Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYzanlKGQ9304bfNYtv_qA-CSko.roa
File:                     DYzanlKGQ9304bfNYtv_qA-CSko.roa (raw, json)
Hash identifier:          Tp6paMj7SrkjrcciXgfgGEvUgfwdKPo9FQlnwDkMnZU=
Subject key identifier:   0D:8C:DA:9E:52:86:43:DD:F4:E1:B7:CD:62:DB:FF:A8:0F:82:4A:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16D2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYzanlKGQ9304bfNYtv_qA-CSko.roa
Signing time:             Tue 31 Mar 2026 08:02:34 +0000
ROA not before:           Tue 31 Mar 2026 08:02:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.74.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5842 (0x16d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0D8CDA9E528643DDF4E1B7CD62DBFFA80F824A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:b1:37:7f:cd:39:53:3f:98:e1:f2:6f:0d:
                    4f:cf:2c:0c:21:8b:f1:22:f3:0e:cf:14:58:ed:1e:
                    90:d2:52:52:73:ba:60:e4:ef:52:f2:e4:1a:41:0f:
                    d9:d9:fb:fa:58:f5:46:4b:44:55:52:a9:ae:8c:98:
                    62:d3:fc:86:59:0b:19:23:e0:3e:82:12:1a:88:ef:
                    24:8a:bb:32:52:7c:48:8f:d3:86:4e:73:d0:b1:2a:
                    1e:d7:2c:43:3d:2b:0a:cb:0f:2a:98:a3:8d:e0:06:
                    db:02:d1:86:25:fa:a1:3e:eb:8c:3c:3b:80:b2:4d:
                    0d:fb:e9:6f:a3:f4:41:9b:a6:88:94:54:c2:6b:22:
                    aa:37:df:20:95:89:d0:d8:20:bb:28:13:0a:3a:ce:
                    8a:a9:0b:38:04:3e:7b:0c:c2:59:7b:98:c0:b2:f8:
                    01:c5:4f:47:c4:58:a3:78:d2:c4:7e:cd:ae:07:b7:
                    ea:83:7b:0a:bb:d9:e9:03:69:b4:b6:d7:39:1b:b2:
                    5b:3b:72:4e:83:99:ac:e0:80:84:53:04:9b:d9:0b:
                    8f:af:88:4e:da:27:80:fd:f9:ea:ed:3f:71:f6:99:
                    d3:12:cc:ff:ab:74:59:e9:3f:47:57:08:28:5f:97:
                    6f:71:80:87:3e:91:4a:fd:d6:23:bd:c3:44:c3:40:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8C:DA:9E:52:86:43:DD:F4:E1:B7:CD:62:DB:FF:A8:0F:82:4A:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DYzanlKGQ9304bfNYtv_qA-CSko.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:4d:55:15:a9:ab:9d:fb:60:82:4a:bf:a4:71:6d:ac:a8:
         c4:07:12:41:98:9c:cd:80:be:03:f1:c6:25:ca:3d:14:b1:a5:
         4f:a2:62:56:11:81:eb:b0:10:d3:64:8b:af:fd:3f:a0:f1:a5:
         af:18:1a:c6:93:38:ab:1d:dd:24:93:cd:26:b8:4b:3c:34:ee:
         b2:96:b0:8f:18:26:8c:1e:5c:4e:e9:21:41:f7:80:5c:a7:90:
         60:6e:76:17:2d:5f:45:f5:4f:fe:a9:f9:ae:de:d7:9f:a7:f4:
         21:36:df:5b:8f:18:82:3a:ad:d6:db:b5:dc:cb:70:c4:82:6c:
         49:04:bc:7f:e7:99:81:7e:1e:8f:57:0b:a0:23:9a:e0:13:a1:
         75:ea:4a:d7:63:c0:12:bf:f9:3e:4e:d7:0a:dd:40:8e:fe:41:
         0b:11:c9:2d:39:1e:ce:40:26:e8:5e:eb:61:10:5f:7d:fc:d6:
         26:1a:7f:a8:2b:07:8e:39:13:b6:6a:64:49:62:b6:63:05:ac:
         27:2d:05:04:c7:48:fa:af:35:71:49:75:a4:b1:83:e8:d0:6b:
         25:18:39:48:b8:6e:a0:a7:e0:b0:46:31:fb:cc:32:25:d8:65:
         9e:92:2e:b2:25:d4:bb:6a:2a:38:fe:84:27:67:fd:ac:c9:0f:
         8e:b4:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:31 2026 by rpki-client