Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z9W_c-QAuCr9mHa0UXoEd5hfO7c.roa
File:                     Z9W_c-QAuCr9mHa0UXoEd5hfO7c.roa (raw, json)
Hash identifier:          OJISu/uKdsPLhUBcQOGlcuCq/KILQJmQS1Ize85g8ec=
Subject key identifier:   67:D5:BF:73:E4:00:B8:2A:FD:98:76:B4:51:7A:04:77:98:5F:3B:B7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z9W_c-QAuCr9mHa0UXoEd5hfO7c.roa
Signing time:             Tue 31 Mar 2026 08:02:26 +0000
ROA not before:           Tue 31 Mar 2026 08:02:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5824 (0x16c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=67D5BF73E400B82AFD9876B4517A0477985F3BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9e:63:36:96:00:02:0f:18:96:f6:59:37:8e:
                    ef:5c:8d:71:e9:4a:8e:28:e0:7a:75:24:df:5a:33:
                    33:c1:f1:91:69:b4:32:8e:74:ae:67:30:52:91:19:
                    ac:b2:7f:85:b0:32:41:dd:b9:8f:b2:2a:6c:78:0d:
                    5f:9a:18:77:3d:13:53:7c:84:6a:6d:5b:93:62:c1:
                    90:e4:e5:24:db:6f:16:5c:c5:ca:41:31:58:32:16:
                    f1:fd:1a:50:4a:15:7b:6a:ed:8d:55:d7:98:f4:13:
                    63:2b:04:8f:ff:29:b3:a6:e1:8b:b5:c5:31:2f:fa:
                    80:d4:8f:57:c5:a3:16:82:35:70:aa:a1:cd:68:e1:
                    a2:d4:6a:67:98:4c:5a:0c:2f:d3:10:9f:b9:90:87:
                    a5:12:e0:80:1a:f8:fd:9b:0e:13:a3:3c:b7:13:e4:
                    9a:e8:e2:74:b7:7d:10:0b:2c:f5:d7:09:cc:c8:e6:
                    45:e7:00:b2:8e:50:b2:78:24:b5:c3:76:c6:98:28:
                    17:d3:ac:71:37:d6:21:55:e4:c1:64:8d:ac:8b:f4:
                    63:13:c1:61:79:79:42:47:f3:6e:b0:b6:a0:0e:a5:
                    fb:cc:1f:f8:c3:de:08:b6:f7:dd:2b:a3:cf:80:f3:
                    08:88:e7:93:4c:3b:a6:55:ac:5f:8a:88:4b:12:09:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D5:BF:73:E4:00:B8:2A:FD:98:76:B4:51:7A:04:77:98:5F:3B:B7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z9W_c-QAuCr9mHa0UXoEd5hfO7c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c5:37:35:fa:8f:d1:8f:c2:38:da:be:0c:32:35:c9:12:bc:b5:
         61:85:b5:52:00:b1:3b:08:d8:16:fc:71:ba:a8:72:87:e9:d5:
         c4:a4:57:69:ea:79:89:22:73:19:00:49:84:1b:b5:46:c3:46:
         fd:c1:d7:5a:e0:fc:ff:15:a7:61:68:85:ae:76:92:b2:06:bd:
         f3:69:55:bc:30:40:ed:aa:27:0a:39:a3:75:3f:92:2c:7d:30:
         72:d4:22:a3:d0:72:7c:5a:7e:b0:e0:f3:90:af:c9:26:f8:f0:
         30:a0:58:89:73:ed:45:53:c9:0b:5b:f6:33:ff:63:ea:2a:b3:
         b6:21:07:be:09:71:3d:a9:5c:c6:bd:85:77:43:02:39:f1:71:
         b3:ba:38:3e:ff:e7:16:17:90:fe:36:fd:a7:79:be:08:9b:6c:
         61:39:31:19:80:33:20:fe:cf:99:3a:4a:b4:2e:52:a3:4b:c9:
         98:b3:60:bf:5c:14:87:d4:61:2c:45:b7:6c:f9:07:6d:25:d9:
         0c:63:b8:f4:35:c1:f0:8b:de:2f:76:4e:e3:be:e7:ac:42:de:
         87:e8:db:fa:a4:ff:66:c4:01:6e:be:da:fc:3c:14:f7:aa:80:
         e2:17:e0:c2:54:36:08:2c:12:19:fe:ea:27:b7:c7:15:14:4d:
         23:bb:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:42 2026 by rpki-client