Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/922HlrzJhG4b1u9W4vlSalswQpc.roa
File:                     922HlrzJhG4b1u9W4vlSalswQpc.roa (raw, json)
Hash identifier:          Sov8YdxXkMW29HJoHS4sOOeBLGgAYM9S7W4vaJw+oOU=
Subject key identifier:   F7:6D:87:96:BC:C9:84:6E:1B:D6:EF:56:E2:F9:52:6A:5B:30:42:97
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       185E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/922HlrzJhG4b1u9W4vlSalswQpc.roa
Signing time:             Tue 31 Mar 2026 08:05:51 +0000
ROA not before:           Tue 31 Mar 2026 08:05:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6238 (0x185e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F76D8796BCC9846E1BD6EF56E2F9526A5B304297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:8e:a5:a2:d7:18:5d:90:26:fe:84:76:0b:
                    ea:ee:0b:e8:4b:b8:4b:9b:5e:c4:1c:12:a0:6e:08:
                    07:3b:f5:89:ee:cf:5e:f0:48:b9:3a:09:db:95:1b:
                    bb:e1:4f:37:f9:a5:d7:aa:24:ec:63:b3:56:0b:18:
                    db:8a:a4:c6:41:11:49:16:46:c5:fd:0d:ca:3a:97:
                    e8:4a:02:86:65:6d:f8:ec:3b:29:63:84:7d:db:50:
                    d8:dd:a4:21:62:79:47:18:93:dc:3d:7d:99:2d:6f:
                    9d:52:fa:73:0e:a9:bb:c1:3c:86:f5:bc:0f:55:70:
                    29:0d:d8:21:7b:24:c8:9e:26:bc:86:bc:f7:28:62:
                    58:c6:3d:d2:4f:ff:ef:fb:c5:91:99:03:11:21:6c:
                    d7:ca:d6:ee:9d:a0:1c:19:11:45:f9:ad:d9:8a:f6:
                    cc:c1:7b:59:b4:4f:2d:1a:81:68:11:8e:71:a9:d2:
                    b5:d0:94:26:89:49:cb:50:4b:11:be:89:85:8c:fc:
                    11:ba:88:d6:3a:fe:4d:28:32:c4:9b:34:2a:a2:d8:
                    79:12:13:3d:4e:ae:4e:5f:75:4b:dd:46:7b:f1:45:
                    48:9a:20:17:26:cc:2a:6a:17:e0:1c:9e:c0:2d:1d:
                    da:89:33:3c:f9:26:dc:bd:d8:cd:da:b8:a2:23:3a:
                    97:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6D:87:96:BC:C9:84:6E:1B:D6:EF:56:E2:F9:52:6A:5B:30:42:97
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/922HlrzJhG4b1u9W4vlSalswQpc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:cc:cb:23:99:2f:f8:e9:fc:fc:1c:91:6a:8b:a1:90:51:3e:
         5d:71:85:01:96:df:fb:eb:0e:30:ce:91:8d:1b:0f:64:f3:5f:
         a0:5e:58:e3:e3:c7:d6:96:08:80:7f:3e:56:7a:b4:66:c7:fd:
         78:00:ac:c4:c7:ba:b2:cf:75:3c:84:07:bf:1c:a7:15:99:74:
         e3:95:d7:6d:95:d6:f4:f9:bb:c1:ed:d9:27:da:1a:68:92:54:
         b4:19:e2:7c:5f:58:59:08:bb:1e:49:35:bd:40:f1:29:4a:d7:
         3b:58:4a:0c:05:42:df:a4:b4:9e:78:33:01:56:d6:83:d3:a6:
         b4:69:09:67:31:3f:33:05:e8:ea:05:3d:26:81:cd:92:8a:c5:
         61:d8:19:1f:a0:67:d1:66:6a:4f:a3:a7:d1:f1:b0:6c:f5:15:
         eb:12:d8:76:b3:f7:84:d0:a0:12:0e:e1:ad:22:9d:f4:59:a8:
         d8:a4:27:f5:ae:2a:35:35:37:d8:3d:24:28:e3:a6:1c:dc:6b:
         bf:06:03:ae:8d:47:19:58:03:76:a6:b9:ee:3c:42:eb:47:03:
         7f:83:9d:51:de:2e:18:d0:b5:81:60:01:b2:d8:87:55:7b:b8:
         18:fe:99:23:e7:c7:45:9c:56:f8:fc:a1:b7:77:45:0f:77:1a:
         64:4a:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:06 2026 by rpki-client