Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa
File:                     iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa (raw, json)
Hash identifier:          GP7FFRudWCddza0uPUKpRgRENsITmTlCDUTcWK6RKgc=
Subject key identifier:   89:0E:48:85:93:A1:2A:A3:03:C3:4C:7D:9C:DC:5E:04:87:3C:AF:38
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa
Signing time:             Tue 31 Mar 2026 08:04:43 +0000
ROA not before:           Tue 31 Mar 2026 08:04:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6113 (0x17e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=890E488593A12AA303C34C7D9CDC5E04873CAF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:04:c6:77:d6:fc:e1:21:8a:6d:37:18:59:
                    3a:15:6a:3e:42:50:46:06:2a:d6:fe:fc:72:57:38:
                    e2:f9:44:30:cc:32:1b:c3:bb:96:e2:7b:54:05:b4:
                    d5:5f:7c:f0:a4:1a:6a:ac:5d:ec:54:8b:72:c4:d2:
                    49:78:1b:e6:39:19:48:b8:12:1b:30:92:2b:0d:31:
                    19:aa:70:3d:fa:d3:a1:e7:8b:aa:ab:35:a4:a6:8b:
                    6f:eb:32:64:1f:cd:e5:70:21:b1:5e:fc:f1:7e:52:
                    51:92:b6:6d:ad:2a:83:81:f5:52:c1:d8:10:a4:13:
                    20:df:cc:40:35:37:8e:3e:e1:92:95:3b:be:ef:e4:
                    7f:b6:19:cb:cf:5a:19:da:6a:18:da:5d:d9:23:dd:
                    ea:4d:61:a9:76:4c:f7:f1:7b:a8:96:2f:00:40:38:
                    0a:16:5d:f0:df:aa:72:8d:b2:84:64:a6:5c:c1:4b:
                    cc:ec:ab:c5:f9:72:8c:ae:6a:28:d9:5a:cd:a6:14:
                    6d:0b:59:3d:cf:93:b5:b0:a5:b1:85:08:b0:51:e1:
                    d7:2f:5d:df:ac:13:a5:b0:2b:4f:1f:0d:48:34:db:
                    32:4d:b8:d1:f7:a0:3f:ef:dd:7a:e9:71:e3:2e:69:
                    86:a5:fd:25:19:91:70:85:2c:ad:ce:45:aa:b7:61:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0E:48:85:93:A1:2A:A3:03:C3:4C:7D:9C:DC:5E:04:87:3C:AF:38
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iQ5IhZOhKqMDw0x9nNxeBIc8rzg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b0:77:d7:58:c5:dc:ff:b6:40:cb:ab:a7:ef:9e:f8:6a:63:
         2a:2f:be:50:d1:25:03:81:7a:1e:a2:c6:03:fa:cd:ae:aa:62:
         d7:75:46:16:58:a5:6e:e5:c9:80:5d:50:02:ea:17:61:50:ba:
         15:1a:3a:1b:d1:33:68:62:69:5a:70:22:90:68:78:fc:ef:a5:
         8d:fa:92:4d:20:1a:b6:4c:42:ad:2c:dd:7b:c2:4c:d2:25:fe:
         3a:dd:e2:b3:f5:9d:ff:39:73:d4:3c:9a:98:4f:1e:4c:ee:96:
         3f:d5:42:f7:4b:d7:c6:95:2b:0f:54:4c:59:7e:54:a4:89:91:
         81:f8:be:11:84:80:99:a9:a7:39:5c:8d:27:de:55:54:c9:56:
         82:03:05:16:10:9e:39:88:b1:46:db:9f:82:9d:87:e9:2d:82:
         c4:3e:ef:14:d3:80:7e:53:6b:81:85:be:44:f4:03:a0:c7:42:
         bc:c7:c1:c8:ea:da:88:05:48:64:90:bc:88:75:16:9d:b8:9b:
         05:49:94:81:32:34:0c:d6:03:4c:b8:ba:7c:fb:18:9e:9b:f0:
         5d:0b:68:cb:c8:bd:7b:bd:3c:dd:ee:a9:22:5b:ef:39:47:f9:
         b8:9c:f2:cb:01:67:be:f0:31:5e:d2:a4:8e:84:18:a7:35:bb:
         e5:b3:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:11 2026 by rpki-client