Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JjpDapXbASp1QUwLsv-gOOnLXwk.roa
File:                     JjpDapXbASp1QUwLsv-gOOnLXwk.roa (raw, json)
Hash identifier:          WlHARGmCSpUqFikESCtUA6Mjqrb6MOWOhzRUmzjMnk4=
Subject key identifier:   26:3A:43:6A:95:DB:01:2A:75:41:4C:0B:B2:FF:A0:38:E9:CB:5F:09
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JjpDapXbASp1QUwLsv-gOOnLXwk.roa
Signing time:             Tue 31 Mar 2026 07:56:37 +0000
ROA not before:           Tue 31 Mar 2026 07:56:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5109 (0x13f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=263A436A95DB012A75414C0BB2FFA038E9CB5F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:b1:78:63:a0:b1:2b:0e:55:ff:e6:ba:1b:
                    05:c0:58:80:96:47:34:39:ca:9c:45:64:e7:94:12:
                    bb:cd:ea:8e:b2:ab:34:ad:68:72:ab:03:03:bc:93:
                    0a:cb:f8:4a:a6:0f:9e:9f:68:fe:f5:d8:47:67:69:
                    40:a5:5d:dd:9d:ff:52:91:87:2d:c9:de:23:06:3a:
                    fa:81:ae:ec:73:b2:5b:0d:dd:ad:27:d8:84:13:d2:
                    76:6f:c6:89:25:0d:d9:c4:33:84:c3:9f:82:80:18:
                    4a:d0:1c:e6:a8:72:4a:b9:71:de:2a:d9:70:bf:f3:
                    70:10:7c:d8:16:3d:1a:a2:03:47:d9:bf:c1:23:c4:
                    fc:57:57:fc:34:9a:1f:af:de:76:b3:fe:f7:3d:ff:
                    d1:61:b0:7f:28:62:dc:68:b5:f9:de:f4:fd:c5:1a:
                    64:93:04:61:19:d6:b4:04:88:ce:f3:c6:bd:0f:08:
                    37:e3:c2:c5:70:57:9d:bb:c6:59:d3:af:e6:2f:c5:
                    d4:f8:9c:8a:f7:69:f7:b7:15:67:8b:e9:1c:48:8a:
                    16:f4:bf:b5:81:8e:0c:8f:bf:f9:ca:4f:7d:74:c3:
                    5b:58:11:63:34:39:19:72:77:2c:8b:e3:50:81:49:
                    8b:fd:3b:f3:9a:2c:5f:77:e5:10:3f:de:dd:89:79:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:43:6A:95:DB:01:2A:75:41:4C:0B:B2:FF:A0:38:E9:CB:5F:09
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JjpDapXbASp1QUwLsv-gOOnLXwk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:b5:65:96:12:69:18:2c:25:d9:ab:1e:4c:59:5f:1c:19:
         bb:bd:68:a0:9b:c3:38:07:8a:2b:7a:9e:e6:ee:c8:c1:2c:e0:
         20:c7:1b:70:79:36:1c:ac:20:62:22:e9:cb:e2:aa:b5:50:c1:
         c4:08:32:a6:77:f6:e0:cf:83:0f:aa:cb:4f:dc:84:20:aa:48:
         ec:8d:fc:95:9f:29:6a:1b:cc:71:9e:a1:ab:4d:0e:30:f8:b4:
         e1:99:2c:0a:5b:ab:cc:a9:af:d6:4f:3e:41:7c:fc:75:60:7a:
         21:a1:df:d0:eb:6e:32:d2:69:51:77:6e:d8:16:0f:a7:f1:7d:
         2c:e6:b8:b7:9a:19:bb:09:f0:d1:cd:b1:f5:ab:38:8e:29:b0:
         71:a0:1f:39:70:71:42:85:52:b5:d6:f8:1b:e0:09:78:ff:2a:
         45:5f:e9:6d:7a:ed:bf:98:0d:38:3c:b5:58:d6:25:58:b1:18:
         60:70:83:fa:f9:f6:df:60:94:d2:31:cb:16:ff:cc:38:ae:b4:
         32:04:e1:d1:49:82:27:9b:e0:1b:73:83:a1:72:22:df:56:d0:
         ca:32:f8:f8:ad:d3:02:da:60:fc:08:dd:2e:70:f5:a6:ee:83:
         23:74:8f:83:f9:1d:e2:84:c2:a6:94:b0:ca:ca:ba:8a:9a:60:
         69:99:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:52 2026 by rpki-client