Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ywG6SO1se1CHeUbtsGsjVBZ_XE.roa
File:                     6ywG6SO1se1CHeUbtsGsjVBZ_XE.roa (raw, json)
Hash identifier:          k0bVkLH7XxJJgHAQ427ooXZajEj5A1gMlApW5nIEjRc=
Subject key identifier:   EB:2C:06:E9:23:B5:B1:ED:42:1D:E5:1B:B6:C1:AC:8D:50:59:FD:71
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       145E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ywG6SO1se1CHeUbtsGsjVBZ_XE.roa
Signing time:             Tue 31 Mar 2026 07:57:25 +0000
ROA not before:           Tue 31 Mar 2026 07:57:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5214 (0x145e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EB2C06E923B5B1ED421DE51BB6C1AC8D5059FD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:dd:d0:b2:99:4f:87:23:1d:5d:97:fc:55:
                    5b:4f:e2:15:c1:7c:c6:83:54:33:a3:73:cb:19:95:
                    85:e3:61:a6:3d:e5:bd:83:20:f8:d1:03:9f:7e:ab:
                    67:d3:d2:14:ae:c0:98:1b:e5:cd:58:d5:e3:54:5e:
                    4b:91:1d:ce:b6:32:93:1d:48:4c:1c:c2:89:36:c1:
                    e1:e3:83:f7:7c:12:99:34:be:09:d7:2a:64:36:e6:
                    71:93:c2:3f:77:ab:22:c8:cb:bd:5d:50:31:ef:ef:
                    03:69:4b:cf:28:3c:ab:15:fa:6a:af:ea:56:70:c8:
                    22:9f:df:b3:08:ef:c0:6c:f1:88:1a:69:47:62:ed:
                    76:1d:ad:18:4e:00:75:07:d3:c1:9f:e4:5c:1e:ca:
                    39:44:34:47:7b:a9:8a:14:11:b0:d3:37:2f:d0:f4:
                    09:db:97:fd:e2:1d:66:02:b3:17:94:c5:19:6a:1a:
                    7f:ec:0b:de:3b:ce:13:db:94:a8:14:cc:e1:ec:0c:
                    2e:58:50:0c:d2:5a:7b:74:ae:48:11:9d:86:c2:85:
                    5b:d5:96:1b:ba:b5:5d:d2:48:af:c3:3f:b4:41:a0:
                    62:d6:85:c5:27:08:a8:45:a0:ff:4b:a5:fc:91:14:
                    8f:37:e4:97:ea:9e:3d:9c:03:35:8d:68:8a:61:9b:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2C:06:E9:23:B5:B1:ED:42:1D:E5:1B:B6:C1:AC:8D:50:59:FD:71
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ywG6SO1se1CHeUbtsGsjVBZ_XE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:f7:bf:ba:2f:f0:45:32:48:0f:75:a6:31:81:28:23:ea:
         46:80:af:3c:7d:c9:6b:98:01:de:31:8b:79:68:c5:50:26:06:
         0c:b0:9c:9f:27:a9:29:e0:fb:94:b8:5e:da:0a:cb:2a:9c:6b:
         e5:f5:67:d3:7a:05:d5:c3:36:a5:cb:51:f1:c1:68:f1:89:e3:
         7b:fe:7f:f8:f0:ee:ab:87:b7:d3:dd:66:ca:86:d5:68:87:c6:
         d0:5a:12:07:f6:36:4e:f3:6e:e2:42:63:04:b9:e2:94:19:70:
         49:71:ad:9c:98:08:81:75:d1:55:cc:b4:74:85:5b:74:25:48:
         90:bc:3b:d6:8a:db:50:4a:9b:ee:9c:61:e7:aa:0d:70:11:33:
         47:6e:bc:09:e0:6d:4d:73:e1:b2:45:4e:83:bb:87:49:4a:72:
         db:8e:82:1a:e0:c5:29:d0:cf:1e:a4:49:e8:be:4e:18:4d:8e:
         71:2f:18:d0:34:72:fa:72:0a:db:d1:0b:23:8c:96:82:70:14:
         ce:d5:de:50:d8:9a:ca:6d:8b:79:87:b9:d9:1a:88:db:a9:0b:
         e3:e2:c7:76:2d:b2:f8:45:f9:64:19:89:65:c7:3e:aa:b6:d0:
         cf:53:c6:0d:15:55:bf:b3:0b:5b:bd:cb:a2:87:c3:af:8d:f1:
         be:ab:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:45 2026 by rpki-client