Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yQwXobfKJNO2VsPYNGOdH9yS3PU.roa
File:                     yQwXobfKJNO2VsPYNGOdH9yS3PU.roa (raw, json)
Hash identifier:          7FBRXR1NxRRLsFx03hkZT4SguB5+2sGceR5CP6CyE5M=
Subject key identifier:   C9:0C:17:A1:B7:CA:24:D3:B6:56:C3:D8:34:63:9D:1F:DC:92:DC:F5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0447
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yQwXobfKJNO2VsPYNGOdH9yS3PU.roa
Signing time:             Tue 31 Mar 2026 08:12:11 +0000
ROA not before:           Tue 31 Mar 2026 08:12:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        175.111.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C90C17A1B7CA24D3B656C3D834639D1FDC92DCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:80:ff:43:1d:97:1d:33:ed:f3:0d:54:f6:
                    09:64:b6:a4:ac:73:cd:48:63:c1:05:bb:d7:ca:a5:
                    5d:d8:15:30:8e:b1:80:b0:f5:29:7d:63:d2:4a:e2:
                    97:90:d5:fe:28:85:b9:ec:8c:dd:d2:cc:1c:7f:69:
                    85:77:3c:9b:79:64:49:e0:10:c1:09:7a:43:92:72:
                    50:c5:32:1f:54:8f:39:43:d9:4a:26:35:29:e6:14:
                    3a:d4:e5:10:d4:21:a3:af:d6:52:37:26:dc:87:25:
                    d3:39:99:a1:04:c9:a5:c8:65:c5:d1:9b:0f:66:58:
                    9e:5f:43:3c:7a:d3:dc:9d:e4:fb:97:85:59:a7:2c:
                    ec:9e:59:c7:56:5e:60:72:ec:1f:63:62:45:c5:df:
                    48:4b:64:c7:ff:08:fa:4c:fb:9b:c2:1d:93:a0:93:
                    47:fc:07:9c:78:da:74:87:31:bf:0e:c7:d3:db:06:
                    15:6a:55:54:34:f4:79:4a:2a:b7:b0:0b:a4:6d:81:
                    1f:80:df:bd:7b:8b:65:9b:d2:12:b8:18:bf:54:58:
                    81:ba:75:fb:b2:31:47:b2:bc:39:bb:87:b0:5d:02:
                    db:ca:18:e8:e0:85:15:7e:dc:c3:bd:46:c4:59:a5:
                    a1:9b:b8:c7:52:81:d6:b6:b6:4e:fc:14:0c:4d:46:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:17:A1:B7:CA:24:D3:B6:56:C3:D8:34:63:9D:1F:DC:92:DC:F5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yQwXobfKJNO2VsPYNGOdH9yS3PU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d8:26:b1:de:27:43:cd:92:c8:38:ad:84:f5:39:e2:81:c5:84:
         5f:83:87:eb:a7:c6:ec:52:32:76:f2:61:93:31:f3:10:0e:d5:
         ea:2d:d4:5d:5d:c7:97:50:b3:3f:81:f5:bc:ec:f9:fd:83:3e:
         24:59:ee:f5:bc:cf:39:40:71:61:f3:d9:7e:18:32:ef:b5:17:
         10:ae:9f:a2:11:dc:01:33:b4:68:2e:2b:de:88:4b:4e:71:14:
         33:90:86:23:8d:1f:99:4f:a6:7a:d5:31:d5:03:c1:9d:1f:f7:
         64:d1:29:ae:d4:ee:d6:39:c3:9b:81:f8:87:69:1f:6a:22:96:
         42:47:d6:73:02:60:fb:73:a6:3b:9f:e8:58:66:d9:1b:a3:3c:
         4a:0b:38:8d:71:70:3f:4e:4d:b2:f5:be:a3:4a:e8:7f:a2:65:
         ef:b4:d5:5a:96:3a:3b:71:a4:90:c5:18:63:2a:2f:ac:f9:8d:
         6a:e1:a1:a7:70:e6:5b:e2:04:21:16:1a:ad:53:fd:f0:0b:ef:
         c7:bf:4f:6d:f8:8a:ce:3d:d6:63:b2:48:cd:b1:3d:4a:1e:3c:
         b2:b2:5a:24:13:d8:ef:22:ee:b2:10:d3:86:81:0a:dc:cc:7a:
         cb:e6:58:9d:6b:1c:8a:a2:2c:12:75:d7:82:3b:b3:dc:8d:6e:
         4e:bf:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:40 2026 by rpki-client