Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zrGG01z4NJBsSLKOffw58Dpz3OY.roa
File:                     zrGG01z4NJBsSLKOffw58Dpz3OY.roa (raw, json)
Hash identifier:          Xe6QFqHgZKLMHtQciuItcMn/AAyRAf78epqEYnRZ+Jw=
Subject key identifier:   CE:B1:86:D3:5C:F8:34:90:6C:48:B2:8E:7D:FC:39:F0:3A:73:DC:E6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04C9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zrGG01z4NJBsSLKOffw58Dpz3OY.roa
Signing time:             Tue 31 Mar 2026 08:13:14 +0000
ROA not before:           Tue 31 Mar 2026 08:13:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        112.137.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CEB186D35CF834906C48B28E7DFC39F03A73DCE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:6c:4e:96:c5:95:09:09:83:ce:e6:40:aa:
                    12:17:75:23:e9:a9:08:59:d6:24:e3:71:39:ad:27:
                    75:e8:0d:17:2c:ea:bd:b8:c9:34:bc:4d:8f:af:6f:
                    30:70:58:63:bd:13:53:d1:8a:62:b4:b5:3f:fa:eb:
                    31:0f:9a:14:ca:f5:12:45:1b:1c:75:d1:69:c0:3d:
                    1a:28:e9:e2:cf:b9:7b:fd:1a:2f:b4:c0:5b:e8:72:
                    9f:7f:94:e1:00:a7:46:be:ca:c3:4c:6d:9a:4a:b2:
                    c3:56:be:75:7d:24:00:a1:42:f7:13:ee:05:bd:52:
                    80:da:30:71:e1:90:4d:73:98:57:6a:74:66:a5:c9:
                    cd:18:a5:96:1f:a9:e8:5d:03:b2:76:ef:9a:41:d1:
                    75:f0:df:55:57:8f:6b:7e:ef:9a:2f:8e:8d:07:1e:
                    8c:7b:9a:5b:d5:85:e0:0d:09:9b:aa:bb:42:10:d3:
                    82:54:18:2d:41:68:ec:cf:03:9b:19:e2:33:19:f3:
                    af:22:1d:78:50:83:4d:e9:b3:30:c7:8f:4e:03:a5:
                    21:44:ca:b6:ea:7d:7c:eb:54:fa:4f:36:71:44:a5:
                    e1:14:29:e4:a9:b2:55:8d:36:a4:c7:3d:be:de:0a:
                    d8:2d:2c:c3:63:e8:28:9b:d0:53:83:53:e5:73:90:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B1:86:D3:5C:F8:34:90:6C:48:B2:8E:7D:FC:39:F0:3A:73:DC:E6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zrGG01z4NJBsSLKOffw58Dpz3OY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:8a:a2:5f:93:a9:10:2a:9a:bb:c0:cc:fe:24:2c:9a:8d:c0:
         fc:7f:8a:5e:c5:61:e5:ca:18:c4:29:fd:05:16:83:ba:a9:05:
         2e:f0:21:78:ce:f4:67:c1:71:09:4f:2c:1d:ce:b0:41:b4:d0:
         30:8c:c8:2d:fc:c1:d8:43:01:f5:9d:d3:e0:07:9a:d0:7f:7d:
         3c:65:a2:27:61:ce:04:ab:e0:f1:f2:40:81:6a:77:42:22:3f:
         2e:55:d1:7a:ae:ea:61:e4:b4:6e:e2:d2:13:27:6a:b5:84:d9:
         e1:ae:4d:dc:c4:1c:0c:b6:87:18:db:86:9a:db:69:e9:e3:82:
         7e:f1:a8:09:7c:9f:4e:dd:4d:9a:57:07:c8:23:93:13:46:78:
         05:97:90:b6:36:1e:fc:9d:37:15:db:65:e4:bb:8a:c1:42:bb:
         b0:42:ca:79:1a:67:cf:8f:90:fa:02:ff:55:be:60:75:09:3d:
         58:10:25:2c:64:ae:90:51:2f:b2:b8:c9:9b:2b:1e:4b:72:8b:
         3a:53:c5:c5:a2:15:98:da:81:6d:4e:fa:3d:9c:44:1a:cf:09:
         be:b4:c2:23:98:45:81:3e:d7:ed:ff:5c:58:4c:3b:b3:4b:c4:
         35:e2:b7:90:58:d5:4b:f4:63:af:12:3b:d1:9a:6a:e0:ae:e1:
         b2:52:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:39 2026 by rpki-client