Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/-SpQjwCREMsmzuApgQBJEfaakpU.roa
File:                     -SpQjwCREMsmzuApgQBJEfaakpU.roa (raw, json)
Hash identifier:          kDkH4ZsA/WhPZCMmpz2THWHjWt4i3WbyQdPHoiJOkoc=
Subject key identifier:   F9:2A:50:8F:00:91:10:CB:26:CE:E0:29:81:00:49:11:F6:9A:92:95
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       73
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/-SpQjwCREMsmzuApgQBJEfaakpU.roa
Signing time:             Tue 31 Mar 2026 07:29:35 +0000
ROA not before:           Tue 31 Mar 2026 07:29:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55392
IP address blocks:        103.2.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: Mar 31 07:29:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F92A508F009110CB26CEE02981004911F69A9295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:bf:ca:fe:55:8b:97:5d:2f:e6:10:71:25:
                    82:5b:0f:b0:d3:9b:de:4f:99:1e:8e:9a:4c:ec:9f:
                    c1:ad:64:8a:62:d9:3c:4d:1f:d6:dc:d7:49:9e:f6:
                    04:44:9f:60:20:c3:ac:67:77:24:f9:13:32:ff:36:
                    71:48:ba:e0:f0:50:11:c3:0e:a4:6c:39:75:45:60:
                    da:69:6d:45:2f:d5:92:14:99:c1:97:fb:ab:ee:d2:
                    fb:23:80:06:0b:7c:61:4d:1f:78:2a:1c:37:d1:3e:
                    30:78:0f:4f:82:da:0c:21:a5:7b:4f:a3:1c:01:0d:
                    44:cd:fd:73:2c:09:7d:42:e7:43:32:28:0b:b2:e3:
                    95:b3:aa:f2:6e:81:e9:4e:e6:47:f9:cd:4a:68:d9:
                    23:1c:0a:ce:a6:62:db:e5:a7:e3:2d:f8:e3:f4:d6:
                    36:50:11:c7:e7:22:af:e7:c5:7b:a7:e8:5c:bc:62:
                    18:cd:33:3f:db:d9:70:55:c7:5a:2d:61:44:87:4f:
                    d4:8a:7b:f2:0f:db:2c:16:33:5d:32:97:c4:81:e2:
                    ed:c8:0b:9b:96:5e:3f:85:63:d4:68:c8:9d:aa:9e:
                    e2:d5:53:4f:30:0a:7c:f7:3d:78:36:97:8a:f9:38:
                    19:48:69:57:53:bc:cd:e5:26:ac:9e:4e:3e:c1:d3:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:50:8F:00:91:10:CB:26:CE:E0:29:81:00:49:11:F6:9A:92:95
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/-SpQjwCREMsmzuApgQBJEfaakpU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:0a:00:b0:84:ed:9e:f1:b9:37:4b:b4:9d:b3:d4:a1:59:
         10:02:be:ff:07:c1:40:b5:5e:e3:1a:cf:5d:d5:b7:f4:9c:d3:
         28:da:10:4e:29:b3:ef:fb:30:07:67:ef:2c:94:c0:31:ef:a3:
         ef:13:ca:cc:92:8f:dc:eb:17:f8:1e:e9:a8:09:5f:00:f3:6f:
         f1:d7:87:59:a2:b2:bb:13:84:6c:16:32:7e:4f:73:d7:f1:d2:
         b8:a7:a5:3f:9b:7e:bc:24:15:76:73:08:ea:88:49:ea:11:b6:
         b3:2e:ec:63:74:ed:4c:ee:07:da:a1:d2:53:fd:7f:b6:db:f9:
         6b:ea:ce:2c:e5:ff:dd:01:49:a3:b9:03:95:b3:35:28:93:15:
         fc:7d:4d:6c:7b:e3:51:a7:20:3f:95:29:16:9b:51:87:0f:91:
         32:0f:18:15:ac:5a:9a:4f:5a:b3:cc:65:66:bd:d7:00:80:71:
         07:db:32:a3:a4:84:14:d0:69:46:82:0e:96:93:83:12:16:c0:
         99:d2:84:a4:c8:95:f2:35:4b:fe:e7:a9:ab:21:23:20:e4:66:
         a5:0f:57:f3:dd:5d:2f:03:88:c6:98:99:63:b2:3b:0a:e1:62:
         16:6c:28:ac:b0:bf:ff:fa:72:40:b6:94:c4:1b:f3:1d:bb:bc:
         f9:b3:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:39 2026 by rpki-client