Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWp1UauUEpxM2ZTXEeaYX8QWNto.roa
File:                     eWp1UauUEpxM2ZTXEeaYX8QWNto.roa (raw, json)
Hash identifier:          WJK3wAf4o61+kxMSITdGGn0Am4zXr1wBhb9cM064bDI=
Subject key identifier:   79:6A:75:51:AB:94:12:9C:4C:D9:94:D7:11:E6:98:5F:C4:16:36:DA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       156F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWp1UauUEpxM2ZTXEeaYX8QWNto.roa
Signing time:             Tue 31 Mar 2026 07:59:38 +0000
ROA not before:           Tue 31 Mar 2026 07:59:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5487 (0x156f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=796A7551AB94129C4CD994D711E6985FC41636DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:c0:00:b4:27:06:f4:cd:c5:43:0f:8a:24:
                    71:54:bd:cd:05:67:e0:10:48:c6:3c:e3:39:cf:01:
                    f5:53:42:c7:be:01:d3:14:d1:64:9e:2e:f7:bf:19:
                    63:bb:13:80:25:e5:45:77:93:a1:17:db:43:40:55:
                    a2:16:76:32:7d:8d:ea:d3:36:85:fc:48:f8:a2:c3:
                    83:fa:fa:a9:68:38:de:32:82:21:f7:28:44:f9:32:
                    6f:a8:2e:2c:69:d1:06:05:15:69:41:a2:fb:65:57:
                    69:17:26:31:18:45:94:5b:5c:9d:05:5c:54:16:d0:
                    d6:01:4b:41:05:11:48:b4:45:23:e2:cb:a8:dd:33:
                    c1:ec:3f:d4:96:b6:80:5f:25:e7:1c:50:23:6e:b0:
                    b2:1b:49:83:9f:af:5f:92:a6:b6:cf:1e:f6:13:7d:
                    77:28:a8:27:26:7c:87:aa:b3:31:00:60:cb:1d:f1:
                    ba:1c:20:dd:2d:a4:92:ea:24:1c:cc:0e:db:fe:9b:
                    5c:4d:7c:f9:7c:12:28:b6:ac:61:e5:8f:e2:d8:89:
                    9b:0e:b2:95:64:4f:ec:0b:67:f9:de:42:06:e5:08:
                    e4:e3:6b:1b:2e:1d:ef:7d:97:b7:22:94:93:06:c0:
                    e6:76:1d:5c:d8:44:ac:f3:8f:33:c9:bf:24:d7:2f:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:75:51:AB:94:12:9C:4C:D9:94:D7:11:E6:98:5F:C4:16:36:DA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWp1UauUEpxM2ZTXEeaYX8QWNto.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:c2:a1:13:f4:71:dd:ff:00:89:fa:02:81:9a:1d:26:f3:79:
         9c:80:a8:8a:23:1b:48:c6:9e:c0:ad:15:3d:56:03:b6:1d:ea:
         7e:3f:18:42:33:a4:8d:00:c9:0f:8e:83:c7:f0:5f:80:8e:b9:
         68:53:a2:2b:32:b8:33:47:7f:26:b9:50:8e:49:7b:18:24:e6:
         31:9d:0d:d1:a5:40:4e:fd:28:48:79:dc:c2:8e:8a:2c:2b:b1:
         80:a9:f9:2a:b7:16:fb:be:2c:02:f6:53:f0:2c:76:77:9d:cd:
         2f:40:1a:38:c1:1d:03:d3:c0:aa:1d:40:1b:a1:c6:83:64:2b:
         53:af:ef:53:fc:6c:9d:0c:d8:e1:88:79:54:81:fa:b6:f3:9f:
         a7:05:84:c6:d2:c0:a3:24:2f:db:bd:34:c9:ca:5f:1d:96:6d:
         47:bc:60:ef:0e:ba:01:a0:16:ce:35:61:3c:bd:2f:e7:85:13:
         57:a9:5f:8c:70:5d:1a:d4:e5:a1:c7:32:bd:02:16:7e:b1:12:
         79:09:a9:15:de:01:8a:d5:e0:46:b1:56:5d:48:bd:7c:ed:b7:
         0a:0b:de:db:fd:78:5e:9a:ae:16:b0:ee:87:a0:fb:c9:6c:6b:
         cc:62:40:b2:76:30:f1:b6:e3:c9:75:31:37:b0:fe:8a:c3:8d:
         b2:13:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:13 2026 by rpki-client