Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExpU0c-aLUFF4ZhMST77ki_MFew.roa
File:                     ExpU0c-aLUFF4ZhMST77ki_MFew.roa (raw, json)
Hash identifier:          LMfeXEW1J7ZJtorfLPNP67tX78HCmuCALh3lAomQM9I=
Subject key identifier:   13:1A:54:D1:CF:9A:2D:41:45:E1:98:4C:49:3E:FB:92:2F:CC:15:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       15DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExpU0c-aLUFF4ZhMST77ki_MFew.roa
Signing time:             Tue 31 Mar 2026 08:00:34 +0000
ROA not before:           Tue 31 Mar 2026 08:00:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5597 (0x15dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:00:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=131A54D1CF9A2D4145E1984C493EFB922FCC15EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:90:ef:96:f5:61:e7:9a:ef:45:94:12:d9:
                    fb:83:a1:ee:54:84:30:7a:88:6e:ef:14:a9:df:46:
                    d6:bc:55:09:d6:eb:28:20:d0:9f:0a:f7:42:6c:8d:
                    b9:ca:3a:03:7e:59:c8:8b:ed:18:b6:4e:d1:ec:80:
                    9b:f1:4f:44:fa:44:56:4e:8f:e0:30:dd:5b:51:f6:
                    86:46:46:57:72:ff:39:86:3a:59:35:06:c0:ce:9a:
                    e3:1c:ba:66:33:2e:7f:77:89:06:29:4f:17:b8:57:
                    48:7b:aa:fd:23:2d:df:cc:2e:a4:6d:8e:b1:40:a3:
                    ee:7a:60:23:f3:51:9d:94:bc:2e:81:37:d2:7f:5e:
                    cc:b0:7d:31:07:db:59:14:29:82:3b:fd:24:00:ad:
                    37:c5:75:3c:18:fb:18:43:50:64:92:d9:18:ed:b7:
                    e2:4d:ba:8e:68:f2:f1:07:cd:16:7e:8c:41:b2:cd:
                    eb:9e:5f:25:db:54:fc:84:cd:3a:dd:09:b1:d2:63:
                    f9:9a:49:31:44:da:e4:50:ab:98:f5:af:dc:8d:ec:
                    13:51:a9:7d:2d:ba:63:f9:78:96:de:05:44:15:c4:
                    d3:aa:b8:8d:9f:45:ad:4c:9a:ca:aa:2a:d6:e0:26:
                    1d:ba:a5:cc:b3:21:bb:30:76:2d:63:a5:08:78:c4:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:54:D1:CF:9A:2D:41:45:E1:98:4C:49:3E:FB:92:2F:CC:15:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ExpU0c-aLUFF4ZhMST77ki_MFew.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:0f:61:cc:f1:e8:a1:36:1d:81:9a:29:90:19:02:74:9f:bf:
         6a:06:6f:da:5e:85:88:dc:fe:fa:92:6c:15:2a:e5:d9:36:ac:
         9d:78:b9:6c:a1:46:77:8a:17:59:e2:75:53:ae:43:55:dc:89:
         e4:09:23:9e:c2:e6:0a:07:7a:7f:cb:dc:a4:55:d8:75:fd:55:
         4f:63:77:69:c8:84:e3:32:a1:4c:0d:bf:b1:3c:75:9d:2d:e1:
         8a:d2:71:7c:09:70:c3:94:12:fb:c7:49:98:e9:cc:17:81:24:
         b9:40:27:38:5f:df:9f:eb:ac:95:28:fd:1a:ea:14:9d:ff:51:
         60:df:7e:f2:fa:1f:2e:f0:8c:f7:64:4f:5d:ee:d5:d9:8d:a2:
         97:92:67:37:3d:d6:fc:1a:44:ed:d3:33:bf:af:dd:1e:e0:7b:
         54:68:e5:92:a9:75:aa:19:c7:a7:06:50:12:9e:a6:62:f5:0d:
         fe:a2:8d:82:bb:36:15:ee:bd:ad:9c:9f:36:a1:fa:b7:59:6b:
         56:83:38:ab:24:01:e6:74:17:e6:e2:e8:bf:6a:13:fb:d3:23:
         3c:a7:97:cb:e7:25:ad:0c:8f:4e:6e:8a:a9:2c:25:07:cc:08:
         d8:4b:17:cb:ee:5d:0e:19:79:fd:17:6b:89:cc:45:2d:f2:57:
         6e:08:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:05 2026 by rpki-client