Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpeeUktXTLFn2mfxQWgj6Ekzn-s.roa
File:                     NpeeUktXTLFn2mfxQWgj6Ekzn-s.roa (raw, json)
Hash identifier:          w0Cwp0xMwafrscfRPBCNkIRqvjXEd3XneTNtDcoBtDc=
Subject key identifier:   36:97:9E:52:4B:57:4C:B1:67:DA:67:F1:41:68:23:E8:49:33:9F:EB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1650
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpeeUktXTLFn2mfxQWgj6Ekzn-s.roa
Signing time:             Tue 31 Mar 2026 08:01:34 +0000
ROA not before:           Tue 31 Mar 2026 08:01:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5712 (0x1650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=36979E524B574CB167DA67F1416823E849339FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:da:b7:9c:6b:37:f9:67:57:3a:4e:14:5c:
                    b8:bc:45:3a:5a:e8:59:63:ae:a6:fc:db:f3:ac:89:
                    76:53:20:ab:40:ea:c3:a9:a2:53:01:b8:e4:9f:56:
                    f4:d8:26:e5:6c:ed:0c:45:79:d0:a0:f7:1d:eb:80:
                    e2:43:5f:08:f4:f3:fc:08:36:e0:02:87:42:99:b0:
                    e0:b6:c3:9c:12:74:4d:aa:88:8f:2b:bc:b7:11:d8:
                    6f:bb:78:09:07:9b:53:dc:b9:f6:f3:91:a9:10:7b:
                    a1:21:71:46:f5:e0:25:94:c5:82:5f:df:d4:11:f6:
                    9a:c9:cb:70:0c:4a:5c:7a:19:70:71:70:db:2d:c2:
                    07:d1:19:e0:8f:85:27:8e:9b:e6:36:42:e5:36:b3:
                    3f:7a:dd:c2:fb:1f:ba:38:28:28:66:a8:bd:ba:d4:
                    42:45:79:c6:a7:7b:87:f6:92:df:26:69:df:b7:14:
                    d8:cc:d7:2e:83:69:26:49:29:b9:43:4b:61:79:cb:
                    0e:1d:d9:5f:89:07:d6:d3:74:c9:e6:41:a0:0a:2c:
                    78:29:54:1f:c9:2e:89:ff:71:19:14:bb:ec:5a:7e:
                    d9:4d:7f:d0:1a:09:87:5b:25:2e:c4:49:0f:42:9e:
                    47:2f:45:56:67:d0:fe:50:37:3d:25:92:bf:e9:1a:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:97:9E:52:4B:57:4C:B1:67:DA:67:F1:41:68:23:E8:49:33:9F:EB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpeeUktXTLFn2mfxQWgj6Ekzn-s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:9f:54:27:62:54:0c:12:99:5d:43:ad:ca:79:b9:e5:9e:
         8d:aa:23:a4:4f:20:c1:d6:46:4e:57:ba:20:af:ce:34:ab:46:
         f2:83:36:68:77:0e:bd:bb:73:18:f9:45:4d:c7:4c:95:16:5a:
         ef:6f:6a:ef:8d:4b:4b:fc:ea:84:13:d0:5c:a8:de:06:45:de:
         b8:c6:4a:3d:79:76:a5:28:3a:7a:d3:67:31:b9:80:57:17:81:
         68:9e:97:91:ed:d5:61:df:82:30:81:c6:1d:6e:8f:ab:98:99:
         34:44:fb:3c:ed:d6:1a:7c:d8:ea:97:0d:c3:2c:25:a6:88:3d:
         84:75:f8:42:94:75:ab:68:ae:19:fa:4b:63:94:8c:16:4d:b8:
         a4:72:2c:06:42:01:ec:1b:1a:f9:c3:69:91:8c:04:4f:d2:d4:
         d6:f6:71:3e:9e:0f:c3:e7:d7:a0:76:b2:bb:f2:f9:8b:fc:2a:
         13:9a:ca:4e:fa:59:41:7b:bb:e3:7e:d3:f9:3f:ef:a2:65:46:
         d7:a7:39:40:66:96:70:dc:71:70:57:83:21:af:65:56:88:51:
         34:92:74:ce:1b:c1:19:55:ff:2d:bb:a5:0b:79:22:c9:43:d2:
         f9:2e:9f:4a:76:fd:50:f0:a8:7a:67:86:8e:0e:7a:97:0a:bd:
         e1:82:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:49 2026 by rpki-client