Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/TT9ad8cx0pzHAEmBMfI8SMqIkKI.roa
File:                     TT9ad8cx0pzHAEmBMfI8SMqIkKI.roa (raw, json)
Hash identifier:          qgAXyhNX5+0/BH9Pt2m12Bbm4Y+S8eeZUg1WIfGswew=
Subject key identifier:   4D:3F:5A:77:C7:31:D2:9C:C7:00:49:81:31:F2:3C:48:CA:88:90:A2
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       09
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/TT9ad8cx0pzHAEmBMfI8SMqIkKI.roa
Signing time:             Fri 18 Sep 2026 05:59:38 +0000
ROA not before:           Fri 18 Sep 2026 05:59:38 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        103.3.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 18 05:59:38 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=4D3F5A77C731D29CC700498131F23C48CA8890A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:84:38:2e:8d:69:e7:a3:bc:5c:fa:e8:23:
                    11:3d:74:ea:1c:ce:1b:9f:85:6f:bf:94:c6:56:19:
                    e9:bf:af:90:13:cf:ae:c8:81:be:17:2d:28:00:19:
                    8e:7f:52:66:64:3a:43:ec:f2:ed:71:f8:7f:09:91:
                    93:8b:71:2f:9b:ba:eb:a6:d1:d6:db:f6:89:62:b7:
                    0e:b5:d5:30:3d:97:27:15:e8:b2:92:be:6e:71:83:
                    3e:a8:07:56:33:98:a4:b1:f5:a7:d3:80:99:f3:2a:
                    d5:6d:c1:b9:36:5f:2c:10:0e:41:58:1a:ba:7b:07:
                    4f:e9:5f:34:e9:96:d2:72:2e:ac:17:4f:94:70:fd:
                    34:00:1c:50:b0:53:0f:21:24:c8:1f:d8:ee:54:bb:
                    ef:46:8a:24:fc:be:62:a9:bd:86:a1:8a:59:e2:34:
                    41:d6:86:aa:ed:40:0b:c6:dc:35:fa:08:2f:af:bd:
                    48:02:31:83:ef:9d:d4:ab:a7:7c:d5:0c:ca:27:3e:
                    22:85:63:a6:a2:f2:c1:82:83:be:f0:df:ad:17:6e:
                    dd:0f:59:c1:d0:3e:0d:3b:a1:fc:22:66:fb:d8:45:
                    20:30:31:c6:63:eb:7c:02:f9:a8:44:b0:65:b7:c6:
                    68:e5:1b:ff:a5:13:05:27:ca:97:f6:b2:c8:76:84:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3F:5A:77:C7:31:D2:9C:C7:00:49:81:31:F2:3C:48:CA:88:90:A2
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/TT9ad8cx0pzHAEmBMfI8SMqIkKI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:e4:76:7a:a7:ce:12:75:6a:26:5f:59:7d:98:cc:a7:a5:
         58:69:63:f6:e9:09:ab:56:d1:b5:9c:5b:39:f0:e4:14:bf:af:
         81:aa:81:21:d6:31:bf:9c:9c:b1:af:99:91:c2:e3:f0:96:b2:
         8e:51:f5:ef:d7:43:ba:8d:9b:69:b4:5c:55:95:9a:f0:f3:91:
         7e:27:be:d4:18:93:a3:8d:e2:98:3e:67:f7:94:e1:31:dd:e6:
         72:30:f5:e7:41:9b:aa:08:a0:60:a8:70:66:bb:ff:43:62:87:
         8b:65:a5:a6:fb:a5:ef:ba:6f:09:cd:3b:1f:2f:fc:15:c6:4b:
         a4:a0:a0:a4:b2:2d:ba:67:ce:5f:cf:0c:f7:b0:70:2d:d7:a9:
         94:4a:26:58:c4:3a:87:ce:d7:16:1c:be:84:b2:79:58:33:7a:
         37:a6:f9:32:05:e5:28:b9:34:01:03:21:c0:c2:b3:a3:af:f8:
         84:63:42:c3:1f:c6:9c:fc:06:c0:d7:f2:8b:a7:2a:3d:bb:e6:
         96:41:e6:56:42:a9:04:d9:ba:f5:a6:a3:7d:0b:c9:3c:ba:33:
         2d:16:ce:f2:29:fb:f6:1e:a3:4a:8f:55:ac:e0:49:af:d7:6d:
         9c:57:3a:51:50:04:c1:d0:c9:45:1a:7b:0c:22:e8:c9:80:ca:
         bb:82:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:21 2026 by rpki-client