Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/9K2iYhmvQ8PkpytaHyewCQ23Q3g.roa
File:                     9K2iYhmvQ8PkpytaHyewCQ23Q3g.roa (raw, json)
Hash identifier:          pF5/E/bC7LQ2xCKx3AckRaHYnt9O3ezD9mnK8Yc/XQ4=
Subject key identifier:   F4:AD:A2:62:19:AF:43:C3:E4:A7:2B:5A:1F:27:B0:09:0D:B7:43:78
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       30
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/9K2iYhmvQ8PkpytaHyewCQ23Q3g.roa
Signing time:             Tue 31 Mar 2026 08:40:38 +0000
ROA not before:           Tue 31 Mar 2026 08:40:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24279
IP address blocks:        110.232.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: Mar 31 08:40:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F4ADA26219AF43C3E4A72B5A1F27B0090DB74378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:f0:b9:ac:c1:41:5f:fa:5f:4a:9e:76:bd:
                    e3:86:26:7b:9e:96:08:ff:20:89:bf:43:05:1a:5f:
                    6e:8f:7c:8d:cb:47:cd:76:a8:e3:9e:97:8e:f7:b7:
                    c6:46:e7:ce:3d:da:18:bc:5d:1d:26:b7:74:fa:65:
                    e8:90:42:a2:d0:0e:e3:e0:aa:f9:2b:ed:56:11:44:
                    27:7e:34:54:cb:e7:f4:2a:a5:a5:f6:84:ff:b8:94:
                    e0:0f:e9:f7:b8:64:22:3b:af:d0:1f:0a:29:d8:fc:
                    32:88:18:e4:80:21:e5:44:1a:52:50:6d:e1:6f:07:
                    c1:49:64:6e:3f:80:79:7c:7f:2b:f9:ed:da:c1:c0:
                    7b:2e:9e:42:a9:e0:b6:2f:c9:6b:0d:59:8d:c7:5d:
                    a9:97:e2:cc:2d:f8:08:da:8f:e9:34:e2:f5:f1:01:
                    54:6a:f9:1d:1e:f3:23:af:41:4c:16:a9:a9:59:81:
                    41:a4:ab:99:50:10:52:c1:0d:0f:4f:fd:2d:f9:e9:
                    d3:5f:f0:36:2f:c7:eb:1a:ea:99:c4:98:9e:d0:32:
                    75:cc:bf:5a:93:dc:4c:88:cf:dd:02:62:e0:5a:ca:
                    11:3f:7b:3a:eb:07:d8:ff:68:ed:46:df:d8:f0:6a:
                    42:1d:c3:46:c9:c3:bc:70:1e:92:dd:ef:4f:14:45:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:A2:62:19:AF:43:C3:E4:A7:2B:5A:1F:27:B0:09:0D:B7:43:78
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/9K2iYhmvQ8PkpytaHyewCQ23Q3g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:19:83:cd:0c:46:ae:8d:6f:fa:67:21:b9:49:73:fb:58:db:
         45:f6:b8:96:e0:6d:8e:d9:1c:7f:e4:7c:f3:a0:db:89:28:38:
         b1:5e:07:85:a4:66:53:46:71:5f:08:e9:3d:07:6b:5f:d0:dd:
         99:40:fc:b3:5f:a1:f7:43:c1:cc:96:fa:52:4a:c7:42:06:c6:
         43:de:2f:22:a8:35:42:a3:10:20:87:41:82:19:0b:56:b5:a4:
         4d:0d:c6:d2:ba:6a:5a:e9:28:08:c5:cd:6e:f1:ee:de:fe:62:
         1d:c3:6f:a8:7f:1b:69:8f:a7:78:3f:f5:09:be:1e:09:8c:4e:
         9a:90:78:4f:91:ee:48:60:89:68:96:44:12:b3:8c:e4:3e:f8:
         ff:67:15:47:da:c6:9b:1c:cd:29:31:6d:9b:94:ec:2e:e7:74:
         e7:21:1c:66:35:8d:37:94:cf:91:bc:81:44:9c:0d:e5:2f:2e:
         84:cb:52:b1:ec:a8:ae:ff:25:79:2a:bc:97:91:35:34:a0:90:
         d2:e5:f0:d0:31:98:d7:a8:a9:15:d6:ed:cd:3f:2b:94:b6:e3:
         52:33:7e:d2:4f:28:5c:0b:dc:ba:1f:fc:08:87:0c:e0:a8:1a:
         40:b7:ad:b9:ef:9c:96:b4:22:77:65:39:1b:eb:bf:e1:db:d8:
         17:68:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:17 2026 by rpki-client