Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V7nPtw6IN3UJNFSIqUaXMfSsDIk.roa
File:                     V7nPtw6IN3UJNFSIqUaXMfSsDIk.roa (raw, json)
Hash identifier:          Je7hMvuY1oyMx2CyIzO2FWxxpDMJh3J7fUGxjrfkseQ=
Subject key identifier:   57:B9:CF:B7:0E:88:37:75:09:34:54:88:A9:46:97:31:F4:AC:0C:89
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1692
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V7nPtw6IN3UJNFSIqUaXMfSsDIk.roa
Signing time:             Tue 31 Mar 2026 08:02:03 +0000
ROA not before:           Tue 31 Mar 2026 08:02:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5778 (0x1692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=57B9CFB70E88377509345488A9469731F4AC0C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:9c:18:39:1b:99:07:24:5e:89:5d:c6:db:
                    c8:32:10:f9:b6:44:cc:09:49:e6:4a:e9:01:36:d5:
                    5a:cb:98:86:d3:8f:57:db:0c:82:6d:7a:29:74:76:
                    39:36:98:b2:e2:d6:61:07:82:47:9c:83:57:03:12:
                    1e:c6:ee:b8:0a:e2:22:17:51:f3:7c:20:f1:95:22:
                    40:6d:1d:87:8e:f7:c1:4a:6c:8e:15:2e:7a:6a:74:
                    6b:3e:ff:8d:4f:4f:bd:85:72:c4:9c:d9:5b:11:47:
                    2e:e6:05:0e:97:23:2a:6b:60:df:5a:24:96:40:5e:
                    05:61:05:a2:a2:11:22:a6:ad:68:21:f0:ea:78:2b:
                    fb:9e:a6:70:71:b8:aa:06:04:43:b7:c9:51:01:98:
                    31:74:f0:52:18:c4:89:72:dc:49:5d:bc:05:7e:58:
                    6c:ad:01:68:18:94:f2:a7:f8:4c:ac:71:38:71:52:
                    4b:b8:7f:6e:37:60:38:49:e6:81:8d:dc:38:25:15:
                    90:39:fc:c8:5d:fe:40:24:c8:82:73:fb:e7:55:b8:
                    97:a3:40:f4:51:4e:13:72:d1:ff:a8:06:ea:63:c7:
                    5e:33:4e:cd:d3:75:9a:71:9a:f0:b7:3d:c4:7c:ab:
                    5a:c2:c9:85:17:a2:2d:8d:15:48:28:16:3d:41:2c:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:CF:B7:0E:88:37:75:09:34:54:88:A9:46:97:31:F4:AC:0C:89
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V7nPtw6IN3UJNFSIqUaXMfSsDIk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:c7:48:11:16:76:0f:38:51:11:cf:78:aa:44:bc:bb:13:73:
         5e:65:37:60:94:d4:4d:5f:63:87:54:3f:0b:c8:11:f2:e2:59:
         87:87:be:23:c3:6a:4f:39:fa:fe:5c:fe:32:a7:d9:96:ef:60:
         08:24:3e:00:3d:3f:0c:22:ff:da:bb:c1:86:01:b2:a2:0e:70:
         73:f7:65:75:8e:23:fe:c9:bc:31:54:06:6f:0f:97:cc:43:ec:
         5e:97:65:27:34:8d:f1:b1:9c:2c:00:47:9d:dd:41:8f:1b:a9:
         a3:fc:4b:19:97:ef:ab:58:a2:e5:db:ae:6e:65:0a:31:56:4f:
         6f:67:2b:12:3f:5b:97:04:45:ff:6f:6d:38:6e:74:31:a6:20:
         aa:c0:88:e4:d5:ee:85:50:f9:05:a5:f3:aa:82:49:13:66:d1:
         b1:35:b1:51:1c:d0:04:14:5f:3c:79:9d:b9:2c:bd:f9:ae:e6:
         d2:4a:b5:64:02:14:56:fe:36:8b:82:7e:6d:97:f3:39:b0:d6:
         5e:bc:f0:e7:de:b8:92:f3:80:0a:af:ad:e8:ad:39:c2:fb:77:
         97:4e:5a:34:50:6b:b2:31:3c:d6:c3:bb:e2:d6:ed:2f:0a:be:
         b0:fb:49:2c:c5:de:1f:b4:c1:69:de:c9:ed:f7:0e:d3:74:71:
         c8:f7:b9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:52 2026 by rpki-client