Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yqqKdigaNmIrrsU8z-Q19DqCv8Q.roa
File:                     yqqKdigaNmIrrsU8z-Q19DqCv8Q.roa (raw, json)
Hash identifier:          CPyg9DWzh+rAKmlwe7V+ialqc4extO7mTucSHFcH6Ag=
Subject key identifier:   CA:AA:8A:76:28:1A:36:62:2B:AE:C5:3C:CF:E4:35:F4:3A:82:BF:C4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0421
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yqqKdigaNmIrrsU8z-Q19DqCv8Q.roa
Signing time:             Tue 31 Mar 2026 08:11:51 +0000
ROA not before:           Tue 31 Mar 2026 08:11:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        110.93.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CAAA8A76281A36622BAEC53CCFE435F43A82BFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:46:a2:b2:59:7e:53:8e:7d:8e:b6:dd:07:
                    6b:95:d9:10:10:c7:93:08:7e:1d:02:37:47:00:14:
                    f9:38:81:06:14:5a:6a:21:8d:e5:85:95:d1:71:a2:
                    d0:09:5c:a1:ac:12:a2:b0:25:ed:66:da:1c:7f:9f:
                    bc:0b:db:f1:a9:7a:3a:5a:b5:7e:98:02:61:9d:7b:
                    8e:8b:18:fb:23:ce:c3:39:d8:81:d9:c8:05:ca:1f:
                    93:ed:d8:62:6e:4c:2b:a7:d3:91:1b:79:76:26:fe:
                    7a:85:ee:9e:48:9d:1d:a3:ed:e0:79:5b:0d:f6:bd:
                    c3:95:ea:c1:5e:ff:dd:cd:e8:7b:df:b4:89:6c:6c:
                    7a:3c:3c:db:98:a1:7a:f9:95:6e:fb:af:94:3f:83:
                    de:e4:a2:4a:42:5b:96:04:e7:7e:49:e3:fd:e7:58:
                    55:54:f6:7b:da:5f:aa:fb:9e:ab:92:d1:bd:2d:f5:
                    14:ed:a1:60:1c:e8:37:f7:05:1c:93:52:c4:0d:16:
                    b2:47:80:75:fb:57:5a:99:9a:2b:0c:6d:86:38:66:
                    98:95:b7:33:7a:c6:6c:f2:4f:a1:98:d8:2b:87:72:
                    ee:f3:a6:cc:f1:eb:d6:26:ca:08:a0:9c:26:30:72:
                    b6:12:88:8e:b4:e3:38:0c:6f:21:f0:5c:14:b9:7a:
                    02:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AA:8A:76:28:1A:36:62:2B:AE:C5:3C:CF:E4:35:F4:3A:82:BF:C4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yqqKdigaNmIrrsU8z-Q19DqCv8Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:13:4a:42:a5:dd:69:9e:17:2d:58:c2:4f:bf:1a:42:05:0a:
         d6:db:c7:2b:a8:eb:0e:65:41:46:36:6b:c4:27:cc:c9:ce:79:
         0b:5b:d6:e0:d3:69:36:ab:dc:f7:25:36:58:3f:99:d6:36:23:
         67:7a:b0:e6:d9:e9:63:c0:26:9f:7c:20:0b:be:7a:72:64:d2:
         bf:5e:3b:af:ca:ed:e9:60:20:48:89:f1:d2:34:7f:7e:e4:3b:
         d1:13:52:d8:57:72:c5:5a:7e:16:33:45:55:de:af:30:6f:58:
         cf:71:d9:e3:23:59:02:84:8e:e1:bc:31:e0:9f:f0:db:ca:73:
         8e:ab:6a:f4:96:6a:93:11:3e:95:06:d3:c5:df:ed:d6:bc:80:
         72:ab:99:e2:f6:48:bc:d8:20:7c:9b:95:f1:3d:aa:76:1b:aa:
         b7:bf:02:05:39:95:32:2a:50:9a:3f:d5:d7:dd:d1:6d:cd:54:
         c1:c8:a7:fa:63:fb:77:77:cb:28:d1:a5:0a:e1:05:d6:33:42:
         07:0a:8b:27:33:48:fe:c1:2c:5a:80:be:13:c6:6e:07:e4:93:
         07:8e:75:64:de:de:b4:42:e7:a4:a6:20:f4:fd:ca:22:d5:79:
         fd:44:fb:72:6c:48:c1:4c:06:75:58:f1:5d:55:44:6b:6a:08:
         b9:2e:e7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:45 2026 by rpki-client