Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I-4SIPadFkg3lYI7vBal_-ZKS4U.roa
File:                     I-4SIPadFkg3lYI7vBal_-ZKS4U.roa (raw, json)
Hash identifier:          6BWdjl5HCkPwwa36xj4LUZC6BN+mmSyCnAchbQybn6U=
Subject key identifier:   23:EE:12:20:F6:9D:16:48:37:95:82:3B:BC:16:A5:FF:E6:4A:4B:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I-4SIPadFkg3lYI7vBal_-ZKS4U.roa
Signing time:             Tue 31 Mar 2026 08:04:55 +0000
ROA not before:           Tue 31 Mar 2026 08:04:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6138 (0x17fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=23EE1220F69D16483795823BBC16A5FFE64A4B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:80:4f:31:98:52:1b:a3:7d:b4:8e:9a:32:71:
                    33:34:34:06:76:57:e4:cf:5b:e6:4d:3b:c8:62:d2:
                    5e:ce:79:88:95:98:10:c4:f7:08:70:cd:8a:24:16:
                    86:2a:c3:5b:98:29:2b:60:36:6e:d3:5a:b0:21:03:
                    15:23:c2:d9:9d:8b:f7:fb:58:6b:a0:f0:97:c2:5b:
                    9b:14:ac:aa:dc:30:04:6c:35:9a:4b:7f:0b:2c:b9:
                    e5:0e:b2:27:72:cd:ed:ee:fb:5a:27:e7:c2:43:b3:
                    60:94:d0:0f:a7:3f:e1:a1:8a:e5:02:d2:28:08:a8:
                    0a:4a:63:52:53:32:7d:fe:14:e6:4e:16:be:af:4b:
                    ca:38:07:d8:a8:2b:b7:52:56:49:34:be:cc:c1:60:
                    96:e5:f0:1d:97:68:a0:1c:fe:0e:96:c3:97:6f:06:
                    57:52:dc:c8:f7:5f:21:5c:e4:22:7c:17:df:f1:0d:
                    08:19:36:c9:66:3f:21:78:cf:91:89:d8:b2:46:79:
                    b2:27:c4:bb:2a:c0:d9:1c:8a:b9:88:6b:b5:c1:0a:
                    c1:a5:b9:95:0f:98:62:56:ee:c7:97:cf:61:08:3a:
                    ef:bd:90:23:93:53:c8:90:14:72:76:83:4a:81:ab:
                    de:d9:29:10:e4:88:5b:ed:99:f4:04:b8:aa:8c:13:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EE:12:20:F6:9D:16:48:37:95:82:3B:BC:16:A5:FF:E6:4A:4B:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I-4SIPadFkg3lYI7vBal_-ZKS4U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:4d:3e:3e:a9:6a:14:1d:57:07:bf:b9:2f:62:27:77:c8:
         45:3d:37:7c:a5:3c:94:df:6a:86:94:36:77:af:fb:27:48:38:
         f8:41:d4:21:79:f3:f7:f5:92:ba:0d:8d:8f:05:08:1b:d5:ea:
         82:cc:dc:c8:e1:69:2d:7b:6e:43:e1:a0:1c:1e:5a:6c:c3:cf:
         14:ac:c0:03:99:e8:24:11:4b:c3:4a:0b:c2:a5:ce:f2:5d:5e:
         e4:ac:a1:17:c9:18:ca:1f:74:ae:bb:0a:65:e8:99:d0:66:e1:
         f3:ca:85:05:4d:e7:a7:af:71:b5:73:45:4d:28:d6:71:bd:42:
         dd:93:04:d3:08:57:5b:8c:cd:5b:91:e0:00:f4:bf:d1:ae:10:
         52:29:a4:2e:bd:30:ef:72:64:7c:1f:58:7f:93:9d:39:ff:7a:
         03:ef:6f:0c:3b:e2:7b:8b:a1:ad:61:f8:7e:8c:a4:d1:35:f2:
         5a:f0:bf:6c:c0:32:59:0f:7b:4d:2e:b8:cd:7b:49:c7:c7:1a:
         2d:73:bc:47:bb:e4:c9:a2:6d:d4:6d:5b:d8:8f:47:c7:98:9a:
         d3:79:63:de:86:a3:78:59:24:12:db:f7:29:51:18:1c:63:94:
         d2:3b:17:25:a2:95:25:dd:d5:ea:03:5c:b1:91:de:71:dd:81:
         e2:51:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:39 2026 by rpki-client