Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/e1VEEWB7Kntyd5kbfpG1WoME4Bk.roa
File:                     e1VEEWB7Kntyd5kbfpG1WoME4Bk.roa (raw, json)
Hash identifier:          jBXTN/pYyCY8YHU8njbkbfJ2whZyAAVgJgDbZ9e8EJs=
Subject key identifier:   7B:55:44:11:60:7B:2A:7B:72:77:99:1B:7E:91:B5:5A:83:04:E0:19
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       16A7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e1VEEWB7Kntyd5kbfpG1WoME4Bk.roa
Signing time:             Tue 31 Mar 2026 08:02:13 +0000
ROA not before:           Tue 31 Mar 2026 08:02:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5799 (0x16a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:02:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7B554411607B2A7B7277991B7E91B55A8304E019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:87:65:73:13:78:58:2c:67:c7:c0:48:4a:
                    23:47:c4:c0:f2:a3:06:eb:f7:23:e5:f7:bc:a9:d9:
                    0c:dd:8e:ce:0b:5c:41:64:1a:7f:c7:e2:9f:67:31:
                    33:51:94:ca:57:56:fd:82:fd:db:6a:9c:8d:e6:22:
                    63:d9:09:32:b9:6e:00:95:9f:62:f8:a7:aa:3b:dc:
                    af:52:79:ea:e2:b6:bb:93:72:7e:97:86:25:6a:34:
                    d2:76:85:60:9f:05:e5:02:de:e9:16:b6:8e:cf:82:
                    d6:5b:4f:7b:47:14:c2:bc:1b:5e:ff:82:2d:40:4e:
                    89:9e:38:ba:99:d4:b1:3a:1e:99:07:ea:bf:26:2e:
                    73:cd:2c:4a:55:5c:a8:a0:1f:14:3f:6e:6f:f3:52:
                    24:d4:55:d6:a9:9d:16:07:7e:0f:e0:45:84:02:99:
                    38:c4:e2:5c:9e:d5:ce:61:6e:0e:5e:78:29:e0:29:
                    af:a3:2e:02:6e:a8:63:4f:d5:31:c0:f5:8e:7b:b6:
                    e4:93:17:aa:90:d7:a6:98:7d:72:85:6b:18:c8:93:
                    d5:b2:f2:ec:db:77:54:1b:0e:d4:a0:d2:9e:b2:1a:
                    c4:57:e6:e7:16:c8:d3:60:61:ac:52:eb:f9:74:8d:
                    94:be:9b:74:71:e6:96:b1:89:d6:f0:86:82:d5:7b:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:55:44:11:60:7B:2A:7B:72:77:99:1B:7E:91:B5:5A:83:04:E0:19
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e1VEEWB7Kntyd5kbfpG1WoME4Bk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:99:14:06:57:4a:fe:24:10:71:10:b0:6b:77:ec:e9:2f:fd:
         8c:7a:1e:4d:67:b2:bf:63:a5:83:78:c1:8f:5a:5f:c1:d6:b9:
         95:66:72:9c:85:7a:bd:8f:c4:4e:08:ac:7b:bf:f9:6b:38:4d:
         90:be:74:e4:8e:b3:8e:c4:e4:a2:3e:9e:72:e0:65:e6:27:e6:
         34:37:b3:c0:a3:60:79:a6:e1:68:76:80:30:cf:57:b9:40:50:
         b6:e8:54:67:b8:94:9e:e8:7d:9c:2b:d6:6a:c8:67:5f:91:d9:
         77:5a:9d:b8:b0:c6:5c:e1:ae:6c:79:63:c7:66:19:4d:4a:17:
         fa:42:4b:5f:33:08:f7:ba:c1:9b:0d:d2:68:47:43:16:62:c7:
         58:a4:88:95:cd:1c:41:88:8a:4b:0b:18:76:14:d8:79:1e:bb:
         33:e2:3e:f1:79:b3:d9:cf:0a:94:3a:6e:26:ec:a1:43:3a:7b:
         b7:dd:aa:fd:a9:cc:f8:08:5e:f0:fd:79:bb:a7:3d:02:85:98:
         c2:26:b3:2c:f9:d5:78:81:c0:2e:14:68:a4:1a:8c:db:9c:4c:
         5e:fa:9d:c7:8a:69:d1:69:ff:f7:92:2e:7f:03:ff:96:d4:09:
         25:3d:2a:da:5b:38:da:96:3a:52:7f:9c:75:21:a0:fe:07:2e:
         fb:a1:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:33 2026 by rpki-client