Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/kTMEnmUtPJYTvglEod8vtGOPIsw.roa
File:                     kTMEnmUtPJYTvglEod8vtGOPIsw.roa (raw, json)
Hash identifier:          AS2ngvOX5r127xh79QlRtVG+pxbOJbMoTZQQM6qQN/w=
Subject key identifier:   91:33:04:9E:65:2D:3C:96:13:BE:09:44:A1:DF:2F:B4:63:8F:22:CC
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       7C
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/kTMEnmUtPJYTvglEod8vtGOPIsw.roa
Signing time:             Tue 31 Mar 2026 07:32:27 +0000
ROA not before:           Tue 31 Mar 2026 07:32:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4717
IP address blocks:        202.249.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar 31 07:32:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9133049E652D3C9613BE0944A1DF2FB4638F22CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:d4:c5:5a:7b:18:2e:11:54:45:2c:27:de:
                    74:6e:9d:2a:89:89:e3:89:5a:f0:41:c5:82:53:16:
                    b2:56:dc:8f:4c:73:4b:92:3b:84:7c:ab:51:9d:b1:
                    06:6b:d9:93:47:ab:c8:83:96:79:19:0a:d4:5f:23:
                    22:f0:4c:20:ab:66:96:dc:a2:8f:3f:35:4c:9f:28:
                    35:73:28:0c:3d:71:03:d7:7b:4a:72:fa:95:84:9f:
                    26:1d:de:57:94:4e:54:35:60:37:99:9f:44:15:ed:
                    11:25:1f:83:13:6f:08:db:a1:cb:eb:65:a4:d6:54:
                    b8:1a:b6:46:03:f2:97:e0:11:14:ca:7f:be:97:75:
                    a1:c9:13:a4:a8:80:2a:d1:7c:61:a2:ed:72:a3:63:
                    e1:87:54:84:1f:55:5f:da:ad:1e:b1:fd:87:52:4c:
                    32:d0:57:18:31:3a:ff:17:87:31:ca:46:2c:e0:00:
                    0c:1d:24:42:6f:d3:7b:33:a7:1a:a7:da:7d:11:06:
                    e2:12:71:f1:7d:44:00:74:99:34:b7:b1:81:31:d2:
                    d8:6c:6b:9f:23:6a:70:9a:7e:f5:79:50:e4:1b:29:
                    ab:e9:d2:72:a2:51:70:92:17:30:4f:40:a3:98:96:
                    8d:6f:62:e1:5c:21:8e:ff:52:29:06:f2:c0:7f:96:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:04:9E:65:2D:3C:96:13:BE:09:44:A1:DF:2F:B4:63:8F:22:CC
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/kTMEnmUtPJYTvglEod8vtGOPIsw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:67:ea:f3:4a:82:90:2b:f0:9a:b0:d6:c1:1f:dc:9a:31:
         08:3e:33:9f:16:09:17:ec:b6:ca:19:e7:48:69:68:f4:9f:68:
         67:77:cf:69:3e:db:84:2b:1f:72:6f:2c:8d:fa:a0:c6:b1:02:
         b9:ee:58:ff:2a:03:a1:03:68:1d:c0:6c:bc:f2:22:20:04:7e:
         4d:bb:d2:5e:1b:e7:f2:8b:b3:54:96:fd:39:a8:03:a5:ec:a6:
         25:6e:f5:c1:ee:44:50:df:11:dc:02:53:ee:91:7e:a9:8e:06:
         10:91:46:26:bf:0a:35:b0:33:5a:f2:38:3e:6d:a3:86:0a:f8:
         2f:98:31:c8:62:38:e2:74:cc:c6:97:cd:34:ae:f6:20:6c:b3:
         39:f5:94:76:8a:3e:8a:2a:f6:39:cc:44:93:c5:7d:c0:33:63:
         69:45:05:8a:bd:0e:7d:1c:b1:c6:71:5a:6f:3f:a9:e2:0e:aa:
         cb:b7:2a:78:1d:c1:75:5d:8f:db:8d:4e:5b:7a:4f:29:e8:29:
         c5:d4:71:f1:05:46:e8:7a:a9:02:8b:99:9d:a8:4a:c3:41:be:
         ce:c4:7d:fa:fb:dd:33:a6:93:93:04:f8:55:59:a4:e9:ed:71:
         43:24:52:d0:c0:e5:f6:e4:b9:1c:81:a8:b5:d2:69:75:aa:92:
         04:fa:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:08:17 2026 by rpki-client