Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeWLRYE0aMZZXPZ1K2oK_tSWvHM.roa
File:                     NeWLRYE0aMZZXPZ1K2oK_tSWvHM.roa (raw, json)
Hash identifier:          sV/BhMyuhnoz1WJxJePXkXonPvRTeGwJwKGniyTUbwQ=
Subject key identifier:   35:E5:8B:45:81:34:68:C6:59:5C:F6:75:2B:6A:0A:FE:D4:96:BC:73
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13CB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeWLRYE0aMZZXPZ1K2oK_tSWvHM.roa
Signing time:             Tue 31 Mar 2026 07:56:18 +0000
ROA not before:           Tue 31 Mar 2026 07:56:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5067 (0x13cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35E58B45813468C6595CF6752B6A0AFED496BC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:f6:eb:8a:1c:67:c8:26:65:8b:35:4f:18:
                    73:a2:e7:7d:a4:e2:9e:45:00:93:25:73:32:3b:fb:
                    b7:a9:1f:b2:b7:c0:c7:05:fe:07:d8:1a:d3:f1:e2:
                    58:86:28:94:54:6a:db:a5:c9:07:4a:82:5d:87:90:
                    2a:01:de:6e:7e:5a:5c:64:3c:57:20:75:b6:ac:89:
                    4d:36:99:ce:45:db:48:60:37:e9:a2:95:66:db:e4:
                    b7:1b:62:07:e2:7a:9e:9e:7c:de:44:1e:b2:35:82:
                    5f:62:a5:90:18:1d:c3:07:36:43:e8:b2:6f:3d:bc:
                    94:14:bc:89:69:c5:74:1f:17:7f:07:55:5b:90:66:
                    c6:63:c4:2a:f8:fa:32:c1:78:1f:cc:82:b2:d2:b2:
                    e5:95:74:51:8a:86:e8:ca:cb:46:62:68:69:d0:ba:
                    51:a9:8d:29:8c:d5:2b:1b:cc:43:1f:e0:ae:4a:1a:
                    9e:32:bf:4d:ec:c2:20:63:65:d4:94:27:c2:f6:cd:
                    8b:75:2f:e7:5a:61:6d:1d:3b:69:00:ac:72:b5:6e:
                    60:e5:c9:b4:e7:8e:7e:67:8f:3c:9c:1e:b8:9a:04:
                    04:4d:a8:92:c7:94:00:b9:2a:ae:a9:44:15:e9:5d:
                    df:f5:e4:1d:45:d8:ba:ea:6f:cb:ce:70:40:27:42:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:8B:45:81:34:68:C6:59:5C:F6:75:2B:6A:0A:FE:D4:96:BC:73
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NeWLRYE0aMZZXPZ1K2oK_tSWvHM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:f3:73:9b:69:35:b3:a3:10:28:4b:eb:d0:dc:0f:34:ba:
         eb:83:dc:0a:c0:ae:a0:3f:45:5a:6a:dd:5d:7a:97:1e:c8:75:
         6a:18:fd:1e:af:21:24:8a:16:60:e4:4f:3f:c9:8e:ce:f9:c4:
         7f:ff:d5:1d:fe:2c:eb:1c:30:53:3a:7a:b5:35:ad:9b:af:80:
         58:86:ec:94:0d:bb:e4:f7:92:71:ed:51:ad:01:c8:99:13:e8:
         4c:da:46:27:58:17:73:01:6d:2e:a2:8a:66:76:6a:33:c6:b0:
         4d:88:80:64:a1:42:91:b8:4c:be:c8:68:08:ae:93:21:4d:6e:
         e6:10:c2:6d:ed:3e:c8:8a:87:6e:f4:58:a3:be:83:a5:6a:4b:
         4c:a4:3e:77:12:17:a8:d0:e7:4d:21:fe:dd:f5:ce:3b:cd:b1:
         3f:6d:1c:80:0a:07:f2:d0:6b:8a:f2:19:99:de:e0:05:58:6e:
         4d:52:b3:c4:f7:ca:72:a3:05:58:95:e3:19:05:e4:fb:dd:99:
         8b:9e:88:19:bf:51:ca:69:8e:67:d3:0f:10:94:0c:6f:7a:cb:
         d1:f8:ac:2e:43:12:d9:e1:df:08:51:bd:28:e1:32:ce:2d:82:
         b5:88:db:51:81:96:99:b3:bd:86:b3:ec:98:ad:d0:8b:a6:2b:
         77:8b:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:38 2026 by rpki-client