Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9ZdRYxFq42RwHVpXrha3vShBM8I.roa
File:                     9ZdRYxFq42RwHVpXrha3vShBM8I.roa (raw, json)
Hash identifier:          BJOGrow593ffHArpBRMZ0+EZVMuPgMAs7ylkJ7lo1Po=
Subject key identifier:   F5:97:51:63:11:6A:E3:64:70:1D:5A:57:AE:16:B7:BD:28:41:33:C2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04D3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9ZdRYxFq42RwHVpXrha3vShBM8I.roa
Signing time:             Tue 31 Mar 2026 08:13:19 +0000
ROA not before:           Tue 31 Mar 2026 08:13:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        221.132.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F5975163116AE364701D5A57AE16B7BD284133C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:df:f0:28:8f:c6:58:c6:21:4e:18:c9:00:da:
                    51:6d:c9:3e:cf:17:a4:74:2e:79:ff:2b:02:46:48:
                    68:d0:6c:a7:bb:5e:a1:fd:f9:5f:c7:e9:be:dd:5d:
                    f5:ca:69:9f:3d:70:33:45:63:1e:75:58:a6:7b:df:
                    e9:b9:69:56:7e:4b:fa:69:24:18:7d:f0:cc:26:db:
                    06:c2:17:12:1d:34:05:ca:da:00:90:d9:99:09:93:
                    9e:a6:0a:03:ef:4e:41:30:fa:82:9b:5d:ea:f5:ef:
                    00:cc:f6:67:56:9e:6f:a4:1b:b4:12:9e:d4:8d:bd:
                    d3:0f:f5:da:1e:4c:c8:ab:9d:34:d3:da:af:db:ae:
                    86:2b:4e:8b:64:19:56:ef:8b:9e:44:0a:86:9b:05:
                    22:cd:58:a2:dd:10:0b:e7:94:a8:6a:ec:1a:22:1f:
                    17:64:c9:91:b4:b7:6b:a2:50:05:ca:8f:df:c2:62:
                    0a:9f:8f:ff:5f:ef:67:45:9b:68:d9:29:0c:d3:84:
                    eb:95:c9:a8:79:e2:03:9e:70:c7:74:3b:0b:a7:aa:
                    58:5a:32:73:b4:0b:2c:c0:bf:d4:37:93:8b:ae:36:
                    3b:c0:59:e2:7c:5c:3b:fd:3d:d8:7b:b9:26:ca:50:
                    1c:cf:53:c2:12:37:33:6f:8b:23:06:71:bc:c0:85:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:51:63:11:6A:E3:64:70:1D:5A:57:AE:16:B7:BD:28:41:33:C2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9ZdRYxFq42RwHVpXrha3vShBM8I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.132.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ed:4f:dc:c6:ef:90:f8:f9:e3:cf:6f:fa:2e:7f:b0:be:24:9d:
         7a:26:81:59:3e:50:42:0e:a4:56:fb:3a:e0:14:38:4e:6b:54:
         16:89:af:e2:4f:a6:e8:a2:f9:d7:11:a7:24:0e:d3:28:ea:44:
         77:4b:c3:a8:e3:36:fa:0d:f5:33:ae:8f:88:81:90:bc:91:e2:
         98:ba:c5:5a:9d:e3:21:9e:27:66:94:09:f0:e1:5b:c7:dd:48:
         55:cc:14:78:9b:f7:3d:14:e3:d6:0f:a7:e7:ea:c1:71:ce:b8:
         85:ff:bb:33:86:cc:ad:20:89:69:89:66:b4:64:90:43:3c:2f:
         da:ba:75:49:72:9b:43:a3:e2:35:ee:e6:46:8d:a3:22:30:08:
         04:6f:11:aa:17:12:b9:9b:7f:7e:6c:80:90:95:06:b5:9a:ee:
         d2:e0:ab:a8:c3:a8:d7:76:a7:ed:e4:c2:cd:ef:83:2b:f4:bd:
         c3:3c:fb:7b:d2:06:4b:0d:fb:0c:e9:92:6c:2a:2e:0f:f5:95:
         5a:f3:96:7a:02:6a:85:7b:07:1b:5e:27:ab:79:29:08:fb:2a:
         38:be:be:df:60:c8:b9:e9:d9:43:99:91:61:18:5e:35:3b:c5:
         a3:09:f7:b4:92:ce:ba:8c:07:b0:f9:e3:68:ed:69:79:ce:fd:
         b1:d9:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:04 2026 by rpki-client