Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/T84njBLQVpOgk6HgvVQn-pIsVTU.roa
File:                     T84njBLQVpOgk6HgvVQn-pIsVTU.roa (raw, json)
Hash identifier:          LMViA1lKGjwTTu3N6FyCU6FMl35bTgJH/sJQqt3tj5Y=
Subject key identifier:   4F:CE:27:8C:12:D0:56:93:A0:93:A1:E0:BD:54:27:FA:92:2C:55:35
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       183C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T84njBLQVpOgk6HgvVQn-pIsVTU.roa
Signing time:             Tue 31 Mar 2026 08:05:33 +0000
ROA not before:           Tue 31 Mar 2026 08:05:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6204 (0x183c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4FCE278C12D05693A093A1E0BD5427FA922C5535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:b7:e9:49:07:34:a1:b2:c2:ec:23:3e:b9:
                    49:42:31:c9:aa:35:7d:85:e0:56:39:45:dc:c6:91:
                    c7:0b:af:d8:c9:1d:34:92:ef:62:57:c8:e9:72:22:
                    41:3c:fb:74:38:46:a8:c7:06:bd:6c:b3:7b:ae:00:
                    95:ce:72:3f:35:7f:95:b1:4c:ab:1e:18:3c:b3:b7:
                    23:e7:f6:2f:e5:01:6a:33:1a:47:95:f5:a6:76:18:
                    a7:18:d7:b9:cf:31:0e:53:6b:ae:59:ba:62:f7:56:
                    cd:aa:d9:87:e9:50:72:d0:54:af:91:bb:eb:57:52:
                    56:e8:78:d8:bf:95:03:59:59:7a:3d:5a:31:23:81:
                    0a:cd:d3:e1:63:55:5b:cd:02:f0:1c:cc:4e:74:69:
                    6d:0d:ed:aa:d3:d7:c0:70:79:c9:ba:af:84:0a:81:
                    d8:f7:89:cc:b2:54:e1:56:40:ff:bd:4b:20:39:4d:
                    7c:af:fa:fc:c3:18:a7:6b:c2:f6:c9:16:d1:db:a7:
                    84:5e:4c:37:c9:a8:36:29:52:92:dd:05:62:a3:85:
                    09:2a:1b:99:6c:30:36:95:6a:d1:9c:42:74:9c:e6:
                    b2:d5:06:e3:95:c8:38:bf:5b:46:b7:e0:83:47:60:
                    40:fd:68:29:33:99:79:2e:e8:f2:0f:88:7f:aa:43:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CE:27:8C:12:D0:56:93:A0:93:A1:E0:BD:54:27:FA:92:2C:55:35
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T84njBLQVpOgk6HgvVQn-pIsVTU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:eb:b4:95:c3:2f:6a:d1:f2:b2:e8:d3:03:20:fa:6f:2f:
         76:9f:07:7c:fe:fc:65:8b:0e:a2:7f:8d:5d:60:a3:38:06:17:
         de:ef:e0:8e:2e:b0:bb:f1:b2:65:6d:20:c0:25:53:72:34:bf:
         af:97:c9:68:2a:67:00:ff:b5:19:c9:27:6c:dd:6c:e7:f5:c7:
         ba:32:6f:87:3a:fe:0b:c2:ee:f3:6a:24:ad:68:0e:26:91:bd:
         77:56:2d:c2:1e:67:ab:2f:9c:82:9d:25:24:d1:5a:5d:10:a6:
         7b:67:fd:b7:ab:ef:7e:eb:92:2e:d9:86:40:26:90:da:ac:a4:
         2b:02:1d:67:d5:df:65:2e:d2:a1:6e:93:ab:24:33:1e:c1:82:
         a5:58:38:2e:7c:3a:a7:66:94:ef:79:87:78:aa:d1:da:4a:fc:
         dc:ff:79:3c:1e:52:8d:2d:01:0f:69:60:5d:08:4b:4f:76:d8:
         c4:93:f5:0b:f1:1b:f9:57:19:0d:92:82:14:d5:85:f9:5c:09:
         78:89:19:3d:10:5d:0e:e2:dc:3d:76:b5:29:79:0b:e5:29:a4:
         a0:82:9c:c2:da:a6:b7:61:bf:7d:06:b1:8d:2a:b7:bb:80:fc:
         fd:5d:57:9a:48:d5:2e:ad:1f:2a:e4:06:cc:b0:9a:91:64:0a:
         2a:e8:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:35 2026 by rpki-client