Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFL80SeWHnE1WU6y_LTg3L5e96o.roa
File:                     dFL80SeWHnE1WU6y_LTg3L5e96o.roa (raw, json)
Hash identifier:          gBabBARtPtVgDgSHNxLySxvPm1Mrr6hyjouXtrGGrGs=
Subject key identifier:   74:52:FC:D1:27:96:1E:71:35:59:4E:B2:FC:B4:E0:DC:BE:5E:F7:AA
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       98
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFL80SeWHnE1WU6y_LTg3L5e96o.roa
Signing time:             Tue 31 Mar 2026 07:55:08 +0000
ROA not before:           Tue 31 Mar 2026 07:55:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        148.67.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7452FCD127961E7135594EB2FCB4E0DCBE5EF7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:07:03:4f:2c:19:07:78:7b:9a:e1:e4:1c:
                    90:09:a1:a4:e8:71:11:5f:ae:cd:39:6a:81:60:8e:
                    01:50:60:76:c3:9d:80:8b:e9:05:c7:9f:71:1d:8c:
                    67:49:8e:30:e1:4d:91:3e:d3:74:70:5d:6c:84:e5:
                    41:80:9c:c9:2c:29:17:e8:7e:e2:9f:d0:11:f6:a9:
                    e0:e0:66:cf:a8:b2:99:4a:63:15:20:84:4d:17:08:
                    ef:0d:db:2b:0c:30:b2:7e:77:84:d4:b5:c7:b1:00:
                    b1:51:2c:70:5e:84:d1:6e:38:9d:85:13:d7:3d:aa:
                    b2:94:57:0c:21:0d:87:81:4c:fc:d8:62:9d:0d:0d:
                    04:4e:e5:4a:03:ba:0f:5c:b9:b9:8f:12:1d:5f:e6:
                    fe:ba:3e:6e:8a:00:6d:f3:fe:dc:61:32:bb:bb:52:
                    1e:e6:a3:b3:d3:1c:78:3f:f5:c8:7d:74:43:3f:86:
                    2f:bd:b1:49:f3:21:0d:7b:d7:e4:81:ec:6f:82:44:
                    b3:fe:37:de:4a:55:1a:82:89:da:c7:1f:8c:45:b8:
                    b0:45:0e:fd:06:f4:6f:70:5a:0e:83:c7:91:ef:85:
                    71:c4:f3:66:56:52:d5:96:eb:ab:6c:8f:1b:5c:23:
                    00:9f:79:db:d7:be:da:2a:ad:a0:b0:66:3a:a0:a1:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:52:FC:D1:27:96:1E:71:35:59:4E:B2:FC:B4:E0:DC:BE:5E:F7:AA
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFL80SeWHnE1WU6y_LTg3L5e96o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:98:f4:15:d5:10:69:ae:6c:da:b8:83:4a:b4:f6:ab:78:60:
         3f:29:3e:58:75:45:ac:74:7a:43:6b:14:d3:4b:a7:44:51:94:
         8e:9f:eb:e4:f8:ad:e4:cf:d9:18:08:4b:26:5a:4e:f7:57:4e:
         39:ac:ef:89:68:4d:52:8e:36:2b:16:ba:c2:35:ba:ac:54:08:
         8a:45:52:9e:14:11:d0:73:ac:33:36:1b:8a:75:fa:eb:f1:8e:
         4f:ca:c3:ed:16:76:53:df:61:09:fe:78:51:2c:13:0d:a2:6e:
         c5:dc:c1:69:1c:b5:cd:3d:92:0b:bf:fa:e6:e9:c6:4f:1d:e6:
         43:95:03:fb:80:96:bf:4a:29:36:76:a9:10:08:70:41:15:2c:
         bc:67:08:ae:fc:1a:36:55:5e:53:b0:90:0c:f5:67:cd:2a:77:
         6c:21:9b:e8:d2:79:0b:28:b4:c7:7b:dd:bc:e9:4f:90:ba:da:
         f6:52:a8:19:fb:cd:b5:36:15:85:a5:a1:9f:88:4c:45:0e:a3:
         da:c6:c2:10:a3:f9:b3:6c:ca:5a:5e:14:1c:db:96:5b:86:0b:
         c4:a0:0b:a3:fa:3f:fc:96:f7:7d:85:09:4c:11:4c:09:ed:ee:
         77:1e:a4:b6:77:2b:28:86:6d:72:26:1a:3e:be:01:80:bd:2b:
         f8:de:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:34 2026 by rpki-client