Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TMrhFP2TMjuRccmXjctDH7XtQ_c.roa
File:                     TMrhFP2TMjuRccmXjctDH7XtQ_c.roa (raw, json)
Hash identifier:          3g4cSgfa3zI/NWXHEMx9AR7srFnt2j3BDTEgzmfsmk0=
Subject key identifier:   4C:CA:E1:14:FD:93:32:3B:91:71:C9:97:8D:CB:43:1F:B5:ED:43:F7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TMrhFP2TMjuRccmXjctDH7XtQ_c.roa
Signing time:             Tue 31 Mar 2026 08:04:54 +0000
ROA not before:           Tue 31 Mar 2026 08:04:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.101.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6137 (0x17f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4CCAE114FD93323B9171C9978DCB431FB5ED43F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:44:64:c4:33:e6:17:2a:e2:4e:73:8c:3c:
                    ef:b9:eb:18:aa:be:7a:40:8e:81:7d:c9:9c:51:2a:
                    1f:09:6a:71:b6:73:1b:07:2e:3a:7f:de:15:fd:3f:
                    0f:1a:d4:0d:07:b7:c8:a4:79:65:f0:8b:f8:d7:50:
                    e4:af:ad:49:59:c3:e7:44:b9:04:40:30:e5:db:32:
                    1a:8b:a7:6c:bd:4a:79:d2:fa:93:87:8c:de:f1:17:
                    d0:85:03:35:f5:09:67:f3:14:59:67:e3:e3:fd:39:
                    61:ba:17:77:cc:04:80:f0:b5:cc:2c:89:ed:ef:86:
                    0d:ea:ab:4d:c4:07:19:b9:9b:9a:0a:cf:39:9b:85:
                    76:d6:37:a6:be:05:ca:ae:7a:bc:ba:1d:ad:02:86:
                    79:50:ed:e3:9a:46:c6:b0:64:09:dc:05:9f:2a:27:
                    f9:a0:a1:2e:8c:ed:83:78:23:30:b7:7d:37:60:a6:
                    7e:aa:fc:7b:09:e5:5d:79:fe:4c:5b:46:bd:05:6b:
                    59:1d:3d:5f:8f:ef:4d:97:01:7b:bb:78:24:c3:15:
                    96:fc:86:51:39:da:77:ef:19:49:9a:3d:39:f0:3a:
                    7a:cb:4f:42:60:39:db:99:c9:a7:30:9b:96:7f:1d:
                    84:b8:2c:46:d1:67:cb:c1:f7:15:62:62:14:0e:4d:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CA:E1:14:FD:93:32:3B:91:71:C9:97:8D:CB:43:1F:B5:ED:43:F7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TMrhFP2TMjuRccmXjctDH7XtQ_c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.101.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:fe:b1:88:fa:8b:a9:1d:85:b8:8c:8f:4f:18:10:18:de:
         33:e3:63:41:12:15:e4:a6:0e:3e:da:bb:3f:98:af:fa:28:77:
         04:00:68:8e:a0:d7:95:f6:34:9e:27:40:b6:d3:6f:b8:78:c3:
         3c:17:82:11:81:b8:fe:ec:06:e6:22:d6:a0:f2:91:9c:e8:b1:
         8f:1f:a7:06:44:ab:43:3b:79:24:bd:7c:7a:64:1d:f7:ec:e5:
         f5:ee:18:19:5e:e8:44:cb:ee:cc:f8:a3:22:dc:56:8a:f2:1f:
         8c:61:00:51:75:ba:07:dd:95:43:53:59:64:f5:cc:65:1d:37:
         11:cb:5c:e0:4e:07:01:e1:46:2b:78:78:ba:58:c6:0e:c0:0c:
         14:1c:5d:bb:ea:3e:73:8c:7b:04:29:e6:c5:73:4a:c0:12:26:
         94:ed:08:ab:65:27:fe:78:c9:98:a7:6a:27:65:8d:e9:63:c8:
         7d:1e:92:a9:48:42:8a:1f:8a:f5:2b:83:3f:72:6d:e5:2b:9a:
         86:9b:93:84:d3:a8:aa:c0:b6:c3:c9:e9:31:e3:74:4e:1b:df:
         ee:e7:e5:20:bc:e4:26:bb:53:82:d6:d9:35:23:cc:8e:6a:e5:
         54:da:fb:8c:49:f0:d9:16:f2:f5:d6:2e:ff:4e:79:28:6e:1a:
         17:d2:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:39 2026 by rpki-client