Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/kHB81pLcKXv1fOOuUIN_9ATIVQ8.roa
File:                     kHB81pLcKXv1fOOuUIN_9ATIVQ8.roa (raw, json)
Hash identifier:          aFhnuDpcNItP7o1mn3zntAxtlrTKQvCX1d53h8qQz1E=
Subject key identifier:   90:70:7C:D6:92:DC:29:7B:F5:7C:E3:AE:50:83:7F:F4:04:C8:55:0F
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       68
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/kHB81pLcKXv1fOOuUIN_9ATIVQ8.roa
Signing time:             Tue 31 Mar 2026 07:49:28 +0000
ROA not before:           Tue 31 Mar 2026 07:49:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        210.89.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Mar 31 07:49:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=90707CD692DC297BF57CE3AE50837FF404C8550F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:e3:60:1f:46:95:4e:a5:e1:dd:49:96:f3:
                    7a:b7:26:2d:ab:80:8b:86:7e:38:08:0a:64:5e:27:
                    52:f2:b0:87:1d:ad:62:60:1f:7d:05:61:0e:2d:59:
                    45:bf:05:4a:09:0e:5e:57:46:d9:6f:48:83:8a:c7:
                    61:76:71:59:0a:03:ef:0f:90:70:2c:ee:fb:fd:9c:
                    d1:92:06:04:71:34:ad:b3:96:b4:f5:74:24:27:f4:
                    9a:bc:d2:28:19:96:21:a8:9c:21:c8:61:42:b8:c9:
                    c6:ef:11:1f:ce:df:ad:98:f1:e9:6a:72:38:38:fb:
                    a0:95:c2:17:ca:91:b2:90:8a:34:0f:39:8b:c4:e2:
                    da:bd:03:5c:28:1d:9c:c6:4f:bb:05:ae:b4:e5:f1:
                    eb:a7:65:94:8d:3c:df:7c:c1:57:fa:6c:4c:72:e3:
                    a8:07:c8:14:10:b0:43:7c:94:21:f6:f0:73:5b:a8:
                    f3:31:b8:0a:ce:61:00:03:c5:3f:a4:36:d9:08:74:
                    65:f2:14:f1:df:7c:73:76:9d:d8:8d:35:bd:6c:7b:
                    9f:b4:fe:47:28:1e:fc:50:a9:22:20:87:80:fb:52:
                    45:28:67:f8:aa:19:4c:8d:d2:e8:52:8a:8f:dd:c3:
                    e5:c5:13:1b:f5:4d:34:d4:d3:77:16:a2:49:41:a7:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:70:7C:D6:92:DC:29:7B:F5:7C:E3:AE:50:83:7F:F4:04:C8:55:0F
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/kHB81pLcKXv1fOOuUIN_9ATIVQ8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.89.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:cf:84:ed:4e:26:1c:d4:57:ab:38:ab:8b:fb:2f:ff:8a:
         e3:36:c5:7b:34:04:99:13:31:7e:2a:05:3c:2b:fe:a0:de:73:
         69:d4:1b:11:ac:20:33:e5:3c:27:58:83:f0:40:94:92:08:b2:
         f4:92:6e:2c:93:ab:bd:41:7e:75:ce:38:30:99:9a:42:74:97:
         88:d6:8a:b6:9d:05:64:0e:35:27:1b:05:2a:44:60:93:bf:55:
         1c:ea:b3:34:26:86:f9:84:67:5b:b7:90:a4:46:f9:38:11:56:
         72:22:8c:00:07:66:65:1c:0b:2f:4e:6b:58:0b:14:df:88:0b:
         bb:cb:54:81:67:1a:94:ad:d4:1a:d6:2d:c5:80:b1:ad:46:ae:
         be:b6:88:1a:e6:8a:9d:d7:95:45:27:ae:9e:6b:be:d8:0d:7c:
         9f:2a:3b:b5:cf:a0:05:a6:0c:c5:af:e1:70:cb:0d:6a:ef:a5:
         0b:1f:1e:45:84:4c:fa:14:64:25:1e:fb:3d:81:4b:4f:8b:5d:
         2e:37:d9:49:f7:3b:0b:cd:50:9c:9f:f8:e1:dd:47:ac:17:3e:
         39:60:8c:6b:62:e3:2b:cf:7f:dd:50:2d:2c:04:12:82:3b:1b:
         b8:50:67:8d:5e:c4:fe:17:7a:62:dc:3b:45:cf:71:9f:62:90:
         45:8a:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:39 2026 by rpki-client