Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/W2lS8DaHqB9k29EXXONSbWnGp5E.roa
File:                     W2lS8DaHqB9k29EXXONSbWnGp5E.roa (raw, json)
Hash identifier:          Hx+fvpL9REXBbYrjfKzpEvT0thAmE/j3X3fcAdXqoSA=
Subject key identifier:   5B:69:52:F0:36:87:A8:1F:64:DB:D1:17:5C:E3:52:6D:69:C6:A7:91
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1479
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W2lS8DaHqB9k29EXXONSbWnGp5E.roa
Signing time:             Tue 31 Mar 2026 07:57:37 +0000
ROA not before:           Tue 31 Mar 2026 07:57:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5241 (0x1479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:57:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5B6952F03687A81F64DBD1175CE3526D69C6A791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:c2:fd:5d:ea:4b:87:0c:23:7e:c9:09:cd:
                    e7:c1:b9:9c:7e:e3:c8:2f:f1:ab:ff:d6:25:63:b8:
                    54:36:e7:da:9d:29:49:b2:9e:fd:9c:9e:60:8d:d3:
                    6c:37:b6:9b:1c:bb:6b:1a:35:af:68:45:43:c6:05:
                    a3:bc:6a:4e:73:79:83:e8:74:92:f9:c3:4e:29:d4:
                    4a:eb:fb:c4:7b:88:8a:6e:38:43:dd:18:51:0a:33:
                    b7:fa:0d:ed:e6:d3:cd:55:55:95:7e:d5:3f:8e:ce:
                    82:9d:20:13:cc:7a:4f:58:47:33:5d:22:8c:01:56:
                    41:a7:a2:59:24:3d:ad:f4:af:3c:4e:b8:0c:bb:2d:
                    1e:4a:4b:93:2e:db:04:45:5b:dd:ea:6e:e5:fe:e9:
                    3a:8f:14:d9:e1:a4:8d:2d:fb:7e:ef:7b:c2:07:85:
                    1d:b6:d5:af:fe:21:c3:7b:11:02:1d:42:af:75:67:
                    92:5a:70:52:ed:ab:3b:1c:06:a9:d0:ed:d9:c7:c2:
                    60:3f:72:21:2c:8f:56:0f:23:0f:a1:a3:b6:95:16:
                    95:a6:2e:72:17:84:1b:33:96:c2:fc:75:fe:0e:8a:
                    56:fd:19:4b:35:2a:96:c3:27:d5:cd:d0:a0:9a:80:
                    52:49:4e:9b:46:35:2e:5e:64:76:e1:7e:1c:9e:c6:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:69:52:F0:36:87:A8:1F:64:DB:D1:17:5C:E3:52:6D:69:C6:A7:91
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W2lS8DaHqB9k29EXXONSbWnGp5E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:68:6d:93:35:c6:ae:fe:66:0c:bf:56:be:61:95:61:db:e9:
         d0:27:11:e1:a4:26:eb:3d:8d:0f:cb:99:25:cd:f7:71:b1:b3:
         bb:18:f8:53:78:48:20:12:5d:43:cc:98:c0:94:4f:c0:44:e3:
         1d:4d:f5:bb:11:31:b1:19:5d:df:7b:a6:60:dc:be:cf:77:03:
         84:79:80:3d:8a:5c:e6:e1:4e:16:98:0e:93:7e:dd:9d:93:6f:
         ea:5c:10:ae:6a:6b:ba:11:7c:79:5a:ef:4f:02:45:f8:85:8f:
         f1:a7:1c:5f:00:70:60:f1:74:3f:64:05:1f:18:e4:10:8b:98:
         2d:93:b3:d3:ac:cf:aa:9d:ce:24:81:bf:16:70:4b:a3:09:6e:
         7e:59:0a:c3:10:35:0b:92:03:fe:77:06:39:14:0b:8d:0e:fe:
         e0:74:ea:30:20:fc:3c:ce:76:1e:06:5a:8e:cf:03:f3:77:bf:
         d3:9b:3f:68:83:87:d2:d4:bc:de:cc:6e:f2:6b:29:49:e2:99:
         38:3b:d3:aa:30:80:7c:ce:62:fd:7c:1e:34:d4:63:94:6b:9d:
         99:53:2b:89:90:c2:75:b1:a3:f6:b0:e8:4a:ea:52:b0:47:5d:
         47:ee:5e:dd:e5:8b:a4:a8:36:a8:a0:1b:49:87:d0:f5:d0:a9:
         bf:62:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:01 2026 by rpki-client