Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9_r1PGcIUDMogIcMmsgjY4ZzdnQ.roa
File:                     9_r1PGcIUDMogIcMmsgjY4ZzdnQ.roa (raw, json)
Hash identifier:          9qyZgRudmIndBE1hH6MwU7BX0UJkJwlqgdMZf4A2uFU=
Subject key identifier:   F7:FA:F5:3C:67:08:50:33:28:80:87:0C:9A:C8:23:63:86:73:76:74
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1397
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9_r1PGcIUDMogIcMmsgjY4ZzdnQ.roa
Signing time:             Tue 31 Mar 2026 07:55:54 +0000
ROA not before:           Tue 31 Mar 2026 07:55:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5015 (0x1397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F7FAF53C670850332880870C9AC8236386737674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:f4:6c:34:93:de:21:50:a4:68:f4:36:88:
                    12:2c:e2:8e:53:e0:29:4a:7d:59:01:b5:b2:9b:7f:
                    d7:05:c4:48:62:5b:98:7f:b6:31:93:3b:c1:f7:fc:
                    02:1d:22:bb:b9:42:02:4a:49:83:c2:74:61:60:60:
                    c8:90:bc:3c:ea:57:2a:b3:10:07:40:59:4f:83:16:
                    8b:de:b6:39:dd:a7:49:86:a4:ac:9e:85:6b:6c:8f:
                    ef:f2:af:b1:b6:69:bd:04:2d:af:27:00:31:53:e9:
                    ee:ce:78:fa:35:2d:6e:f3:03:1d:e1:48:c7:2a:78:
                    89:19:d9:b2:38:f8:f4:64:06:43:f4:11:2c:f6:6a:
                    5a:62:16:2c:ee:8f:6b:21:d3:ae:7b:49:64:a2:5f:
                    27:f3:15:9b:5b:32:49:6c:1d:72:c0:9c:db:5e:7c:
                    0b:4a:dd:97:fd:9e:7f:bc:e3:83:fb:52:86:29:55:
                    0a:b9:7f:bb:17:8a:88:5a:b4:dd:92:df:57:56:9d:
                    20:35:de:a9:29:2d:0c:0e:84:32:94:9f:59:79:f6:
                    cb:81:40:58:90:e6:11:65:17:ee:3d:ca:ac:8e:9b:
                    b3:b7:2b:b5:8b:d8:99:9d:b4:19:fd:71:82:57:47:
                    ed:04:60:4f:44:e3:29:df:93:9d:01:f9:af:c3:62:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FA:F5:3C:67:08:50:33:28:80:87:0C:9A:C8:23:63:86:73:76:74
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9_r1PGcIUDMogIcMmsgjY4ZzdnQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:49:63:c2:bf:7d:53:d4:89:7a:49:f6:72:fb:b4:81:68:a4:
         d8:2e:a2:32:29:be:81:e1:61:59:51:b8:38:a6:31:f0:b0:f4:
         ba:fa:2d:75:fc:fa:6a:60:67:34:e8:0e:09:2e:29:74:ba:69:
         e7:1d:f9:7e:5e:b2:bc:98:bc:95:1a:00:ea:91:3e:da:ae:f9:
         ba:67:ac:cd:e5:37:63:f6:de:d8:6b:77:2b:75:d8:10:d7:e4:
         cf:9b:22:c1:83:80:a8:59:79:34:ba:18:4a:1e:3c:ad:88:02:
         25:1b:14:af:2b:2d:82:23:df:35:b1:7c:fa:a6:99:d2:05:12:
         6a:8c:ad:be:c3:db:f9:08:1c:a0:f1:69:d6:d9:95:77:00:80:
         89:ae:b1:f1:e7:3a:a7:77:fb:4e:e6:5c:dd:1d:df:62:5b:96:
         b2:53:f1:d5:a9:0d:ef:5d:96:39:cd:8d:e4:84:48:ea:0a:5e:
         af:94:52:cf:f8:7a:b8:b8:16:92:7e:7f:9e:d9:57:8c:25:e7:
         d1:ff:ad:ca:43:c5:39:74:ec:d6:76:ee:86:55:3a:44:4e:ad:
         c3:29:0c:68:77:0e:7a:b3:60:db:34:02:1c:09:05:04:e2:d5:
         b0:2a:90:fe:6a:e2:42:8d:16:a6:db:40:93:14:45:9c:6e:1a:
         3e:1d:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:00 2026 by rpki-client