Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ECP2M8X0gF0iFodpWikVlLPBcEk.roa
File:                     ECP2M8X0gF0iFodpWikVlLPBcEk.roa (raw, json)
Hash identifier:          hilOkgUIDva3iRJ1lMqkwbI6XYFMxUEopo6GidMatGI=
Subject key identifier:   10:23:F6:33:C5:F4:80:5D:22:16:87:69:5A:29:15:94:B3:C1:70:49
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13BE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ECP2M8X0gF0iFodpWikVlLPBcEk.roa
Signing time:             Tue 31 Mar 2026 07:56:12 +0000
ROA not before:           Tue 31 Mar 2026 07:56:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5054 (0x13be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1023F633C5F4805D221687695A291594B3C17049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:ea:1d:2c:c7:4e:98:91:c7:1d:21:85:77:
                    14:75:b1:3b:f0:5f:2c:ba:50:b3:16:36:62:e3:46:
                    e9:e8:cc:f9:2c:bf:d4:d9:a0:10:d7:a4:08:c2:fb:
                    23:9a:68:c1:85:f2:25:26:c7:8d:4c:5b:49:72:09:
                    21:c1:23:e5:82:a5:60:d2:df:51:3b:f1:be:97:8e:
                    d5:5b:fa:22:4b:ad:25:eb:3e:ec:aa:83:4b:1d:eb:
                    6e:8a:74:22:fe:d9:e4:18:8a:b3:eb:96:e8:77:8d:
                    51:0d:62:39:c6:d0:08:93:a1:02:58:a5:66:54:3d:
                    9c:ae:c6:48:38:eb:c2:69:0e:82:d5:56:98:18:b2:
                    82:40:ca:56:b0:c1:7c:4e:4d:67:f3:30:7f:ae:c7:
                    38:2f:a6:9a:c0:75:48:ee:30:93:97:f8:36:5f:86:
                    fd:a3:57:70:00:65:fa:42:0a:ae:6d:4c:c4:a1:dd:
                    48:7b:f1:7c:4a:14:29:de:a7:b8:30:fe:27:4d:32:
                    04:18:53:46:8e:fe:e9:a3:a9:b4:4a:53:f7:eb:83:
                    8b:27:13:ef:25:8d:52:da:93:d5:e3:4d:12:c8:78:
                    13:38:f2:46:91:1d:a5:ee:a4:13:0b:39:f4:9c:fe:
                    35:90:b9:15:8d:15:49:06:af:08:0a:a6:30:98:12:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:F6:33:C5:F4:80:5D:22:16:87:69:5A:29:15:94:B3:C1:70:49
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ECP2M8X0gF0iFodpWikVlLPBcEk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:78:48:69:cc:c1:34:0f:b7:b7:6c:3c:37:f0:a2:ec:1b:
         82:39:55:57:2b:a8:dd:69:bc:99:f5:a1:61:c1:fc:19:a8:28:
         ac:80:fc:5a:e7:ce:1a:f2:1c:85:e0:b8:f1:ba:c7:c7:9a:ca:
         b7:b2:f2:68:87:c2:01:19:d6:44:48:f4:bf:86:2c:d5:ee:f8:
         c8:0e:f1:00:1d:c7:b0:8b:54:84:b0:71:3f:d7:21:c1:91:05:
         4e:22:d5:59:88:de:49:12:0f:fa:37:5f:2e:36:91:10:83:6e:
         92:55:d2:a7:f8:86:c3:3c:0f:02:31:ba:25:23:93:a0:a7:35:
         49:f6:c4:cb:3e:30:b6:4c:f3:38:b7:3c:42:1a:30:94:ee:90:
         cb:05:f1:a0:c8:91:c4:0c:d6:3c:3d:a4:f9:92:61:76:d6:09:
         20:09:74:cc:fa:8a:b0:d8:d5:79:4e:0a:d1:ba:05:87:5b:e7:
         6f:76:c9:22:f0:87:3b:30:85:94:90:cf:40:1a:d5:6b:da:ea:
         3c:9e:63:a4:73:0f:1d:9c:46:00:69:f2:f5:38:4a:02:05:8e:
         01:2f:ec:1d:37:65:73:0f:bf:75:e5:5e:95:d1:49:ba:dd:d8:
         89:b3:a5:17:24:b9:ab:23:48:ee:17:17:bc:0c:72:87:55:9a:
         f1:c0:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:04 2026 by rpki-client