Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/ETH9-1tufOteNBnf7SSaJOmZebI.roa
File:                     ETH9-1tufOteNBnf7SSaJOmZebI.roa (raw, json)
Hash identifier:          D4IsrGmaXANwsLwG6KZrGDlOdX2hDzVkiJ9fuX7OcPA=
Subject key identifier:   11:31:FD:FB:5B:6E:7C:EB:5E:34:19:DF:ED:24:9A:24:E9:99:79:B2
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       45
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/ETH9-1tufOteNBnf7SSaJOmZebI.roa
Signing time:             Tue 31 Mar 2026 08:18:32 +0000
ROA not before:           Tue 31 Mar 2026 08:18:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45677
IP address blocks:        180.148.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Mar 31 08:18:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1131FDFB5B6E7CEB5E3419DFED249A24E99979B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:19:c3:16:3d:c3:7d:ac:ff:16:85:41:38:
                    29:c5:05:f9:57:41:30:69:e6:c4:c3:40:cd:9e:81:
                    d4:85:65:b3:41:5f:e6:37:d0:6e:1a:67:84:2d:36:
                    d5:4b:e4:b9:ee:fe:cc:6e:40:fe:c0:55:f4:a3:a5:
                    3e:95:58:ed:2b:82:75:11:18:39:8b:69:ca:3c:a4:
                    5a:2c:3e:e9:4c:1b:5e:91:16:45:fa:15:99:18:77:
                    fd:fd:30:8a:06:fc:a0:ab:31:44:b1:6b:09:bc:4e:
                    10:2e:4a:89:3e:30:34:5a:fc:7f:da:c8:a2:63:e6:
                    eb:87:7f:82:b8:c2:b2:e5:24:32:3c:1d:cb:dc:b8:
                    d3:51:dd:0e:53:42:4b:d0:5b:f2:06:a9:52:ba:11:
                    4a:93:fc:4c:fb:7e:3c:6d:80:53:40:8b:24:f5:2f:
                    d6:0f:d9:a0:51:5e:67:81:2a:1d:b0:dd:19:76:1e:
                    68:19:f5:56:3f:21:51:26:0c:02:71:83:17:ed:3a:
                    2d:bd:06:87:d9:62:bf:da:92:36:db:67:c1:ad:71:
                    4e:40:23:c9:1e:26:7c:d0:5b:19:8f:c5:21:b7:3a:
                    3f:11:bd:14:98:18:17:8a:f3:ce:4c:c4:af:9f:8f:
                    a0:5b:4e:06:29:ab:0e:4d:d7:e2:8e:e8:a6:00:95:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:31:FD:FB:5B:6E:7C:EB:5E:34:19:DF:ED:24:9A:24:E9:99:79:B2
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/ETH9-1tufOteNBnf7SSaJOmZebI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:58:78:43:59:d6:02:75:26:7d:15:44:dd:af:e5:7d:15:26:
         5e:ab:9f:28:aa:c1:3a:48:6c:4f:61:7d:6f:23:35:08:01:37:
         e8:e4:8d:cd:65:ad:99:b7:9d:84:ee:0c:fa:d0:40:66:eb:26:
         f3:29:a5:96:ad:13:41:32:dd:67:33:25:da:42:6a:ab:85:83:
         21:2e:41:b6:5b:2b:8f:e9:41:71:c8:ba:5e:47:a3:6c:8f:58:
         5c:9b:47:b7:22:39:bd:86:ec:70:2e:1a:79:1b:cc:e7:b8:80:
         8d:29:d9:01:48:7a:99:09:01:a7:d5:72:40:88:63:ef:21:b4:
         d2:c6:77:09:6c:27:93:0d:b9:42:5f:0e:24:fa:4c:15:49:11:
         9d:b5:c4:d3:57:d7:f1:4f:5a:4f:d6:ca:df:93:34:c3:a2:71:
         08:59:9c:80:fa:6b:90:04:6a:f8:19:57:61:99:34:a0:bf:01:
         28:f1:b9:b6:05:aa:0a:ca:23:4c:d4:bb:f9:57:09:bf:9d:45:
         cf:5f:18:8d:3c:41:ed:36:c6:8c:08:31:50:bf:8a:54:d1:73:
         5f:63:55:6a:cc:c5:46:20:a7:cb:7d:cd:c1:f5:b3:cb:e0:d6:
         6a:83:db:ba:64:35:66:7d:05:2f:c2:9b:1e:c3:ea:e7:5f:84:
         75:dc:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:41:12 2026 by rpki-client