Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XotXoLeV3VuH1XSQumYxRkumuP8.roa
File:                     XotXoLeV3VuH1XSQumYxRkumuP8.roa (raw, json)
Hash identifier:          5u7rFwJygUB8bElK/akTJuW3K2oQIX59pgw1gw7MyMs=
Subject key identifier:   5E:8B:57:A0:B7:95:DD:5B:87:D5:74:90:BA:66:31:46:4B:A6:B8:FF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1362
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XotXoLeV3VuH1XSQumYxRkumuP8.roa
Signing time:             Tue 31 Mar 2026 07:55:27 +0000
ROA not before:           Tue 31 Mar 2026 07:55:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4962 (0x1362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:55:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5E8B57A0B795DD5B87D57490BA6631464BA6B8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:a0:49:84:75:70:eb:aa:39:36:22:8d:67:
                    d7:5c:80:92:06:26:a5:fc:2a:0f:fa:d4:39:69:a6:
                    c2:67:18:28:40:53:c5:a7:93:fd:a1:64:1d:1a:92:
                    f6:fc:0b:e4:50:cf:e2:6b:5a:66:39:23:1d:44:1c:
                    8a:1d:9a:60:8f:b3:92:ac:05:da:e1:db:d6:f9:5c:
                    df:92:3b:37:71:25:77:c0:54:6b:dc:0b:24:1c:4c:
                    c9:3b:19:b2:2c:56:e7:6c:bb:d7:eb:a8:dd:39:b7:
                    0c:ee:c6:1b:69:e4:8d:11:41:9a:a3:7e:13:4c:c0:
                    2a:fe:20:9f:7d:d4:f6:ee:32:20:00:63:fc:9a:be:
                    13:ca:ba:04:e4:0c:4f:ba:c2:d3:9e:a2:10:f4:8a:
                    b4:65:5e:8f:3c:eb:68:c7:a9:6e:66:a0:4c:2c:4a:
                    40:0e:48:cc:d0:f6:c5:e3:6b:36:39:8d:ff:12:4c:
                    b7:e5:da:51:fd:3a:b5:7d:93:2b:39:ae:09:c0:dc:
                    48:28:06:4b:45:57:22:dc:6c:33:69:3c:a3:27:ea:
                    30:2b:eb:17:d5:b5:01:54:66:e9:a4:22:e0:12:e8:
                    ba:ca:c0:12:33:f9:a4:2a:f7:69:5a:56:38:2c:20:
                    a9:76:a1:57:71:c2:af:c1:3a:30:99:59:9f:b3:48:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:57:A0:B7:95:DD:5B:87:D5:74:90:BA:66:31:46:4B:A6:B8:FF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XotXoLeV3VuH1XSQumYxRkumuP8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:6b:fd:7e:b9:40:fa:db:35:ce:56:43:8e:85:ec:f6:d6:
         1a:fb:f1:20:6d:35:3f:de:93:7f:d4:60:51:5f:e3:4d:92:b4:
         44:8a:88:71:5a:c8:9d:78:c2:fc:39:fb:12:e0:80:8a:02:dc:
         fa:ee:0e:49:cb:74:0e:b5:3c:f3:a2:66:05:e6:8c:4b:6e:55:
         2c:bf:c9:13:1b:8a:2b:5f:85:4b:19:73:01:42:c5:ed:e4:7c:
         15:0c:50:19:cb:7f:36:5c:72:5d:cc:f1:b1:c2:63:39:fa:82:
         4e:0d:1c:99:b6:e0:25:87:f7:98:b8:56:3f:62:6f:29:b7:5d:
         38:67:aa:29:9b:4e:5d:65:b1:37:e0:e2:b8:17:a0:1a:be:0b:
         82:a3:62:89:bf:c5:bb:65:ec:66:18:54:e6:e2:c5:2b:75:59:
         64:46:4b:87:64:3d:f3:9c:b2:db:30:a8:dd:2f:16:b2:c3:56:
         ac:0e:55:b3:75:06:76:ed:7a:42:83:cc:4b:c5:df:51:d8:f3:
         52:5c:e1:6f:85:c6:7f:b9:e0:2d:7a:0b:21:81:18:9d:4d:9b:
         ee:ab:eb:34:58:81:c5:fa:b8:a7:03:2e:47:9e:6a:b2:d4:e0:
         a6:55:43:07:51:f5:5d:84:29:61:1d:35:34:28:56:ed:f4:fe:
         30:26:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:33 2026 by rpki-client