Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/n9JU4DqEIaGZm-d1i6DcqvkiCpg.roa
File:                     n9JU4DqEIaGZm-d1i6DcqvkiCpg.roa (raw, json)
Hash identifier:          9g2ImmkehFEahJy69Pj4eX7hH/geEIkQqwZzYJUeCPQ=
Subject key identifier:   9F:D2:54:E0:3A:84:21:A1:99:9B:E7:75:8B:A0:DC:AA:F9:22:0A:98
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       9D
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/n9JU4DqEIaGZm-d1i6DcqvkiCpg.roa
Signing time:             Tue 31 Mar 2026 08:25:08 +0000
ROA not before:           Tue 31 Mar 2026 08:25:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        210.199.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:25:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9FD254E03A8421A1999BE7758BA0DCAAF9220A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:e2:c6:ec:20:41:e1:f6:37:18:97:13:40:
                    12:95:91:1a:ac:9b:5d:06:fb:e2:ab:d8:30:57:6c:
                    6c:f4:8c:cd:a3:33:bb:c2:85:13:c7:fe:c7:26:d9:
                    eb:23:3a:6e:75:95:ca:50:a4:7e:f6:d7:78:20:d7:
                    1b:da:32:c3:79:01:c1:ad:4c:a9:1f:59:40:c4:86:
                    9f:59:46:1c:f8:d4:a4:01:7b:83:96:7b:cd:f1:9f:
                    5e:43:bf:ba:38:34:9e:d0:74:51:39:79:b6:af:7f:
                    14:0d:7f:14:83:5b:c1:79:1e:56:7f:7a:53:5b:8d:
                    74:13:df:79:95:77:60:94:2b:4e:1a:1d:04:7c:a6:
                    db:80:4f:7a:89:9a:02:f1:71:db:6a:2c:02:3a:65:
                    c4:f8:6a:c0:bb:9a:3f:6e:0d:10:b4:49:c0:71:f2:
                    e6:f0:70:42:78:8f:59:ff:02:a0:7e:47:0a:7b:78:
                    e1:1b:6c:47:6b:44:79:54:65:7a:f2:e4:27:2d:2a:
                    84:e1:f1:a9:78:83:83:52:31:3b:d8:ff:85:73:4b:
                    14:0a:62:7a:64:26:22:71:23:20:d8:ff:a0:61:41:
                    4d:71:4d:b7:18:b9:b5:f2:c0:03:cb:bb:a9:47:f2:
                    68:c6:45:a9:d5:15:23:fc:0c:11:92:fa:ff:7b:8b:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D2:54:E0:3A:84:21:A1:99:9B:E7:75:8B:A0:DC:AA:F9:22:0A:98
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/n9JU4DqEIaGZm-d1i6DcqvkiCpg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:2a:e8:d1:0b:f2:15:fd:20:b4:2c:ce:43:0d:65:70:b1:
         d6:a1:e0:fe:6e:0b:e6:cf:68:ec:8c:6e:75:26:a9:83:63:13:
         a7:69:79:6b:93:d8:f3:a0:84:8f:7c:42:83:1a:4e:7c:37:00:
         b7:3e:80:77:ed:e9:5f:c2:71:75:14:53:0f:0b:40:bb:a2:af:
         bb:c5:2b:30:be:62:fe:09:4e:38:48:77:cf:66:7f:58:4f:3f:
         71:d8:7d:59:8d:15:b6:f8:84:78:51:d3:f2:5c:2e:29:fb:25:
         36:49:4b:a6:62:92:4a:a0:e9:58:92:a3:44:80:f3:b5:37:5a:
         84:d3:53:21:17:44:8e:49:22:c9:98:e5:e4:9b:b7:fe:31:a2:
         03:2a:5c:87:d5:2c:77:b6:f5:eb:60:52:4a:60:0a:51:00:b2:
         b4:88:c9:f1:fa:c3:68:79:34:8e:38:8e:c7:a2:44:d6:fe:a8:
         d6:de:94:ec:d8:3f:05:58:ce:6e:4d:ad:b9:ad:29:33:f8:e8:
         61:dd:ec:c0:57:17:ec:e6:ae:ea:dc:f1:61:15:26:65:5f:20:
         c8:7b:e6:34:6d:0e:20:e1:43:43:db:6c:79:a8:ef:dc:70:d4:
         59:0e:4c:52:f5:e3:93:d6:32:06:14:6c:57:07:1a:82:ae:0b:
         23:85:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:18 2026 by rpki-client