Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/952/uH3Bl2JfA-r2bG2_bmgnq5jOGDs.roa
File:                     uH3Bl2JfA-r2bG2_bmgnq5jOGDs.roa (raw, json)
Hash identifier:          XKQr9pU11KE8slUGON+Mq5vz8miHXxeJyqi91klOoe4=
Subject key identifier:   B8:7D:C1:97:62:5F:03:EA:F6:6C:6D:BF:6E:68:27:AB:98:CE:18:3B
Certificate issuer:       /CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
Certificate serial:       26
Authority key identifier: 9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/uH3Bl2JfA-r2bG2_bmgnq5jOGDs.roa
Signing time:             Tue 31 Mar 2026 08:40:23 +0000
ROA not before:           Tue 31 Mar 2026 08:40:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37922
IP address blocks:        118.91.192.0/19 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6AFAB04E10E99C322B56C603CB3C9547F22B4D
        Validity
            Not Before: Mar 31 08:40:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B87DC197625F03EAF66C6DBF6E6827AB98CE183B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:a4:9a:7e:80:f1:b0:10:56:75:a4:36:d8:
                    88:fa:51:7f:1d:5d:a3:e8:fe:65:7e:4e:e9:4b:33:
                    cf:0e:a9:16:40:ce:b7:8a:de:15:58:27:30:4a:30:
                    91:dd:b3:f7:42:a8:17:21:53:d9:f3:1b:13:fb:40:
                    0d:b9:a1:45:78:3a:5e:30:8a:52:84:34:50:4c:38:
                    fe:12:6f:0b:10:bd:dc:05:74:fe:cc:96:80:6f:8a:
                    6d:c7:a4:e9:fb:4f:16:63:91:69:39:cb:af:dd:e4:
                    3a:15:64:75:6c:41:1e:04:8f:7f:11:00:83:8a:92:
                    57:c8:60:84:92:d7:6e:d0:fe:cd:e1:86:35:67:d4:
                    85:69:4d:37:2f:13:e9:4f:63:a4:18:ff:9c:59:d1:
                    fb:bc:96:12:03:f9:83:8a:4d:72:06:6e:57:cd:eb:
                    42:de:ed:d7:3f:2b:de:81:97:32:5f:ca:3b:98:85:
                    34:02:df:3a:c5:8d:98:af:a8:df:a2:a5:38:08:46:
                    44:73:c9:1d:98:dd:17:36:6d:70:4a:10:ac:d3:cc:
                    fe:57:06:fe:1f:e9:70:33:39:2a:6b:05:73:8c:44:
                    0f:0c:cb:47:b7:66:32:60:f5:48:77:f7:1a:cd:d9:
                    37:42:d5:66:10:28:b3:8e:b1:c2:b5:28:94:e6:4b:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:C1:97:62:5F:03:EA:F6:6C:6D:BF:6E:68:27:AB:98:CE:18:3B
            X509v3 Authority Key Identifier:
                keyid:9E:6A:FA:B0:4E:10:E9:9C:32:2B:56:C6:03:CB:3C:95:47:F2:2B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nmr6sE4Q6ZwyK1bGA8s8lUfyK00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/952/uH3Bl2JfA-r2bG2_bmgnq5jOGDs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.91.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:be:20:2e:e9:ad:93:9b:83:55:13:0e:c2:0f:23:28:9d:
         17:69:de:a7:30:d3:68:1d:70:d2:82:9f:41:b9:7b:6a:6c:8a:
         58:8f:c8:6b:73:79:c4:38:47:ef:d6:47:91:48:c3:81:49:f2:
         a7:29:63:fb:0f:a2:2e:e3:3d:b6:b9:a1:18:b6:38:b9:09:f0:
         41:df:72:aa:8b:75:11:ea:9b:2e:bc:9d:71:58:3e:ec:76:55:
         92:02:22:40:59:bc:c5:44:b2:b6:d1:18:3c:58:8b:5f:80:ba:
         d4:2a:f7:71:93:a6:68:96:a9:75:81:6c:65:78:7b:4d:88:8d:
         93:f3:90:e6:c7:28:c1:78:ec:bb:b4:8a:d3:85:7b:5b:02:6c:
         97:5e:f3:ff:4f:4a:c8:4e:f2:b6:16:cd:02:66:c5:24:f8:45:
         a0:ce:d8:68:a6:19:4b:2a:fc:be:14:9d:6c:fb:c7:ec:2b:64:
         b1:9e:05:15:28:96:36:04:26:f2:66:a9:4f:ce:02:83:19:d8:
         8a:d4:94:5e:52:6f:c2:d0:24:38:c2:a4:f4:3b:c9:15:be:54:
         5d:5b:ba:aa:a8:cd:08:10:90:72:4c:5d:22:02:09:a2:30:83:
         91:da:78:24:61:94:f0:69:6d:1a:86:2c:2a:e6:46:f0:d5:40:
         45:7b:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:15 2026 by rpki-client