Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NlthaC1QZzNSChkvhqYqP-Ity3k.roa
File:                     NlthaC1QZzNSChkvhqYqP-Ity3k.roa (raw, json)
Hash identifier:          95w/lMT8UJ7JqR6NaxNR2RhRPdnu4LSlnl9qyCCobwU=
Subject key identifier:   36:5B:61:68:2D:50:67:33:52:0A:19:2F:86:A6:2A:3F:E2:2D:CB:79
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1712
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NlthaC1QZzNSChkvhqYqP-Ity3k.roa
Signing time:             Tue 31 Mar 2026 08:03:05 +0000
ROA not before:           Tue 31 Mar 2026 08:03:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5906 (0x1712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=365B61682D506733520A192F86A62A3FE22DCB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:c5:c9:9c:42:4d:e2:db:3e:16:9b:3f:dd:
                    e5:58:8b:78:90:f0:8f:7c:6d:70:36:20:08:ce:47:
                    e9:ad:3e:94:11:07:cb:dc:61:5b:f5:83:7e:dd:f1:
                    d7:a4:d9:cd:78:a1:83:94:7c:2a:a5:13:05:bb:4b:
                    bd:d2:f2:24:49:bf:1e:7a:33:09:0f:cb:8f:ee:76:
                    4b:7d:18:99:3d:d9:b8:a4:18:3f:5f:b3:5e:ba:86:
                    a0:f2:98:74:9b:70:ab:4c:71:33:af:42:7a:7c:b6:
                    e9:bf:54:83:5d:b5:76:ab:75:eb:1c:07:86:12:8a:
                    37:67:97:dd:01:15:e2:c6:46:46:1f:b3:0b:d1:04:
                    d1:d8:78:c2:3a:39:a6:23:f3:2c:89:7b:46:ec:3b:
                    82:55:58:71:4a:f8:db:ff:9c:d1:12:68:88:e7:0a:
                    e0:49:76:49:b6:b2:39:8a:9e:af:ee:09:bc:6d:e9:
                    b6:23:23:4d:29:7f:60:29:2f:20:57:4a:7f:80:d1:
                    ca:6f:91:61:57:7f:61:1d:af:84:63:f2:1f:c1:69:
                    6a:00:ef:70:ec:e3:6e:41:95:31:68:c0:04:47:c8:
                    77:3d:13:6e:1b:31:a7:4e:dd:da:07:5b:84:74:e6:
                    f3:63:3f:d7:87:5a:ff:2e:7e:a0:1e:71:1e:7a:b3:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5B:61:68:2D:50:67:33:52:0A:19:2F:86:A6:2A:3F:E2:2D:CB:79
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NlthaC1QZzNSChkvhqYqP-Ity3k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:2a:68:a6:44:c9:df:06:a5:85:c9:7a:86:d8:3d:b1:d9:
         b9:bc:db:88:33:60:b2:68:c0:bd:ae:42:91:b3:ba:a4:76:ef:
         c8:11:b0:5a:35:87:cc:4f:b1:88:0c:cc:27:59:b2:92:5f:bd:
         10:c3:84:14:15:32:45:7a:1f:63:26:84:88:5c:62:f7:25:d5:
         9a:6c:d9:4b:45:7c:71:05:5c:13:7c:66:c5:52:19:c8:3b:d7:
         3e:1b:bc:93:43:b1:60:c9:cf:ed:b7:c4:a3:d5:aa:92:27:0b:
         7e:c9:8f:da:a7:6d:8a:cf:ce:3d:65:f0:84:9e:59:a1:3e:f4:
         5c:81:25:f1:c6:56:9f:49:62:47:4c:d6:39:4b:4f:5b:fd:ab:
         c8:24:ff:c6:07:0f:cf:33:e6:6d:7d:68:b6:0b:8e:1b:bf:4b:
         a2:92:bc:18:77:86:06:dc:48:9a:3f:7b:c3:0f:47:63:19:7c:
         4a:fe:0d:b5:f6:de:72:28:bf:67:11:8a:77:57:3f:57:c1:28:
         6c:0d:50:ef:05:19:8b:9f:ee:26:a7:e0:27:40:1a:7d:70:a5:
         85:3b:de:c9:13:8c:fd:ca:e2:95:e7:1b:d5:3c:82:ea:9d:8e:
         7b:1e:61:ba:c1:8f:6c:dc:59:19:f3:9e:f0:16:23:6c:6f:34:
         bc:42:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:07 2026 by rpki-client