Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zyP6cZ5pXnQJkIy4auUutwiUe64.roa
File:                     zyP6cZ5pXnQJkIy4auUutwiUe64.roa (raw, json)
Hash identifier:          N5UeVxa3dVfVHEUzvD1KxNfsUT1e1LCi5uqGlE7o268=
Subject key identifier:   CF:23:FA:71:9E:69:5E:74:09:90:8C:B8:6A:E5:2E:B7:08:94:7B:AE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0411
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zyP6cZ5pXnQJkIy4auUutwiUe64.roa
Signing time:             Tue 31 Mar 2026 08:11:43 +0000
ROA not before:           Tue 31 Mar 2026 08:11:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        219.100.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF23FA719E695E7409908CB86AE52EB708947BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:df:c0:93:6a:52:f3:f8:6f:d7:73:e4:a2:
                    92:34:2e:43:81:22:96:9f:75:c5:a4:dd:be:26:6b:
                    54:33:ae:43:ce:2d:ae:64:dc:1d:ae:09:b0:34:bd:
                    12:25:c4:83:bc:02:7b:e3:00:73:65:cc:72:0c:53:
                    53:fe:7e:53:7d:a0:df:80:cf:7a:a6:97:c6:a0:3e:
                    2f:03:cd:2d:01:27:a2:e6:dd:a8:c3:51:e7:27:88:
                    f6:d4:bc:0b:64:1e:95:eb:f7:48:2c:42:52:a8:85:
                    2c:d3:8f:cc:ab:91:a5:b6:81:ee:ad:42:2a:d5:89:
                    f0:39:77:cf:98:5f:ba:cf:3b:b0:8f:36:d8:50:e5:
                    26:3c:7b:3e:ff:69:4a:29:07:7a:87:97:61:66:d4:
                    55:b8:da:57:13:db:1a:d2:42:dc:47:25:47:da:1c:
                    bc:a5:ab:95:63:5a:ab:ba:39:bc:6e:b0:be:fc:32:
                    85:ef:6e:11:88:48:b7:1d:9a:35:72:86:15:46:05:
                    f1:74:4d:fb:13:78:5c:e2:a0:85:b8:ae:c3:da:3a:
                    fd:45:7e:0d:97:56:a2:cb:40:99:41:17:04:e2:b8:
                    45:fb:a7:70:2a:a0:7f:2c:0a:5c:02:b8:8c:6c:fa:
                    24:67:73:c7:62:cc:d0:29:fd:f0:dc:56:19:2c:8c:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:23:FA:71:9E:69:5E:74:09:90:8C:B8:6A:E5:2E:B7:08:94:7B:AE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zyP6cZ5pXnQJkIy4auUutwiUe64.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:e5:c9:15:1e:78:bd:3b:f7:24:7d:3d:1c:71:cd:01:ff:25:
         34:30:c3:44:6a:36:97:c3:01:56:10:c3:0a:26:c1:29:91:38:
         a5:0e:0e:fe:ba:2c:0f:87:74:92:39:9d:7b:22:50:f8:5d:ba:
         49:f6:8e:e8:de:2b:76:ff:36:42:a6:e8:d3:88:20:f2:cc:0c:
         72:5f:74:ce:16:fd:e1:16:2f:0a:42:53:4c:b1:03:67:15:c9:
         3e:d4:c1:f5:cb:50:ee:b3:ff:f9:1c:b9:e7:5e:54:52:4e:59:
         26:18:46:2a:e1:f0:99:a6:3c:be:ad:48:27:bb:e7:e8:5a:14:
         fe:78:62:10:5c:fa:d2:dc:a3:f7:4f:cc:61:df:0c:78:f7:44:
         73:01:97:7b:d2:e2:f1:31:c6:b3:ca:b5:c7:8d:53:22:1f:67:
         55:81:40:bd:2a:c5:3a:67:f0:19:6d:b4:43:83:45:33:34:2c:
         39:6d:c4:10:d8:2f:8f:e7:e5:00:57:32:04:4a:f3:e1:a0:66:
         6e:2c:a7:a2:e5:73:ee:f9:95:1d:7a:6a:51:50:34:40:d6:82:
         1e:6b:c2:81:85:59:06:ec:2b:29:0c:19:c7:f6:e1:af:2b:05:
         01:45:aa:3e:59:06:e7:a9:af:f2:25:dd:d8:eb:9b:ff:00:ff:
         98:ac:ba:cf
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODExNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENGMjNGQTcxOUU2OTVF
NzQwOTkwOENCODZBRTUyRUI3MDg5NDdCQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsF9/Ak2pS8/hv13PkopI0LkOBIpafdcWk3b4ma1QzrkPOLa5k
3B2uCbA0vRIlxIO8AnvjAHNlzHIMU1P+flN9oN+Az3qml8agPi8DzS0BJ6Lm3ajD
UecniPbUvAtkHpXr90gsQlKohSzTj8yrkaW2ge6tQirVifA5d8+YX7rPO7CPNthQ
5SY8ez7/aUopB3qHl2Fm1FW42lcT2xrSQtxHJUfaHLylq5VjWqu6ObxusL78MoXv
bhGISLcdmjVyhhVGBfF0TfsTeFzioIW4rsPaOv1Ffg2XVqLLQJlBFwTiuEX7p3Aq
oH8sClwCuIxs+iRnc8dizNAp/fDcVhksjAmbAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUzyP6cZ5pXnQJkIy4auUutwiUe64wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL3p5UDZjWjVwWG5RSmtJeTRhdVV1dHdpVWU2NC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALbZJgwDQYJKoZIhvcNAQELBQADggEB
AELlyRUeeL079yR9PRxxzQH/JTQww0RqNpfDAVYQwwomwSmROKUODv66LA+HdJI5
nXsiUPhdukn2jujeK3b/NkKm6NOIIPLMDHJfdM4W/eEWLwpCU0yxA2cVyT7UwfXL
UO6z//kcuedeVFJOWSYYRirh8JmmPL6tSCe75+haFP54YhBc+tLco/dPzGHfDHj3
RHMBl3vS4vExxrPKtceNUyIfZ1WBQL0qxTpn8BlttEODRTM0LDltxBDYL4/n5QBX
MgRK8+GgZm4sp6Llc+75lR16alFQNEDWgh5rwoGFWQbsKykMGcf24a8rBQFFqj5Z
Buepr/Il3djrm/8A/5isus8=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:22 2026 by rpki-client