Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0GwXHd62qgZefnNflBHiIMRv-lQ.roa
File:                     0GwXHd62qgZefnNflBHiIMRv-lQ.roa (raw, json)
Hash identifier:          SPCkLoY3dQuUdb/hLY8cc7nigzaQkFk+D9ktz+p8ouY=
Subject key identifier:   D0:6C:17:1D:DE:B6:AA:06:5E:7E:73:5F:94:11:E2:20:C4:6F:FA:54
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14F1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0GwXHd62qgZefnNflBHiIMRv-lQ.roa
Signing time:             Tue 31 Mar 2026 07:58:37 +0000
ROA not before:           Tue 31 Mar 2026 07:58:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.107.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5361 (0x14f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D06C171DDEB6AA065E7E735F9411E220C46FFA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:1a:26:8d:13:23:05:d5:81:23:93:5c:ed:
                    8e:56:5d:28:11:14:98:b4:8e:2d:c3:d1:0b:00:d0:
                    02:ed:0c:f4:eb:8f:69:32:a6:00:73:e8:5a:42:e2:
                    08:0d:0a:3c:83:44:54:eb:06:76:d4:13:61:29:11:
                    e9:9a:6e:ac:95:27:80:12:5a:de:c7:eb:79:d8:2b:
                    5c:25:e1:f0:d5:4d:aa:d6:4a:2b:96:f9:8f:94:e7:
                    83:8a:ee:e6:de:f5:45:40:03:2c:53:e0:81:15:cd:
                    c2:38:91:c6:01:23:b1:2a:a8:bb:53:4e:0f:a4:ef:
                    9a:a0:13:a1:17:60:bb:3f:e0:58:43:f8:9e:f2:b1:
                    0d:e6:89:36:12:21:29:97:47:e5:48:a8:8c:07:74:
                    18:df:00:07:bd:97:26:42:35:2b:fa:97:54:6e:33:
                    4d:5f:9e:3b:8a:48:cc:7c:51:e7:35:3e:de:b3:74:
                    83:fa:1d:a9:f9:20:91:e8:c9:5b:ba:cd:e2:92:1c:
                    a9:08:9d:26:c2:06:2a:ef:01:0d:e5:89:cd:1f:b4:
                    33:d9:6d:c1:97:32:cd:37:3e:c7:d5:18:88:a1:b5:
                    96:46:c8:16:f8:7e:f9:2d:5a:83:7f:61:5c:75:74:
                    c3:7f:56:a9:54:0d:8b:8e:62:44:f6:56:df:c7:ba:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:17:1D:DE:B6:AA:06:5E:7E:73:5F:94:11:E2:20:C4:6F:FA:54
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0GwXHd62qgZefnNflBHiIMRv-lQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.107.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ac:11:25:3d:e7:aa:9a:7e:97:69:18:52:b5:26:7e:43:53:5e:
         87:26:39:28:71:a4:9c:0b:b6:30:2d:cc:df:86:0f:a0:66:20:
         86:12:02:c8:55:24:2f:aa:e5:a3:31:6e:98:49:e1:38:cf:f0:
         7c:2b:82:be:cc:0b:7c:d9:c0:c5:eb:8c:c5:68:9c:9d:02:d7:
         8e:27:77:1b:14:1c:7d:b5:21:44:54:74:80:d4:f5:89:21:ad:
         57:89:17:3c:c0:1f:56:b6:18:7f:15:6d:8d:f0:23:b9:7a:da:
         9c:cb:50:d4:22:56:c6:9e:de:a9:df:23:5f:f5:13:ad:25:8c:
         b6:6f:c4:37:83:18:d8:a2:22:cd:5c:0e:d5:cf:53:7e:47:75:
         e7:5f:7d:0e:d5:c0:64:bb:34:9f:22:8a:4c:24:c7:b8:e4:34:
         18:68:de:4d:19:7f:88:a4:3e:29:09:15:41:0d:7b:0f:42:7d:
         ed:42:39:02:08:62:25:c9:05:7b:c5:98:ba:2f:40:a0:b3:dc:
         c8:74:01:e7:19:e8:f7:4f:1d:c6:f3:6c:55:e8:ba:72:4d:f5:
         b2:23:e1:59:42:ed:0c:7a:70:73:1d:1a:40:2e:98:3b:7d:c6:
         3d:f4:17:ec:49:24:b2:09:b9:7c:d0:36:1a:1c:0c:67:83:f7:
         0b:65:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:07 2026 by rpki-client