Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/SAR3ik52GlPQjcvKGQFfpW-YNvc.roa
File:                     SAR3ik52GlPQjcvKGQFfpW-YNvc.roa (raw, json)
Hash identifier:          1vTBEpg2KtwIwRTGJKNwyekG3jVUe7g/3ETWn9j6eeI=
Subject key identifier:   48:04:77:8A:4E:76:1A:53:D0:8D:CB:CA:19:01:5F:A5:6F:98:36:F7
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       9E
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/SAR3ik52GlPQjcvKGQFfpW-YNvc.roa
Signing time:             Mon 14 Sep 2026 07:12:14 +0000
ROA not before:           Mon 14 Sep 2026 07:12:14 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        160.244.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Sep 14 07:12:14 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=4804778A4E761A53D08DCBCA19015FA56F9836F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:9a:ee:c0:e4:b1:f6:ba:2f:6a:15:70:7b:
                    a0:9d:af:29:b1:64:e9:18:20:67:ee:6c:04:3d:2a:
                    6f:64:0b:82:f1:ab:28:69:3a:d7:1b:13:63:8a:33:
                    5f:52:ea:65:c0:8b:89:dc:af:fb:43:3f:38:17:6c:
                    58:a5:15:88:ca:dc:45:c8:bd:b2:0f:89:a9:37:39:
                    05:69:bf:20:40:29:36:52:89:78:c6:d0:41:28:db:
                    42:22:bf:a7:e8:b4:1f:b7:06:3e:ba:e5:ab:c6:9e:
                    9a:42:7e:54:a8:14:9a:a7:3f:61:f9:52:6f:c6:13:
                    fe:85:3c:62:2e:80:1f:e9:54:20:2b:ad:7d:e3:b8:
                    6a:3c:1d:89:5c:7c:19:76:6e:ee:d1:52:64:1c:dd:
                    f3:2e:cf:3a:8b:17:f7:1f:b3:51:61:6e:d0:93:60:
                    48:46:bc:5b:8c:10:fd:45:26:47:67:73:25:10:b7:
                    99:40:6e:6b:60:8e:b8:2f:33:78:29:f8:ff:28:65:
                    be:0c:2c:99:94:eb:f4:67:9d:0f:4b:86:28:30:dc:
                    e9:40:57:59:f9:f3:ab:b4:3b:b8:88:72:04:c2:7a:
                    97:5c:a2:e2:9e:4e:2c:8c:0b:a6:c6:f5:8c:13:5c:
                    55:cf:8b:56:98:ca:1c:01:79:09:4c:ea:21:e8:75:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:04:77:8A:4E:76:1A:53:D0:8D:CB:CA:19:01:5F:A5:6F:98:36:F7
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/SAR3ik52GlPQjcvKGQFfpW-YNvc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:df:69:4e:aa:4a:35:5f:38:3a:87:c3:3d:95:41:6c:bf:26:
         fc:82:71:e1:bc:8f:c0:9a:16:69:31:b6:4e:60:cd:2f:f0:ae:
         d9:33:f3:db:a8:e8:b6:83:42:a6:ae:3f:6b:78:a5:9a:42:04:
         88:9d:63:33:1d:47:16:d9:23:09:aa:86:99:f8:16:ad:31:10:
         ca:74:36:31:f8:e1:53:8e:dc:e1:3e:6d:5e:af:8a:57:3a:4e:
         a0:68:f4:fc:13:8f:1b:4a:9a:52:c7:04:62:1e:50:de:a3:9a:
         43:22:85:b3:b7:02:53:f1:0c:7a:8d:43:a1:09:b6:66:24:d1:
         5e:a7:ba:81:a2:24:ac:6f:68:bf:6d:5f:95:4e:6a:55:9c:a3:
         61:07:35:bd:0f:a2:b3:45:c3:8e:17:9c:28:d8:3e:1b:6e:51:
         e1:06:6a:cb:c4:db:cb:b0:c3:47:4e:0b:04:ac:b4:a0:77:04:
         f3:d1:cf:7b:53:f5:76:bc:21:45:22:f6:86:41:a4:28:a6:09:
         b2:3d:c3:c8:b9:37:17:22:5d:e3:59:c3:3f:39:f1:c0:76:ee:
         a1:ed:bf:44:2a:9c:49:f9:4a:18:1f:13:b3:7c:07:73:9b:d9:
         d1:ba:69:bb:ec:23:b5:b1:b3:a0:00:f5:de:66:83:7a:0c:f9:
         c8:e4:c7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:28:35 2026 by rpki-client