Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1Uxqo9Vcc_6pMYO2LxryekofRsQ.roa
File:                     1Uxqo9Vcc_6pMYO2LxryekofRsQ.roa (raw, json)
Hash identifier:          2e9VOj5Rq80Q+mdSvGb1wYmrFs0Bxh3IMpIhvm07QUU=
Subject key identifier:   D5:4C:6A:A3:D5:5C:73:FE:A9:31:83:B6:2F:1A:F2:7A:4A:1F:46:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1626
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1Uxqo9Vcc_6pMYO2LxryekofRsQ.roa
Signing time:             Tue 31 Mar 2026 08:01:15 +0000
ROA not before:           Tue 31 Mar 2026 08:01:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5670 (0x1626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D54C6AA3D55C73FEA93183B62F1AF27A4A1F46C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:0b:6b:4e:66:8c:42:d7:0c:7e:8f:97:a7:
                    27:4e:87:9e:b7:f6:ca:ae:03:07:b1:67:0e:37:20:
                    39:c6:55:e3:a3:5c:5a:86:77:2b:d8:6e:cb:1a:06:
                    16:97:be:ed:b4:e3:fb:71:2e:af:b2:ea:72:bd:b6:
                    ad:8a:7f:41:73:80:ba:fd:e9:1b:1c:39:27:9d:c1:
                    09:5d:2c:a1:93:f5:29:1b:63:dc:5b:47:10:f5:d1:
                    8b:36:2c:a6:29:91:e1:f2:2f:dd:d6:b0:c6:32:3e:
                    ec:f2:2f:66:dd:3b:7d:2c:c2:96:df:78:d0:3e:18:
                    93:0c:8d:39:ee:74:0b:ed:2a:1d:c3:3b:09:0c:bb:
                    58:48:21:2d:23:7d:4e:96:d1:61:90:15:fd:65:44:
                    91:58:f9:23:37:cc:b5:3b:07:fc:fb:c9:0e:50:dd:
                    ba:7a:27:a7:77:8b:93:64:21:db:0e:88:4b:9d:47:
                    28:de:d0:3b:53:d3:ef:87:f9:2d:c8:4c:9a:8d:70:
                    96:de:fb:36:45:91:35:f0:98:f2:cd:14:e2:cc:49:
                    0b:d6:51:4e:32:38:3d:e2:e2:6a:ad:3c:28:37:c5:
                    40:02:ad:4b:3a:e4:ed:34:1b:86:9d:63:92:ab:4b:
                    cc:2c:0a:61:86:5b:59:89:46:e4:14:fc:b5:7a:e6:
                    ac:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4C:6A:A3:D5:5C:73:FE:A9:31:83:B6:2F:1A:F2:7A:4A:1F:46:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1Uxqo9Vcc_6pMYO2LxryekofRsQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:01:ba:52:35:78:7c:3e:9a:bf:0a:91:77:6e:25:a9:d7:f3:
         c0:46:6c:5c:df:b8:4b:7b:17:41:28:d5:c0:9c:a8:82:07:e9:
         11:89:c7:05:45:f4:f4:ce:71:3a:56:79:5b:22:b9:fc:db:83:
         2a:49:6f:05:e0:ca:c7:f6:82:54:27:c7:b1:e5:dc:00:e2:e3:
         c2:1e:4c:85:90:cf:62:cc:4a:8b:61:39:e9:0c:f3:1c:2c:94:
         9d:ea:20:45:ce:9c:99:e1:9c:06:82:45:3e:0b:7f:01:8b:5c:
         da:b1:d1:a0:f8:45:bd:08:56:bf:cd:99:cb:67:cc:58:3e:df:
         98:0c:64:6c:02:3b:9a:b9:cc:f5:45:7a:fa:56:3d:24:b2:cc:
         99:3e:41:55:2c:b8:ca:e8:08:e4:cd:85:74:1a:d6:4d:a6:99:
         45:58:7d:e7:9f:97:bf:5f:ea:8d:36:87:11:76:04:3c:6c:fd:
         f2:d8:71:91:09:cb:fb:d0:94:07:24:4d:d6:8e:55:c6:4a:de:
         ed:0e:68:ba:50:66:92:d7:91:47:46:f5:09:7d:ff:0a:6d:ff:
         46:b5:74:95:9b:3c:f9:a2:17:03:77:a5:08:b2:03:27:b5:ef:
         52:f8:cb:0d:5c:59:88:0d:45:e4:a0:9a:3d:2d:43:ff:82:55:
         7e:46:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:55 2026 by rpki-client