Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6uVBCzPPOXTrovlub4k0Qf1lFeo.roa
File:                     6uVBCzPPOXTrovlub4k0Qf1lFeo.roa (raw, json)
Hash identifier:          jXPq8AP6Vw42xl6OQtZHIdmzrE9b3ACxL88NKo9HGbU=
Subject key identifier:   EA:E5:41:0B:33:CF:39:74:EB:A2:F9:6E:6F:89:34:41:FD:65:15:EA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1622
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6uVBCzPPOXTrovlub4k0Qf1lFeo.roa
Signing time:             Tue 31 Mar 2026 08:01:12 +0000
ROA not before:           Tue 31 Mar 2026 08:01:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5666 (0x1622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EAE5410B33CF3974EBA2F96E6F893441FD6515EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:64:bd:99:82:05:3a:d6:50:23:ed:0d:c8:
                    31:7b:78:ee:6c:40:28:9a:9a:b1:22:0a:6b:e5:b3:
                    55:50:85:fe:ef:0c:f0:42:86:fb:c9:62:49:39:3d:
                    b6:d7:31:ff:2a:fe:ab:a6:db:30:94:7e:07:72:49:
                    98:55:52:70:2f:53:ad:7d:2d:ef:6d:17:1b:e9:1f:
                    07:79:7d:63:6b:24:db:7b:52:4c:95:91:9e:ae:42:
                    97:48:5a:6b:57:82:fd:96:f4:38:43:6a:cc:40:50:
                    a9:71:a9:f0:cd:17:f1:a5:81:60:db:a5:07:23:11:
                    a0:30:70:d8:c1:be:15:ec:27:f8:f5:09:60:de:db:
                    85:ae:24:05:ec:aa:f9:5b:8d:e9:8f:9f:43:71:51:
                    78:77:4f:2a:da:4c:be:1f:5c:0f:5b:bd:56:c1:53:
                    45:ac:a2:1a:ac:5c:da:26:7c:02:41:0f:aa:c6:8f:
                    9c:64:73:33:04:a9:17:3e:84:d9:40:b7:9e:d7:33:
                    a8:58:4b:dd:d7:33:90:e2:80:d8:74:a7:a4:85:6c:
                    1f:a4:7c:31:3d:10:84:6c:dc:ea:95:5a:f7:20:ac:
                    89:5e:d4:a6:cd:44:bf:4c:26:0d:d7:c5:29:0d:97:
                    c7:e8:c4:d1:33:e7:78:3f:c5:b5:52:c5:c9:14:fe:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E5:41:0B:33:CF:39:74:EB:A2:F9:6E:6F:89:34:41:FD:65:15:EA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6uVBCzPPOXTrovlub4k0Qf1lFeo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e2:29:75:b2:a2:b8:01:80:53:8d:b5:ae:f5:51:e4:7e:b4:93:
         97:2f:04:d4:d5:8f:8a:7c:64:db:2e:73:90:0a:21:6c:dd:5d:
         1b:8c:ff:82:7f:44:4d:dc:ae:21:9b:11:2e:ca:fe:2c:9a:c9:
         e5:c5:1f:d1:d7:e6:71:39:a4:3b:9b:9e:d1:61:4a:80:a3:0b:
         15:b1:6a:69:2d:49:63:c0:3e:f7:2b:5f:bf:4f:e9:c1:4c:66:
         62:ed:37:cb:b6:fc:25:0b:f1:a2:41:c5:00:a1:f6:26:ed:f9:
         f8:f2:68:77:bf:a9:dd:9e:14:c5:1e:0d:2e:c4:7e:ae:e4:54:
         14:f5:a4:36:e1:48:9e:39:57:f6:6c:d9:0b:70:c5:82:8c:f8:
         23:86:41:65:f2:9d:db:fd:bf:60:90:88:dd:22:c5:8f:c0:79:
         60:a1:87:c4:fb:79:0b:09:b4:5e:c2:b1:19:a9:ad:32:86:5c:
         5c:9b:fe:f2:5a:29:b5:16:99:4c:53:e6:27:57:a6:95:ea:6d:
         16:bd:01:11:de:bf:d4:e5:f6:8c:2e:30:93:7a:b7:71:71:d9:
         f3:61:4d:5a:92:90:1b:1b:4a:9c:e4:14:d9:7e:a6:88:da:7e:
         d7:d5:93:d3:86:d7:14:1d:90:2b:b4:10:f6:7b:b6:26:ea:b5:
         11:8c:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:59 2026 by rpki-client