Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qD9ocFbyBfAmdElQqvRuBMomyjw.roa
File:                     qD9ocFbyBfAmdElQqvRuBMomyjw.roa (raw, json)
Hash identifier:          H42wa03NYX2Tf4B1gPs5ZJZSmf6oiF/wgQHOVmiI4Ns=
Subject key identifier:   A8:3F:68:70:56:F2:05:F0:26:74:49:50:AA:F4:6E:04:CA:26:CA:3C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       049F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qD9ocFbyBfAmdElQqvRuBMomyjw.roa
Signing time:             Tue 31 Mar 2026 08:12:53 +0000
ROA not before:           Tue 31 Mar 2026 08:12:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9824
IP address blocks:        220.208.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A83F687056F205F026744950AAF46E04CA26CA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:cc:1f:17:8a:f6:c5:fa:e4:e6:97:d6:b7:
                    20:f2:5d:5d:2a:0f:29:39:b1:95:a5:79:37:91:2a:
                    2e:27:8d:2d:8a:73:55:59:c8:65:e0:3a:27:c3:e2:
                    1b:25:d5:f7:3d:71:45:25:75:40:b3:35:36:50:3c:
                    d5:45:86:8d:53:09:db:d4:3b:ff:dc:84:5c:4e:30:
                    a1:13:04:58:f8:ee:1c:f5:d1:7f:12:6b:43:9a:75:
                    e3:52:19:e8:34:ba:3b:be:af:07:32:a4:dd:db:82:
                    ee:74:8f:26:62:db:7b:e3:e0:46:85:45:12:f2:4f:
                    d0:43:c1:ec:28:22:5e:0c:7f:89:77:b3:45:44:2c:
                    27:de:c6:57:ce:80:8c:1e:c3:26:ed:59:5b:c7:d9:
                    1f:a4:98:27:90:06:5a:67:31:f9:ca:24:57:98:7f:
                    bc:5d:ae:a2:bf:1b:92:d0:e6:d4:ef:74:16:61:be:
                    74:8e:f9:ba:44:6d:55:12:42:11:d7:a8:4e:d2:8e:
                    a3:ad:c4:82:fe:66:01:85:11:b6:00:07:c9:57:33:
                    6b:95:6e:85:49:63:b1:f2:6d:f2:5e:b1:bf:ce:cc:
                    af:c8:fc:9b:73:f5:fb:72:a2:46:ee:68:06:1e:2d:
                    82:21:90:42:89:d6:f3:53:5e:bf:d4:c0:c8:d0:ae:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3F:68:70:56:F2:05:F0:26:74:49:50:AA:F4:6E:04:CA:26:CA:3C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qD9ocFbyBfAmdElQqvRuBMomyjw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.208.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c8:f8:d0:40:8e:e0:95:9e:8f:93:fa:18:a3:ad:a4:af:1d:75:
         d4:ff:73:78:c9:01:fb:19:a4:91:ca:c3:df:40:1a:0d:78:13:
         e1:ae:82:0c:8c:6e:5d:a2:2a:1b:c3:83:39:5b:72:8c:cb:73:
         00:76:74:9e:4a:df:c6:88:b2:bf:0a:ff:08:05:6d:77:ff:88:
         81:ad:30:9d:bf:45:d0:97:e4:e6:04:ab:d4:de:c2:ec:e0:50:
         28:35:3a:d0:4b:52:6f:8b:ba:2e:18:04:02:38:6d:29:43:17:
         e6:66:21:ad:34:fd:a3:f7:0b:74:27:cf:c7:80:df:95:c5:ab:
         da:df:fe:7f:df:98:c2:51:58:bb:b6:83:8f:33:3d:04:c5:81:
         08:e4:4e:3d:a7:55:bb:ca:bf:79:d7:27:2b:ba:ff:42:8d:e2:
         4d:b1:60:a8:06:c9:68:f7:04:ba:df:03:bc:14:b2:20:48:ef:
         c9:24:f7:b4:ab:f2:7e:ea:3b:f8:92:ab:17:82:10:ca:fe:f3:
         bb:ae:3b:02:f2:36:15:aa:58:2d:4b:f0:fe:ca:21:2e:10:02:
         95:42:49:0f:aa:36:a7:51:08:92:a6:78:89:92:f2:c0:ef:01:
         a6:1f:ab:c3:ec:77:8f:c3:d2:b6:32:e8:ff:1f:87:af:f8:88:
         2d:00:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:39 2026 by rpki-client