Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cEY_miTDbgsu-JULTXGDQ1J_mMU.roa
File:                     cEY_miTDbgsu-JULTXGDQ1J_mMU.roa (raw, json)
Hash identifier:          VpMTO+uKnPRgyudFd9kTwvwt5AAXPCDx3bgL7L+TqvU=
Subject key identifier:   70:46:3F:9A:24:C3:6E:0B:2E:F8:95:0B:4D:71:83:43:52:7F:98:C5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1659
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cEY_miTDbgsu-JULTXGDQ1J_mMU.roa
Signing time:             Tue 31 Mar 2026 08:01:38 +0000
ROA not before:           Tue 31 Mar 2026 08:01:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5721 (0x1659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=70463F9A24C36E0B2EF8950B4D718343527F98C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:dd:08:3d:cd:a1:68:c1:37:47:b4:4b:21:
                    84:09:ad:af:84:6b:b1:a1:da:1e:8c:a7:47:5e:52:
                    e1:81:c6:8c:6e:ae:77:aa:41:96:9d:80:ff:a4:a5:
                    6b:cf:0e:4b:f6:18:64:69:fb:4f:8f:6d:0c:52:18:
                    11:9c:fe:5f:7b:e8:61:64:58:28:23:9b:df:26:55:
                    17:ed:74:28:a8:8c:36:fc:5f:b5:62:51:29:63:26:
                    ff:0a:7d:2f:b5:34:93:28:79:e9:50:93:56:f8:fb:
                    f8:67:bc:71:eb:9a:21:e8:00:6c:06:45:64:b3:d0:
                    29:dd:e0:5f:89:f1:9a:43:53:1d:51:43:b4:af:a5:
                    91:01:1a:ea:eb:63:43:3b:ca:34:4f:4e:45:ff:3c:
                    ea:8d:eb:52:ad:0e:9b:34:8e:6c:3a:fb:d4:8b:5a:
                    11:db:82:cc:d7:39:7d:a0:f9:45:80:55:29:69:84:
                    83:26:0c:97:61:89:aa:94:26:b8:33:2c:21:1e:e1:
                    50:9d:a7:2e:dc:9a:da:19:dd:ee:0d:68:3e:b7:0b:
                    09:32:6d:65:8c:85:8c:f3:e4:9f:b8:11:39:af:50:
                    ee:08:b5:e3:40:70:ac:00:b4:54:46:4e:d4:82:31:
                    44:73:e9:50:fb:8a:5a:b1:60:d7:ff:a7:98:df:73:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:3F:9A:24:C3:6E:0B:2E:F8:95:0B:4D:71:83:43:52:7F:98:C5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cEY_miTDbgsu-JULTXGDQ1J_mMU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:0f:af:21:fe:97:84:09:5b:dc:07:72:f5:e7:0f:3e:5a:94:
         ee:b0:2b:83:1a:cd:bd:36:89:d2:a7:ca:6e:5c:7e:d4:2f:b2:
         92:91:50:c9:f6:e7:72:85:6f:60:61:08:b9:e7:af:4d:7c:48:
         d1:56:6a:3c:2b:fd:f9:b9:c6:61:bc:9f:7f:99:59:a6:03:3b:
         eb:95:81:04:68:8c:c8:bb:1a:e3:75:06:05:31:3e:97:58:64:
         82:d7:c4:a5:3e:2d:c8:52:1f:14:e9:18:37:67:7e:21:99:4a:
         9d:de:08:99:9e:d7:30:02:61:6d:fe:d2:f3:13:0f:64:b6:d7:
         7f:ae:1e:29:8d:75:b3:17:a9:3e:34:7d:d3:95:63:bf:11:8d:
         cb:67:bd:1b:52:ad:e9:8a:5b:01:39:89:8e:d1:02:b2:92:a3:
         a6:43:eb:83:8b:47:7f:4b:df:ee:4d:07:7d:a5:cf:6e:d7:8c:
         e8:e5:41:08:0e:69:8e:00:04:07:16:57:13:59:3a:8d:a0:17:
         3f:7f:f1:d4:ba:63:98:cc:80:c7:20:8e:26:29:c0:88:a3:9e:
         e9:30:ee:88:9d:1e:a3:24:6d:b1:d0:ab:5b:88:38:1d:d2:3f:
         4c:2f:d0:16:a6:c5:87:23:37:d6:a8:bc:92:56:6f:ae:cc:0f:
         0c:06:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:57 2026 by rpki-client