Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/0u9FWpRQKslckr8gxLQ4jA36MY4.roa
File:                     0u9FWpRQKslckr8gxLQ4jA36MY4.roa (raw, json)
Hash identifier:          qwAb+Sy3o9f9sTc/JrhDB9MmskSfZ6m1hpCFvFB7CXY=
Subject key identifier:   D2:EF:45:5A:94:50:2A:C9:5C:92:BF:20:C4:B4:38:8C:0D:FA:31:8E
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       7B
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/0u9FWpRQKslckr8gxLQ4jA36MY4.roa
Signing time:             Tue 31 Mar 2026 07:29:15 +0000
ROA not before:           Tue 31 Mar 2026 07:29:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: Mar 31 07:29:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D2EF455A94502AC95C92BF20C4B4388C0DFA318E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:78:f8:bb:97:30:29:c2:d6:fb:03:dc:67:
                    ab:39:56:da:29:ed:34:ba:14:f3:53:85:1d:b2:6d:
                    d1:f0:58:78:46:65:57:17:ff:5e:7b:70:90:16:43:
                    3e:86:1c:c6:26:be:58:65:54:d2:c2:34:f1:af:41:
                    eb:3a:6a:16:be:f9:f2:3e:b1:fa:93:57:b9:b3:a8:
                    9e:c1:61:26:8c:d5:b5:58:a7:c8:4e:54:0c:4f:a0:
                    72:3f:ad:a9:87:30:24:06:7f:ae:89:00:fe:b9:95:
                    4b:d0:9f:f4:6b:8a:52:98:a1:fd:ca:a2:97:d5:2f:
                    52:62:05:db:90:70:17:1c:54:68:4d:5a:26:d5:84:
                    f3:60:25:73:24:3e:0b:ee:cf:01:73:a4:35:38:19:
                    f8:58:b1:95:54:0c:04:88:73:81:b3:3c:78:7d:3c:
                    d9:49:0b:af:e9:ad:e9:34:1b:1d:d1:2b:d8:b4:37:
                    f2:98:43:7f:42:28:d7:b6:a3:0e:e5:a6:ec:e9:2a:
                    30:b3:f3:d2:d7:7e:60:84:0e:1a:b3:d3:b7:35:39:
                    89:31:fc:1f:af:4d:d3:52:52:21:91:ba:7c:19:8c:
                    73:3a:90:8f:64:d2:8d:a3:47:42:cb:8b:b1:4c:22:
                    be:ad:f5:bf:a3:4f:02:21:9c:58:c0:f5:e0:1a:8a:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EF:45:5A:94:50:2A:C9:5C:92:BF:20:C4:B4:38:8C:0D:FA:31:8E
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/0u9FWpRQKslckr8gxLQ4jA36MY4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:84:7f:6f:f7:30:53:46:c6:27:29:42:92:8b:1c:94:fe:4a:
         84:72:ee:1b:b5:9c:a8:0a:5c:bb:29:aa:5e:8e:ee:63:4b:98:
         60:80:1e:e9:8e:eb:4c:81:38:10:0e:0c:86:f5:1a:24:dc:5e:
         57:cf:e2:b0:18:ec:c9:b2:5c:72:72:3a:5b:a7:42:8c:61:81:
         22:5c:54:36:7d:77:f0:d7:44:65:aa:21:44:b4:8b:6f:24:00:
         34:e1:b5:4d:00:e7:98:01:45:84:e6:90:a4:18:2b:6a:47:e7:
         a1:84:0e:d4:62:de:e6:c3:1f:61:e1:ad:da:6f:71:41:f6:1b:
         f7:25:38:09:8b:40:af:48:fd:f0:03:a1:47:f8:22:25:2c:ef:
         e0:b6:c6:ce:82:88:75:f1:09:40:de:91:35:7c:2a:43:a4:c5:
         61:99:c9:16:28:09:ba:94:55:6d:49:3d:85:e0:b8:67:85:7c:
         9f:1d:79:80:28:0e:dc:f7:e6:5c:d3:5a:89:35:6d:61:fb:cb:
         34:d4:ba:e1:ae:4a:ba:18:86:03:20:dd:fa:e6:6c:f2:f0:73:
         bd:c8:0e:14:a4:8b:83:d3:10:a7:b2:a1:dc:eb:10:e6:a2:43:
         eb:cc:6c:82:6a:74:f2:43:9a:d9:73:a4:f4:20:3b:c6:fb:df:
         15:ad:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:16 2026 by rpki-client