Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yLXVzpdWld696lBkThTl6Sn3eNc.roa
File:                     yLXVzpdWld696lBkThTl6Sn3eNc.roa (raw, json)
Hash identifier:          Nf2DlY1v5D1+xRqxRiNLsu0GkdiXU9JJpgd7j2Jfjwc=
Subject key identifier:   C8:B5:D5:CE:97:56:95:DE:BD:EA:50:64:4E:14:E5:E9:29:F7:78:D7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04AB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yLXVzpdWld696lBkThTl6Sn3eNc.roa
Signing time:             Tue 31 Mar 2026 08:12:58 +0000
ROA not before:           Tue 31 Mar 2026 08:12:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        61.125.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C8B5D5CE975695DEBDEA50644E14E5E929F778D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:bc:8f:08:33:a5:00:9d:62:7f:a7:0c:80:e4:
                    8b:e3:f3:57:22:dc:17:c2:31:81:18:1c:0b:47:96:
                    41:eb:04:94:1a:ec:3b:53:fc:95:c4:94:33:40:67:
                    58:b9:0c:00:fd:c5:08:24:f3:cf:bc:f6:42:a0:f4:
                    99:e6:8c:67:b3:01:6b:b1:a2:93:71:5b:54:6b:96:
                    28:1a:a4:86:9b:42:86:37:14:b7:db:2f:20:8b:48:
                    3c:09:f0:7d:c7:5d:d2:a8:7f:6b:1a:62:da:00:0c:
                    41:db:59:c6:34:27:2a:18:0b:14:a4:4a:bc:9b:75:
                    80:51:8f:bb:61:3c:e6:53:ec:99:56:2b:01:ac:a5:
                    7b:e2:ea:c4:ac:55:88:37:80:92:da:7e:4d:df:62:
                    b7:b0:c0:56:0b:2c:7c:02:c3:a8:bd:14:f8:05:a9:
                    d3:72:88:3c:ee:9e:a1:b1:37:03:d1:9c:a8:61:c2:
                    36:c1:3e:47:0b:fc:b9:37:e1:a6:6a:37:d7:c4:6e:
                    c2:85:24:8e:c1:b8:7b:8f:e2:5d:f7:44:34:4f:3b:
                    65:da:ae:c0:3d:03:f0:0f:bc:b4:a9:2a:41:10:fc:
                    f3:82:69:f7:7b:40:ce:b1:e8:76:c6:2f:3b:61:21:
                    3d:cd:63:72:6a:e4:19:81:83:85:9a:72:80:fc:b2:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B5:D5:CE:97:56:95:DE:BD:EA:50:64:4E:14:E5:E9:29:F7:78:D7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yLXVzpdWld696lBkThTl6Sn3eNc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:7c:bf:7a:b9:4b:cc:55:6b:fe:21:df:5f:31:c7:78:d6:e7:
         0e:34:db:38:81:8b:8e:e6:5a:24:4b:e0:68:45:ce:5a:e1:6b:
         69:78:8e:1c:cc:a0:aa:c5:54:3f:44:6a:0e:1f:c9:55:21:b5:
         ce:e7:e3:c3:70:90:f0:26:e3:11:3b:f0:92:6f:81:7c:2c:54:
         4d:0a:c9:a8:0b:63:43:98:6c:c0:23:6e:d7:04:6d:b4:71:4a:
         95:21:98:4e:81:67:81:2a:8c:7b:ac:60:78:f8:a7:81:da:5c:
         39:27:08:87:5e:9f:6e:6a:29:f5:c9:57:a0:db:e6:e5:bf:c2:
         d9:40:8c:24:45:2b:75:93:68:b5:97:33:4f:a7:f4:ce:c0:bd:
         28:55:ac:ca:2d:20:62:5c:1a:69:21:8f:87:52:07:34:c1:bc:
         91:94:5f:c0:c5:cd:1d:8f:bc:05:0a:de:36:2e:ee:ab:c5:e1:
         49:47:33:13:ac:c6:ba:25:c1:f8:0e:db:d6:d2:45:77:21:86:
         ed:9d:c0:57:59:5c:4c:2a:dd:8a:fb:e7:6c:34:21:9b:b4:53:
         ae:93:b4:94:f2:9f:63:89:96:d5:be:65:53:b9:87:c6:a2:b2:
         7a:2a:d9:fc:2e:4c:51:5d:7d:0a:0f:29:7f:df:97:8c:76:b3:
         41:95:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:59 2026 by rpki-client