Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/957/9Wc2fLG_i97mTbXt-_exptjJ4MM.roa
File:                     9Wc2fLG_i97mTbXt-_exptjJ4MM.roa (raw, json)
Hash identifier:          ZWPPSGp6MsdX78KNcZ2MJqk9aO1/dK3erUMUHmPrOYA=
Subject key identifier:   F5:67:36:7C:B1:BF:8B:DE:E6:4D:B5:ED:FB:F7:B1:A6:D8:C9:E0:C3
Certificate issuer:       /CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271
Certificate serial:       3F
Authority key identifier: 60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/9Wc2fLG_i97mTbXt-_exptjJ4MM.roa
Signing time:             Thu 17 Sep 2026 09:04:10 +0000
ROA not before:           Thu 17 Sep 2026 09:04:10 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     38634
IP address blocks:        119.110.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D0DEEE91CB41D21FE449CBC78CDFEF63771271
        Validity
            Not Before: Sep 17 09:04:10 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=F567367CB1BF8BDEE64DB5EDFBF7B1A6D8C9E0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:90:1b:41:f3:5a:5f:9f:74:92:e2:51:20:
                    6c:05:46:7d:6b:e4:5e:80:51:f0:33:a0:35:f7:50:
                    49:6d:4c:5c:74:38:0f:5d:f6:68:08:70:17:b5:6e:
                    09:38:2f:e2:87:39:fc:9f:9e:3b:82:f6:d9:d7:4d:
                    2c:69:1f:57:5e:73:9c:6e:d2:e9:50:23:15:7b:94:
                    05:5d:4f:8e:3b:0b:d7:18:f2:20:2c:b9:e5:1c:54:
                    1c:06:82:07:b4:cf:0a:2c:92:df:af:b8:e0:a3:8a:
                    d6:df:df:4e:54:29:4a:63:bf:77:94:08:1b:a2:e9:
                    24:cb:79:65:93:54:14:30:97:0b:dd:ca:a3:ee:2f:
                    bf:24:76:00:93:f2:73:9e:47:c0:5e:08:61:8c:7d:
                    1d:bc:8b:4c:ae:5f:02:da:c8:d8:30:fd:62:4b:f7:
                    26:82:7f:bb:09:32:dc:be:9c:ba:93:c8:02:9b:b6:
                    ca:7f:45:86:f7:50:3b:85:73:6f:09:1b:ef:95:e0:
                    d7:d3:ae:e2:ec:87:f5:d9:26:b3:6f:85:24:42:e8:
                    01:40:18:76:77:3d:6b:08:8d:a2:33:50:e4:b2:d2:
                    37:e1:7c:c3:29:11:f7:da:e8:ea:2e:0e:a0:f0:75:
                    5f:46:63:63:8a:bf:5d:39:bb:e0:3b:02:98:58:59:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:36:7C:B1:BF:8B:DE:E6:4D:B5:ED:FB:F7:B1:A6:D8:C9:E0:C3
            X509v3 Authority Key Identifier:
                keyid:60:D0:DE:EE:91:CB:41:D2:1F:E4:49:CB:C7:8C:DF:EF:63:77:12:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/YNDe7pHLQdIf5EnLx4zf72N3EnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YNDe7pHLQdIf5EnLx4zf72N3EnE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/957/9Wc2fLG_i97mTbXt-_exptjJ4MM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:cc:e2:67:bb:11:e2:16:43:7d:53:61:f9:3c:6a:13:1e:
         76:90:b8:bb:47:35:7e:6e:4f:b1:93:b3:c0:6e:d8:0b:64:fb:
         44:e3:b2:c2:5e:c3:92:21:20:b1:e6:27:f0:4f:85:0a:bb:00:
         f1:16:12:b5:8d:96:27:92:0c:3d:89:25:b2:b7:ba:3e:a4:9a:
         63:c6:5c:fa:7b:39:f9:1c:66:99:c4:c3:c2:55:3b:e5:15:88:
         32:8a:52:33:9f:62:95:f1:79:c6:fd:c9:be:2e:be:62:9f:98:
         96:ae:53:ad:90:51:8d:6f:f3:3a:30:f2:f6:7a:03:e4:67:a7:
         f7:8b:6e:6c:36:3e:fd:9e:7d:e8:4b:e5:2b:9a:2f:8a:ae:35:
         75:63:91:7e:e2:45:1e:e2:0f:26:7e:36:2b:47:2f:d4:0f:76:
         fc:50:2c:05:c4:5b:00:48:66:9e:4c:46:33:c4:09:0c:f3:e8:
         db:bd:4e:99:0b:99:99:9e:ac:b8:23:9c:a5:50:b4:1f:2b:b2:
         ba:91:a5:2a:2b:cf:04:6c:b0:d1:4d:e6:e6:c6:17:d4:6d:ca:
         32:4e:02:19:3f:38:a3:c1:72:ce:e6:22:e8:3b:10:f1:d5:1f:
         b5:30:35:4f:8b:e7:38:26:90:57:30:77:0f:5e:88:c8:9b:69:
         02:4b:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:51:19 2026 by rpki-client