Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8AHQPqd_YGryVu1pxxIqI2e1WLE.roa
File:                     8AHQPqd_YGryVu1pxxIqI2e1WLE.roa (raw, json)
Hash identifier:          XoM4i1itF6Nu9dKXEA5XOVHbrj31SOZ7IFNOKV0aPls=
Subject key identifier:   F0:01:D0:3E:A7:7F:60:6A:F2:56:ED:69:C7:12:2A:23:67:B5:58:B1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14EA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8AHQPqd_YGryVu1pxxIqI2e1WLE.roa
Signing time:             Tue 31 Mar 2026 07:58:32 +0000
ROA not before:           Tue 31 Mar 2026 07:58:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5354 (0x14ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F001D03EA77F606AF256ED69C7122A2367B558B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:08:a8:1f:62:e3:2c:0a:95:bb:d0:8b:e0:
                    28:a6:ea:db:58:41:a2:86:32:7e:0a:ef:ad:b2:52:
                    b0:bf:a2:e2:44:91:05:7d:5b:57:11:7e:0f:0f:6c:
                    69:57:15:59:d2:1a:e7:8e:07:31:9e:e8:8b:c7:6d:
                    c5:20:bb:e2:d6:98:d1:5c:45:40:c4:bf:cb:59:49:
                    6b:a8:eb:3a:2e:4d:08:1a:db:d8:4c:d4:90:b7:d9:
                    dd:50:7e:07:f4:68:67:8b:3d:4a:ee:a5:8b:83:0a:
                    b3:7b:c0:3a:17:c3:84:6c:dd:d8:f6:04:c0:c2:bb:
                    49:68:1a:3d:22:df:da:20:34:62:db:9d:0c:b3:06:
                    5f:52:ee:93:21:4a:e7:a5:ac:29:b4:60:fc:4b:d6:
                    1c:b8:bd:d7:27:3a:e3:f2:67:69:30:23:8d:91:1e:
                    82:61:1f:5e:d8:7b:fe:2e:c3:c6:b6:16:02:24:c4:
                    39:ae:ce:f5:f8:c2:bc:08:c5:a5:ac:8f:19:4f:a0:
                    5a:b4:ac:0c:25:0d:7d:99:98:2e:5e:dc:93:53:3f:
                    cc:f0:22:e4:8b:9e:e3:48:36:30:12:3b:27:42:92:
                    0e:65:2a:4c:67:0f:d1:21:27:d2:d7:30:60:f6:fa:
                    29:83:ed:f7:cd:08:ee:8d:6c:4c:1f:fb:7d:28:7d:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:01:D0:3E:A7:7F:60:6A:F2:56:ED:69:C7:12:2A:23:67:B5:58:B1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8AHQPqd_YGryVu1pxxIqI2e1WLE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0e:29:84:01:22:5d:7e:6e:f9:92:5d:c4:a4:e9:0d:0f:a0:f1:
         6d:c1:6d:06:7c:ee:03:eb:21:76:ac:df:96:bc:ca:88:42:28:
         ac:29:59:7b:e6:5f:85:e7:c1:b5:3d:6e:ee:b8:da:e4:b5:7f:
         1b:df:69:42:9c:77:e2:6a:a5:23:6e:29:c2:37:5f:ae:b9:27:
         51:03:20:cc:1d:70:50:2d:98:c8:10:44:f8:85:65:ad:6b:b7:
         33:9e:10:76:01:c3:64:c5:d0:22:dc:db:d8:ad:53:21:fa:8c:
         64:ef:7b:b3:7c:fb:dc:91:b7:6a:7d:24:aa:a0:fd:48:ac:62:
         00:19:7d:46:98:7a:59:f8:b1:a1:77:07:44:5f:63:55:30:15:
         08:bd:3e:85:1b:28:93:d0:0a:73:79:5b:ba:24:e2:8c:bb:a1:
         7b:f4:45:9d:56:f4:0a:dd:ba:3e:71:c3:51:f3:cb:8f:d0:58:
         c9:8b:4a:8d:0c:ee:dd:7c:dd:fb:32:38:79:7d:b5:af:3f:bd:
         00:66:ba:b7:0f:81:92:82:1b:26:77:d2:46:b0:6f:dc:2a:d7:
         cc:d8:6a:c3:65:3b:4b:ab:0f:41:56:47:9d:53:8f:2b:c0:0b:
         58:4b:a1:01:82:73:63:42:06:11:59:18:a5:e5:ef:a9:eb:ec:
         a4:75:d0:9b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICFOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
NzU4MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYwMDFEMDNFQTc3RjYw
NkFGMjU2RUQ2OUM3MTIyQTIzNjdCNTU4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOwgioH2LjLAqVu9CL4Cim6ttYQaKGMn4K762yUrC/ouJEkQV9
W1cRfg8PbGlXFVnSGueOBzGe6IvHbcUgu+LWmNFcRUDEv8tZSWuo6zouTQga29hM
1JC32d1Qfgf0aGeLPUrupYuDCrN7wDoXw4Rs3dj2BMDCu0loGj0i39ogNGLbnQyz
Bl9S7pMhSuelrCm0YPxL1hy4vdcnOuPyZ2kwI42RHoJhH17Ye/4uw8a2FgIkxDmu
zvX4wrwIxaWsjxlPoFq0rAwlDX2ZmC5e3JNTP8zwIuSLnuNINjASOydCkg5lKkxn
D9EhJ9LXMGD2+imD7ffNCO6NbEwf+30ofYeBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8AHQPqd/YGryVu1pxxIqI2e1WLEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5LzhBSFFQcWRfWUdyeVZ1MXB4eElxSTJlMVdMRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcxZ4AwDQYJKoZIhvcNAQELBQADggEB
AA4phAEiXX5u+ZJdxKTpDQ+g8W3BbQZ87gPrIXas35a8yohCKKwpWXvmX4XnwbU9
bu642uS1fxvfaUKcd+JqpSNuKcI3X665J1EDIMwdcFAtmMgQRPiFZa1rtzOeEHYB
w2TF0CLc29itUyH6jGTve7N8+9yRt2p9JKqg/UisYgAZfUaYeln4saF3B0RfY1Uw
FQi9PoUbKJPQCnN5W7ok4oy7oXv0RZ1W9Arduj5xw1Hzy4/QWMmLSo0M7t183fsy
OHl9ta8/vQBmurcPgZKCGyZ30kawb9wq18zYasNlO0urD0FWR51TjyvAC1hLoQGC
c2NCBhFZGKXl76nr7KR10Js=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:10 2026 by rpki-client