Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/70txW8eYhVA6vY7bygfE_GDcG8k.roa
File:                     70txW8eYhVA6vY7bygfE_GDcG8k.roa (raw, json)
Hash identifier:          wezFRPuakwoFN1XaKpzcCW9snUYvF4i9kmCsAcjr2h0=
Subject key identifier:   EF:4B:71:5B:C7:98:85:50:3A:BD:8E:DB:CA:07:C4:FC:60:DC:1B:C9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1827
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/70txW8eYhVA6vY7bygfE_GDcG8k.roa
Signing time:             Tue 31 Mar 2026 08:05:23 +0000
ROA not before:           Tue 31 Mar 2026 08:05:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6183 (0x1827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EF4B715BC79885503ABD8EDBCA07C4FC60DC1BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:ca:92:b8:f2:be:7a:bd:94:19:39:0b:af:
                    bd:b6:97:bf:1c:d9:9c:56:78:6f:e1:2c:bd:d1:e4:
                    e5:dc:5d:3d:ff:31:40:6f:50:59:31:a0:a2:8f:25:
                    eb:ce:80:49:d0:2a:bf:99:7b:43:1b:70:59:b4:7a:
                    63:76:58:1e:57:68:fc:6e:36:de:c4:7c:2f:7f:b2:
                    d9:a8:6f:25:c6:5b:cb:b6:e6:27:70:6d:e2:15:cd:
                    c8:b0:15:12:a2:2e:8c:ee:4b:ee:44:3b:c0:43:81:
                    53:bd:23:50:05:34:8f:3f:0c:92:dc:ce:f8:47:dc:
                    b3:a2:e9:65:88:5b:1a:a9:ad:a9:6e:c2:97:cf:93:
                    2c:86:7a:aa:c7:0d:83:bb:a1:c4:b3:1e:7e:92:cb:
                    3a:07:91:96:85:7a:49:9c:c2:cd:8e:7d:ac:d1:50:
                    c6:ca:7f:49:44:5d:d6:25:91:8f:4d:24:33:f2:ac:
                    47:45:88:5a:d1:6f:a7:eb:ef:8b:18:73:23:12:a7:
                    24:f1:3a:c0:ea:78:e8:f8:03:ed:8b:06:d2:33:a7:
                    bb:87:f3:05:e2:9f:17:92:45:62:37:00:12:c4:e0:
                    35:41:80:28:47:25:f1:1a:6b:e7:df:ec:bf:a4:53:
                    ac:3b:1a:bb:0a:e5:01:80:5d:9c:6d:75:73:7a:9b:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:71:5B:C7:98:85:50:3A:BD:8E:DB:CA:07:C4:FC:60:DC:1B:C9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/70txW8eYhVA6vY7bygfE_GDcG8k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:ba:f8:b3:c0:2b:e2:37:fa:37:90:b0:2b:fe:9a:96:8d:
         0d:d0:0d:e4:be:3b:02:d3:8f:b3:61:b3:67:76:c8:38:17:80:
         bf:3e:cd:9f:d3:50:c6:69:d8:ad:fe:24:54:49:54:a9:f3:7d:
         a6:75:b7:ef:6b:97:48:5c:38:88:48:b1:14:e4:4a:6b:dc:4d:
         61:d2:08:bc:32:9f:1b:ec:ba:a5:a8:16:63:70:98:2b:92:4f:
         d3:4a:52:74:11:e0:17:30:ec:0e:f7:59:bf:4c:05:ad:dd:0b:
         46:18:b7:36:7d:3f:1f:5d:d4:6f:27:c4:45:8c:8b:c0:2c:67:
         29:56:47:cd:60:20:8f:64:6b:49:75:db:54:01:0e:ae:22:33:
         a2:a2:35:71:15:a2:6f:24:06:ec:94:66:63:4f:50:3d:d1:00:
         6c:3b:5a:52:d9:51:2a:02:4b:5c:00:4c:87:b8:c3:c1:cb:d8:
         ac:68:b6:68:87:82:2f:dc:d3:aa:55:fe:5d:3a:c2:04:09:91:
         97:1f:a1:ef:a1:0d:ed:4d:64:25:ab:5b:89:09:d2:a8:c5:49:
         6e:80:a0:81:73:76:42:d0:08:e9:f4:77:21:8c:12:b8:d7:3e:
         35:da:ef:89:48:25:69:b6:f3:aa:c7:68:b1:17:2e:12:38:07:
         6f:b4:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:38 2026 by rpki-client