Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9MQAl32XFkzAIuiJcZ8H3RTHQnM.roa
File:                     9MQAl32XFkzAIuiJcZ8H3RTHQnM.roa (raw, json)
Hash identifier:          n9OB4DxfGdYDH9r7ZClSul/dSMwsYQJtWi1Mb66oXB4=
Subject key identifier:   F4:C4:00:97:7D:97:16:4C:C0:22:E8:89:71:9F:07:DD:14:C7:42:73
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0431
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9MQAl32XFkzAIuiJcZ8H3RTHQnM.roa
Signing time:             Tue 31 Mar 2026 08:11:58 +0000
ROA not before:           Tue 31 Mar 2026 08:11:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        122.50.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:11:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F4C400977D97164CC022E889719F07DD14C74273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:8a:a1:6a:7d:8d:14:8e:39:f5:ca:e2:9a:
                    07:15:54:cb:8d:22:19:f2:b7:36:f1:52:f0:8a:58:
                    0f:ca:49:17:ec:d0:75:de:8c:dd:f0:59:a8:ea:c9:
                    0a:d6:32:3c:e7:43:e8:22:50:99:eb:f6:23:19:40:
                    ad:b6:72:8e:0f:93:19:57:c4:eb:94:75:5f:de:b0:
                    f7:ea:80:41:9a:c9:b0:90:df:d6:a0:9e:e2:1a:3b:
                    fd:62:70:c6:46:da:04:61:46:63:d4:19:29:fb:af:
                    73:02:b7:f4:8e:e6:2a:1a:64:be:37:49:bd:43:f3:
                    59:46:b2:ed:df:d6:aa:16:b9:51:3b:9b:32:2b:6b:
                    40:e9:3d:58:26:d5:33:69:36:51:50:e5:46:b5:4e:
                    c5:bc:85:28:b4:64:34:3c:d4:7e:8d:14:b2:19:55:
                    99:5d:15:07:56:be:35:75:a9:20:7e:9c:55:cf:8e:
                    97:b7:bf:3a:65:15:3b:6a:cf:2e:3d:e9:56:8c:c2:
                    3f:1f:bc:0f:aa:62:6e:61:b4:9d:fb:57:61:c1:05:
                    8e:ba:1b:72:f3:58:c1:4c:23:bd:3d:33:53:ea:bc:
                    04:8f:cc:95:ee:31:0e:46:e3:df:25:ae:0b:44:14:
                    97:05:28:54:ef:3f:44:e1:ba:0b:3a:08:bd:b1:6f:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:00:97:7D:97:16:4C:C0:22:E8:89:71:9F:07:DD:14:C7:42:73
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9MQAl32XFkzAIuiJcZ8H3RTHQnM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:9d:fd:d7:67:7b:fd:f3:b1:12:81:45:17:47:3b:70:b9:16:
         99:63:32:10:ca:c3:b7:22:34:30:7c:28:e7:81:37:3f:c5:4b:
         36:ea:bc:26:ce:64:4a:84:60:b7:ac:ae:a8:cc:d6:56:e0:cf:
         8b:bb:d6:0d:31:82:38:03:1f:33:80:1d:75:e9:b2:36:9f:79:
         54:b8:98:33:f2:1f:e9:c5:ef:aa:df:c9:31:11:6a:a9:b8:f3:
         69:97:82:b6:92:4a:6b:77:3a:f7:ca:eb:14:9d:ee:90:29:13:
         eb:48:e3:32:aa:f1:a6:6a:9c:17:d2:17:c5:23:b5:18:5a:7c:
         38:f5:2d:71:67:59:d6:71:01:c6:fd:cc:d9:79:1f:53:90:86:
         90:4f:dc:41:0e:65:79:9e:4a:34:72:23:2d:f7:9f:51:fa:28:
         70:c1:14:9e:5f:39:fc:03:16:6a:fb:69:a3:8b:7c:fd:61:7a:
         dd:74:39:75:49:35:79:5b:c3:f3:c2:00:63:d7:04:48:88:47:
         fb:6d:86:88:66:d7:a6:2d:c3:72:fe:ee:8f:18:dc:3a:df:2e:
         b4:07:ab:47:85:00:d8:6a:ee:62:3e:cb:49:dc:6d:d0:b7:2b:
         f1:fe:04:3f:cc:b5:7d:ad:42:23:7f:ba:0e:17:2e:b6:2e:2a:
         f9:7e:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:54:17 2026 by rpki-client