Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sv9yzl4hiEbIikW-GJx6ukVTQi4.roa
File:                     Sv9yzl4hiEbIikW-GJx6ukVTQi4.roa (raw, json)
Hash identifier:          JCTDuevS2d+ceWYzYVrnXTErXmh/MkaosqKsYjVF5/M=
Subject key identifier:   4A:FF:72:CE:5E:21:88:46:C8:8A:45:BE:18:9C:7A:BA:45:53:42:2E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1744
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sv9yzl4hiEbIikW-GJx6ukVTQi4.roa
Signing time:             Tue 31 Mar 2026 08:03:28 +0000
ROA not before:           Tue 31 Mar 2026 08:03:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.107.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5956 (0x1744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4AFF72CE5E218846C88A45BE189C7ABA4553422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:42:38:f3:47:df:7a:77:99:44:ff:5b:f2:
                    53:98:4e:91:95:e4:54:94:f5:b5:84:87:28:11:eb:
                    d9:ad:a6:32:75:4c:66:a1:5d:fb:89:d5:1c:1a:d9:
                    0a:1c:17:76:03:be:61:89:b1:2f:51:a5:60:ac:16:
                    75:b4:97:e9:a0:b4:39:b6:82:bf:63:3c:69:be:95:
                    d0:3e:f8:cd:b9:ea:20:c0:07:b0:0b:f3:5f:91:5f:
                    96:aa:4b:36:69:61:63:32:b5:ec:30:86:2f:56:5e:
                    0d:84:df:bd:14:3e:a6:21:f0:10:0b:cb:ac:27:4e:
                    53:c7:91:21:b8:30:60:8c:42:b0:ae:9c:eb:0f:22:
                    30:13:17:d1:83:e0:e0:17:1e:ca:63:80:5f:59:89:
                    d0:00:61:10:c5:63:9c:c7:f8:33:32:86:74:ce:46:
                    54:ba:80:ba:85:58:84:3f:67:66:41:24:a9:68:ad:
                    77:74:1d:53:14:c4:f7:55:3d:a9:96:5f:64:b1:d1:
                    5d:ec:91:d1:d4:a5:e7:7f:78:cc:bb:fb:d0:16:96:
                    a9:69:78:ae:87:cd:7b:f9:e5:d3:90:7b:77:9b:2e:
                    b0:93:9d:66:71:1b:c0:d3:a5:6c:d7:6e:ac:96:c5:
                    7d:18:3d:4a:e9:b3:fc:51:26:ab:17:97:f1:36:56:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FF:72:CE:5E:21:88:46:C8:8A:45:BE:18:9C:7A:BA:45:53:42:2E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sv9yzl4hiEbIikW-GJx6ukVTQi4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.107.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:da:17:fb:fc:ad:33:ba:d7:a6:35:f6:7a:6a:d5:7b:33:81:
         77:4a:24:f2:94:0e:a0:c8:ee:67:00:32:14:44:21:08:e5:99:
         55:8a:a7:8c:2d:bd:ca:a2:8e:c4:13:34:f1:39:32:39:73:5c:
         8b:ed:de:0f:86:b3:41:e0:a5:b3:a1:85:68:62:37:f8:f7:03:
         fb:c9:e3:5c:0c:57:d2:95:42:7f:ef:7d:9a:83:a8:45:46:4f:
         b0:c1:98:ac:d7:ed:e7:0e:c5:33:18:5f:53:86:52:3c:44:19:
         f8:5d:3e:64:3c:36:e9:8e:9c:24:9c:7e:d6:05:4b:e4:0e:6f:
         89:9a:3e:03:e3:f0:11:94:9c:7a:c4:9a:c3:40:ad:5b:8b:cc:
         b0:61:c3:4a:66:89:68:0d:35:19:0a:95:5f:1a:58:54:ac:10:
         2d:0f:6e:76:f3:c8:cf:64:56:21:e6:3e:92:2e:b5:62:18:8b:
         cd:4b:81:2a:2e:79:d3:ec:49:9c:69:e9:54:69:01:51:1c:23:
         4f:f0:3e:9a:bc:b5:89:d4:46:a1:51:87:76:cd:99:d3:85:79:
         38:f2:17:8f:d8:84:4f:89:3a:13:2e:95:86:77:fc:a9:e5:73:
         f8:e6:7a:f6:fb:96:22:24:9c:0d:78:f4:e1:14:24:a1:46:62:
         5d:2f:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:07 2026 by rpki-client