Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/3zydmzJMJtJUHrn6WGSYHKDlciE.roa
File:                     3zydmzJMJtJUHrn6WGSYHKDlciE.roa (raw, json)
Hash identifier:          B6JT26Yxppwwrlsnr15IG8AQlKScAiplLb+EwJnCPhQ=
Subject key identifier:   DF:3C:9D:9B:32:4C:26:D2:54:1E:B9:FA:58:64:98:1C:A0:E5:72:21
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       9C
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/3zydmzJMJtJUHrn6WGSYHKDlciE.roa
Signing time:             Tue 31 Mar 2026 07:37:29 +0000
ROA not before:           Tue 31 Mar 2026 07:37:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17675
IP address blocks:        122.200.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 31 07:37:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF3C9D9B324C26D2541EB9FA5864981CA0E57221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:82:f8:eb:3d:07:5a:d3:8b:6f:cd:fa:7b:
                    6a:d4:b6:ac:b0:d8:76:d6:5f:2b:2f:5e:d7:b1:2c:
                    48:63:75:eb:36:52:da:d9:e4:f9:93:cf:95:5d:7a:
                    9b:7b:6c:44:7f:3b:f3:49:69:9f:42:31:f4:7d:ab:
                    c4:61:ae:75:a5:bd:21:e7:1d:cb:bb:b1:ad:03:0e:
                    3b:82:2f:67:d0:72:1e:27:76:b7:f0:3b:d8:53:cb:
                    75:22:98:41:3d:e2:2e:9a:f4:08:1c:c6:3c:e0:bb:
                    e8:17:03:18:4c:14:f7:5d:b3:c2:0a:77:69:03:99:
                    0b:83:ce:ee:c1:e3:e0:68:ea:d9:9c:e3:85:0c:bb:
                    d2:9c:cb:c0:af:0b:3a:1d:fd:4e:57:2c:93:67:62:
                    d1:27:ca:b2:e6:84:66:f2:05:da:52:f3:47:cd:46:
                    ef:a1:f2:92:52:c1:c2:44:f7:fa:52:85:29:9b:b3:
                    4c:d7:bc:78:b0:20:58:be:e3:78:90:30:c9:3e:7b:
                    fd:ae:e8:a9:ed:48:a9:00:4d:3e:94:f7:cf:7f:55:
                    cc:86:93:a4:67:21:35:36:be:99:ab:0e:30:13:e9:
                    bc:14:cf:fa:04:b6:b2:5f:98:4a:48:24:38:33:24:
                    11:7d:a7:76:63:1e:c9:ee:36:b2:8f:84:79:ae:bc:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:9D:9B:32:4C:26:D2:54:1E:B9:FA:58:64:98:1C:A0:E5:72:21
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/3zydmzJMJtJUHrn6WGSYHKDlciE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:19:08:32:36:00:47:5a:d5:f1:6f:fd:b4:78:5a:2d:cf:8a:
         fb:68:58:35:bc:58:9e:df:8b:ba:1e:38:38:d5:a6:1b:63:b9:
         86:4e:fd:0c:43:77:1d:f3:2a:38:0f:df:a8:64:63:21:f6:f9:
         b7:bf:09:a4:5a:23:10:67:8d:2c:7d:64:c6:7b:4d:66:ed:5b:
         c4:3d:26:d0:e8:de:06:3e:1e:7f:6a:a7:4e:de:ca:aa:d9:03:
         ba:2a:c5:68:08:22:d9:ee:63:dd:f4:9d:88:ba:a1:1c:31:ef:
         f4:52:ca:5d:d2:62:c8:9e:53:8d:c5:f0:f5:24:b9:a9:bf:e1:
         31:2e:49:0c:d5:b5:3a:94:f5:d4:7b:80:a0:98:cd:cb:d1:79:
         24:8d:11:26:6a:31:ef:5b:3f:d3:ea:e2:a6:00:77:ed:80:af:
         7b:67:a8:90:3c:d8:c4:5a:ff:6e:09:df:a4:bb:0e:60:d1:9e:
         58:50:04:33:30:bb:a7:a6:e3:1d:3b:a1:3d:24:d5:99:73:1e:
         c6:fd:61:4c:ae:2b:63:a4:5b:3c:54:e6:00:59:88:59:36:51:
         3b:43:2a:59:7b:45:fa:f0:71:24:8b:9b:16:c3:f7:b4:68:31:
         76:44:bf:7a:a1:ea:15:63:74:4b:f5:6e:92:4f:bf:99:96:42:
         69:05:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 05:12:44 2026 by rpki-client