Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1169/9dsH4PxpXYMVt9vYB7uus5-YpeM.roa
File:                     9dsH4PxpXYMVt9vYB7uus5-YpeM.roa (raw, json)
Hash identifier:          SI+Q+dfWxNXsHSpTZ1nN7hQ89ueLCGh1GQ++hrVDvos=
Subject key identifier:   F5:DB:07:E0:FC:69:5D:83:15:B7:DB:D8:07:BB:AE:B3:9F:98:A5:E3
Certificate issuer:       /CN=28F396983C332842FDDAB617595A30A83C333464
Certificate serial:       18
Authority key identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/9dsH4PxpXYMVt9vYB7uus5-YpeM.roa
Signing time:             Tue 31 Mar 2026 08:44:42 +0000
ROA not before:           Tue 31 Mar 2026 08:44:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        136.198.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F396983C332842FDDAB617595A30A83C333464
        Validity
            Not Before: Mar 31 08:44:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F5DB07E0FC695D8315B7DBD807BBAEB39F98A5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:4f:2e:9c:db:0b:09:5c:84:06:bf:5b:3f:
                    c0:bb:6d:2f:2d:17:6d:62:3f:d2:af:40:75:c5:c4:
                    9d:71:7b:30:75:56:33:ad:cd:e9:d9:8b:53:0a:f8:
                    97:7c:ff:55:7f:8c:4a:a0:22:83:75:c3:c8:2b:e9:
                    f4:e9:b9:6e:28:d3:1b:6b:01:03:f7:c0:56:3d:17:
                    5b:ec:f3:d6:9e:40:52:e6:c9:32:f5:ec:01:a4:e5:
                    7d:52:dc:90:bb:0a:96:f5:54:65:0b:2f:b5:cc:cb:
                    30:79:d8:c5:d6:77:26:80:4e:35:d0:80:8f:27:41:
                    be:34:ed:5e:27:a6:f1:d0:fc:bf:e1:e1:51:80:05:
                    d6:30:60:99:68:a7:e8:4c:b9:cd:31:1e:a7:f4:34:
                    ed:90:ce:47:3f:15:f2:5e:95:f0:53:a5:25:24:71:
                    80:4d:06:25:3b:f1:0d:17:3b:8e:e5:e7:ab:b0:69:
                    5d:fc:cf:db:a4:18:62:c5:ba:25:85:f6:6b:06:c2:
                    7b:3a:67:e2:53:a1:ab:75:98:15:6b:ec:f7:2c:b4:
                    45:12:2d:71:ad:ab:1f:cf:7d:2a:55:de:49:63:ea:
                    02:48:ef:8f:13:6a:a1:9c:57:71:dd:b7:3e:fc:b5:
                    03:c4:29:61:ec:89:e8:1a:4c:bc:c7:19:65:7e:e0:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DB:07:E0:FC:69:5D:83:15:B7:DB:D8:07:BB:AE:B3:9F:98:A5:E3
            X509v3 Authority Key Identifier:
                keyid:28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/9dsH4PxpXYMVt9vYB7uus5-YpeM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:6e:55:32:4f:46:66:41:c5:50:ca:41:59:f8:08:02:3d:
         f1:1c:ee:cf:b4:ea:90:7a:a1:32:86:73:88:9c:4d:0d:fd:81:
         3f:9e:5e:ff:11:e0:ad:7a:e5:ad:2a:17:35:69:f8:b1:14:a7:
         08:04:92:b7:45:28:93:47:d8:4f:8f:5c:7e:5b:77:2f:3b:00:
         45:58:44:43:fc:fe:44:a7:60:6e:01:03:5e:eb:d6:f9:7e:f9:
         3d:62:2f:7a:86:dc:d4:c7:fa:5e:a1:2e:93:10:dd:ae:64:e4:
         85:24:bf:6d:f3:21:04:88:da:92:00:39:4f:df:0a:48:1e:eb:
         30:28:c9:a2:ed:cb:de:bf:8a:7b:18:63:39:96:3d:06:43:54:
         c3:8e:c3:8d:8c:e1:10:ff:85:f6:0b:cd:70:3f:05:20:22:fd:
         96:6c:dd:f8:80:d8:e1:39:20:17:6a:4a:39:27:fe:84:6e:37:
         78:89:d6:da:5f:e3:a2:f1:b2:8c:26:ac:e8:33:52:67:4e:c4:
         77:5f:19:3d:9b:cb:8c:3a:76:8b:94:6c:24:1d:c7:0e:ec:6a:
         76:b8:35:a6:12:b0:c2:a0:af:f1:f0:2f:17:36:b5:a5:2c:a6:
         19:3b:2f:c3:51:1c:70:11:97:a4:e1:5a:df:a1:d7:99:1a:64:
         b4:96:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:08 2026 by rpki-client