Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TzDiNWgu5vQHrpvNV8EOxLXO-ko.roa
File:                     TzDiNWgu5vQHrpvNV8EOxLXO-ko.roa (raw, json)
Hash identifier:          SpcywGDeH6PSYBGP987ectx1aj2P57owCJ8gr1Ci20A=
Subject key identifier:   4F:30:E2:35:68:2E:E6:F4:07:AE:9B:CD:57:C1:0E:C4:B5:CE:FA:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1576
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TzDiNWgu5vQHrpvNV8EOxLXO-ko.roa
Signing time:             Tue 31 Mar 2026 07:59:41 +0000
ROA not before:           Tue 31 Mar 2026 07:59:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.103.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5494 (0x1576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4F30E235682EE6F407AE9BCD57C10EC4B5CEFA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:b5:db:12:a4:3e:d6:a8:66:23:83:7e:49:
                    3a:a0:87:de:94:7d:72:13:2d:a1:42:48:ff:82:2e:
                    1b:d3:c0:ac:0d:57:0b:85:34:5b:15:49:ef:b3:ad:
                    bb:d4:84:65:83:4f:c9:d6:99:6a:ac:96:96:62:57:
                    01:39:6c:6c:06:5c:82:21:c0:dc:50:76:66:dc:d9:
                    a1:ef:8d:86:dd:9f:f1:0e:5f:ab:f6:f4:53:d1:3c:
                    05:a3:a4:60:26:73:f5:77:fa:52:99:0c:43:05:29:
                    a3:12:1a:79:1c:8f:29:db:0b:fd:fb:3a:28:98:68:
                    fa:e6:7f:a4:bb:05:a5:4b:5a:ff:c6:1d:a7:7a:a9:
                    f4:21:e8:c9:04:da:ea:f0:ec:6c:cf:1d:a3:ed:da:
                    78:d4:85:54:84:dc:29:15:e9:31:fc:0b:78:20:7a:
                    ff:7a:9a:7c:5e:21:c4:ab:15:f9:90:7b:cc:fd:5d:
                    83:34:ed:a1:5d:4f:c1:ee:b8:57:92:d1:2d:11:ed:
                    d7:63:87:02:b9:9b:3d:10:80:4a:a6:0a:e9:55:8e:
                    42:c6:09:6c:94:59:d2:27:00:8b:ef:dd:a8:04:c0:
                    c6:4e:ac:00:5c:52:c1:4a:fa:7b:3a:72:29:7a:eb:
                    47:74:04:df:51:90:7f:af:5f:65:40:03:d1:70:a0:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:30:E2:35:68:2E:E6:F4:07:AE:9B:CD:57:C1:0E:C4:B5:CE:FA:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TzDiNWgu5vQHrpvNV8EOxLXO-ko.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:57:00:89:f7:fb:cb:5e:e3:9c:b8:d4:a9:7f:fe:e2:30:
         fb:40:8a:a2:6c:7e:4e:88:17:c7:5e:f9:bd:a3:eb:24:0b:ff:
         ff:73:a6:90:34:6b:0c:b9:05:6a:54:5f:5c:a0:58:bb:b8:97:
         02:54:4d:a5:35:66:ec:54:e1:09:ad:24:e9:8a:50:4c:2c:b1:
         e2:d6:90:99:d8:14:16:a0:75:68:ce:b2:46:2f:d5:b8:09:2b:
         34:df:a8:b6:a3:31:9a:c5:13:7b:b8:21:f6:15:15:53:19:98:
         bc:ad:1f:c9:5b:ef:ca:1e:94:da:5e:9e:7e:07:1a:f7:40:6e:
         00:d9:10:03:7e:70:a6:e6:ac:c7:98:df:4b:b8:31:4a:06:3f:
         b4:9e:86:9a:1b:83:ee:09:14:e5:2f:b3:9f:e2:3a:6a:f3:a2:
         36:55:a9:95:ce:ae:63:15:ef:39:3e:a5:49:53:55:20:73:05:
         68:1a:b0:1c:f6:3f:34:db:5e:8e:b6:4b:2d:8a:1f:23:e3:c7:
         ae:c7:2f:bd:cc:26:a6:77:16:24:13:17:59:61:01:ee:3c:e0:
         18:28:2b:78:55:34:fb:c3:b2:6c:63:ad:c4:5c:dc:f1:13:1b:
         a8:d3:cd:7b:30:2d:27:ed:37:b0:be:ff:bb:e0:96:87:a6:49:
         a1:10:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client