:03:A2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0477
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yBK8p0GQ1aROE1yjv9hQ547LA6I.roa
Signing time:             Tue 31 Mar 2026 08:12:35 +0000
ROA not before:           Tue 31 Mar 2026 08:12:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        175.41.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1143 (0x477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C812BCA74190D5A44E135CA3BFD850E78ECB03A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:48:2e:21:ca:5e:2c:29:bd:87:74:37:cb:
                    8b:44:89:31:e5:cf:19:5d:7b:6e:1e:41:e8:5b:95:
                    48:c7:aa:d5:47:5a:11:df:e5:1d:57:9d:73:09:26:
                    fd:94:af:46:34:c9:7d:68:ed:ec:9c:04:1c:1f:da:
                    5d:74:9b:8c:d7:21:4e:82:bf:76:fa:c5:88:e5:1d:
                    72:08:7f:47:20:7d:5d:b0:8a:d8:0f:eb:4c:92:6b:
                    b0:b7:9a:b6:22:73:8c:02:b9:c7:cf:b8:e0:c0:be:
                    3e:11:cd:c2:a1:01:57:81:ef:c9:45:c2:db:a0:64:
                    7d:16:ec:8f:86:1b:b9:c2:b1:b2:94:53:f2:c9:ce:
                    2d:87:59:3e:91:69:0b:13:b3:ff:3d:1f:d6:67:0b:
                    e6:84:8f:85:f5:39:c5:6e:7b:86:48:ba:a2:03:2d:
                    bf:54:4e:2f:41:76:81:3a:61:0f:83:17:b8:7c:22:
                    24:61:81:f5:1c:ce:00:69:05:55:00:b5:cc:86:0f:
                    72:46:21:d3:9c:01:49:1c:bf:83:a0:08:39:45:5f:
                    92:67:40:93:64:90:35:6c:e7:fe:9b:2e:75:6d:03:
                    14:3d:9f:6d:5d:e9:c4:90:d0:f6:ea:9d:ed:eb:48:
                    79:f7:3f:35:da:1e:c2:1c:b3:77:7a:b1:2a:fa:ef:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:BC:A7:41:90:D5:A4:4E:13:5C:A3:BF:D8:50:E7:8E:CB:03:A2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yBK8p0GQ1aROE1yjv9hQ547LA6I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:76:c8:bc:8e:47:85:7a:e1:70:aa:0a:d3:c6:f3:ea:9f:0b:
         d6:0a:da:b4:28:0d:8c:5c:19:e0:9e:5b:82:1f:1b:08:2b:4c:
         c2:fe:76:b3:ad:9d:c7:fb:ac:23:01:4e:27:33:f4:7e:17:28:
         27:5e:ff:a2:e5:ff:bb:65:bd:a1:99:cd:fb:e4:5d:f4:7e:76:
         61:06:f6:d6:d2:3e:62:44:b9:f7:97:4e:7d:68:48:b6:fc:8e:
         f7:5c:d9:8d:37:38:9d:e0:df:37:e5:6d:95:1b:df:d3:07:4d:
         e4:5e:e9:53:08:74:48:cb:9b:e6:25:10:f8:aa:9e:cf:04:8f:
         a1:27:63:c1:d9:4b:5f:9a:e1:a3:b6:20:b6:f8:28:5e:e5:74:
         fa:79:c2:1e:0f:a4:27:f9:3f:09:51:76:ea:2a:12:d0:c5:4d:
         f8:47:72:6d:4c:a8:a5:4d:72:b9:a6:04:9a:40:3e:b3:9c:00:
         d7:f9:3c:ec:a0:5b:f3:61:fe:0d:f8:55:74:17:a2:55:44:8a:
         34:d9:70:4b:59:a8:22:7c:e2:d0:5f:20:62:aa:9c:7e:57:76:
         19:53:21:4d:74:29:fa:c0:13:f3:f6:72:15:90:ef:df:e7:d7:
         3d:41:ed:30:08:06:5b:66:84:13:75:b6:95:fe:5c:9f:3a:9f:
         62:17:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:39 2026 by rpki-client