Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zxEfrUGefYzxCvMt0cvl4EpDKJc.roa
File:                     zxEfrUGefYzxCvMt0cvl4EpDKJc.roa (raw, json)
Hash identifier:          i/CpPHpE86zMPgnDNOS/RwVyja58wMCGxxZC1wofV8s=
Subject key identifier:   CF:11:1F:AD:41:9E:7D:8C:F1:0A:F3:2D:D1:CB:E5:E0:4A:43:28:97
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       041A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zxEfrUGefYzxCvMt0cvl4EpDKJc.roa
Signing time:             Tue 31 Mar 2026 08:11:48 +0000
ROA not before:           Tue 31 Mar 2026 08:11:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9378
IP address blocks:        27.116.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF111FAD419E7D8CF10AF32DD1CBE5E04A432897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:42:71:77:07:c9:72:18:98:87:ab:1b:4e:
                    a1:1b:b8:6a:10:f5:9c:90:b0:90:13:b6:7c:9f:3e:
                    21:96:05:db:37:17:3d:a5:18:96:fb:d1:fa:87:0d:
                    43:3e:5c:c9:33:ef:2c:cb:30:27:3d:b0:ef:a0:c1:
                    9f:63:96:c6:39:e6:b1:f8:ce:fd:7e:e1:ad:1b:68:
                    cb:05:00:5d:06:4e:b3:97:30:f3:38:d0:af:9e:61:
                    1c:46:3e:d3:cc:15:f1:50:63:56:4a:d0:c4:63:71:
                    53:a9:0a:61:fb:b9:2a:a3:e1:5f:83:4d:8e:49:b0:
                    cc:30:78:fa:a8:67:62:04:cf:1c:33:57:91:ae:06:
                    f1:fa:a0:23:b6:c7:a4:49:11:b6:7f:a1:73:0f:9b:
                    c9:a4:75:61:85:07:cf:0e:d5:d9:e1:01:da:fb:2f:
                    a8:4f:c7:9a:29:31:ef:c3:71:59:73:05:99:5f:58:
                    29:fc:e7:e7:74:78:c7:80:4e:e6:1b:86:67:ba:9c:
                    03:af:90:b1:2a:27:93:d6:51:5c:b0:af:b4:00:d5:
                    42:74:61:62:14:05:ec:bc:ad:f2:bd:de:5a:8a:f7:
                    13:8b:15:2a:1b:d6:55:72:ce:26:83:53:75:10:da:
                    fb:41:21:c2:5e:d6:05:e4:73:e2:8d:cf:80:9a:75:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:11:1F:AD:41:9E:7D:8C:F1:0A:F3:2D:D1:CB:E5:E0:4A:43:28:97
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zxEfrUGefYzxCvMt0cvl4EpDKJc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.116.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:99:16:c7:3d:49:29:d7:53:8a:d1:44:0a:ca:2b:8a:a9:
         ab:35:8d:4c:3a:41:d3:80:17:80:7d:a7:b2:0e:7e:0f:a5:38:
         f4:c6:d1:a2:79:64:50:6a:2c:14:5f:0c:48:a1:5d:43:a6:98:
         8b:0e:28:90:79:75:d0:26:b3:ac:7f:44:a0:a7:15:bd:c1:a7:
         43:c4:a1:e4:85:d1:6d:a2:e5:d8:a7:19:df:1b:88:d3:5b:e0:
         12:d7:c6:e2:45:05:38:cd:fb:26:7d:57:22:e9:be:26:66:ef:
         61:0d:37:ab:b2:d9:61:3f:3d:93:06:2f:3c:6d:68:a0:6e:75:
         c3:c9:a3:64:bb:f2:54:dd:79:56:38:bf:c0:2e:5d:4a:78:b9:
         01:8f:36:9c:ef:96:13:52:35:64:ed:94:82:9a:b8:c6:33:00:
         f8:98:85:09:ae:42:1e:a4:aa:cc:ff:ec:e3:17:91:91:f6:54:
         98:88:88:4f:28:68:d7:11:69:8d:0f:46:33:27:ed:51:0b:d5:
         ea:dd:cd:e0:a3:f2:27:a4:c9:8a:02:48:03:8d:a8:33:82:e8:
         e4:50:c1:88:50:1f:08:43:1b:b1:18:c9:6f:df:73:7c:fd:05:
         80:d0:fc:ca:08:bb:e9:61:8f:de:b9:74:ad:f1:a2:f5:8b:75:
         b7:d6:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:43:51 2026 by rpki-client