Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9LMNkYj3nuCxNRmkGKaGySJ8doY.roa
File:                     9LMNkYj3nuCxNRmkGKaGySJ8doY.roa (raw, json)
Hash identifier:          jSchTGMd1lkYuXqizS/g8mxnG3L4rxhYX0ljGAJnr8A=
Subject key identifier:   F4:B3:0D:91:88:F7:9E:E0:B1:35:19:A4:18:A6:86:C9:22:7C:76:86
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1646
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9LMNkYj3nuCxNRmkGKaGySJ8doY.roa
Signing time:             Tue 31 Mar 2026 08:01:30 +0000
ROA not before:           Tue 31 Mar 2026 08:01:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5702 (0x1646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F4B30D9188F79EE0B13519A418A686C9227C7686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:db:5a:64:9f:ee:93:b5:c9:0f:c4:f9:4d:
                    6d:c3:07:ba:d2:1b:1e:20:74:23:70:00:9d:44:2b:
                    3e:4a:09:0f:60:48:00:4d:4b:98:3a:52:09:4c:b9:
                    6a:43:aa:07:20:01:1b:e3:c8:23:98:6c:4d:4c:2a:
                    66:7b:c6:0d:90:15:19:70:bd:13:37:60:4c:f6:06:
                    30:19:78:dd:f3:19:33:a4:04:ff:d5:1b:db:63:84:
                    a9:e2:d7:89:1b:86:1d:50:90:c8:2d:5f:ce:94:fe:
                    db:a5:cf:6b:6c:e6:5a:0d:7a:5e:e9:ba:9d:e2:19:
                    42:b9:da:a0:f3:be:3d:1c:14:07:4b:45:8b:84:a2:
                    8f:f3:5c:40:4f:83:1c:1b:f4:f6:68:0b:b5:c0:e5:
                    32:24:4e:dc:2a:01:c5:c6:33:55:bc:2a:ed:b0:2d:
                    73:e9:81:21:d5:09:d9:6e:64:9d:c6:b4:17:dd:f5:
                    42:98:d2:1b:e6:14:38:28:21:fe:02:d3:56:24:a5:
                    ce:80:ea:42:3e:28:cb:96:0a:d1:9d:94:c5:3b:5c:
                    05:84:b3:99:30:9e:f1:c2:b0:79:33:8b:67:39:c2:
                    d2:4c:5d:3f:0f:11:59:91:4c:a8:cf:e5:36:f3:e1:
                    d3:8e:0f:2d:68:8c:05:f8:2a:83:3e:94:fb:ce:b1:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:0D:91:88:F7:9E:E0:B1:35:19:A4:18:A6:86:C9:22:7C:76:86
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9LMNkYj3nuCxNRmkGKaGySJ8doY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:41:4b:b4:b9:bd:f0:41:28:e6:dd:6e:c4:a4:14:7c:37:
         77:43:1d:2a:a2:a0:46:f4:c6:e9:a7:96:2e:27:6c:cb:56:63:
         2b:84:a6:f7:f4:5c:ae:9a:82:01:15:eb:6b:2a:5e:2f:c5:57:
         f3:6f:43:ec:a6:70:43:b1:42:d2:8d:11:9f:5d:a1:a4:15:16:
         64:82:c5:80:c5:ff:37:1f:6e:7c:b1:f9:1a:df:c0:55:5e:00:
         df:dd:9c:9e:a8:62:8a:54:f1:0d:1d:87:7e:b3:0b:c9:27:76:
         2a:46:f4:ed:cf:b6:53:f7:05:7d:a4:1d:1e:db:0b:ea:34:5b:
         f2:04:67:65:29:7a:7d:aa:bb:9d:2f:39:07:7b:35:35:23:a7:
         11:5c:91:e0:31:76:68:7b:f5:cc:8e:97:84:59:34:52:da:7b:
         93:ea:12:25:07:c3:03:fe:41:d6:29:cc:7e:0c:e2:40:47:00:
         08:54:7c:ef:b6:c1:2a:9c:0e:ca:1b:3e:d7:b4:22:8e:41:a1:
         42:99:fb:22:c7:41:c6:b3:30:20:1f:79:5f:50:69:08:64:55:
         03:1f:87:2d:d4:32:de:df:13:d9:b0:d9:b1:30:9f:bb:97:0a:
         3e:20:9d:05:77:a3:75:94:64:f4:d0:e5:39:8b:15:40:e3:1b:
         e5:c0:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:40 2026 by rpki-client